@tensorfeed/mcp-server 1.28.0 → 1.29.0

package/CHANGELOG.md

@@ -2,6 +2,21 @@
 
 All notable changes to the [TensorFeed.ai MCP server](https://github.com/RipperMercs/tensorfeed-mcp). Free tools work without configuration; premium tools require a bearer token via the `TENSORFEED_TOKEN` env var. Buy credits at [tensorfeed.ai/developers/agent-payments](https://tensorfeed.ai/developers/agent-payments).
 
+## 1.29.0 - 2026-05-13
+
+### Added
+- `get_honeypot_iocs` (free): wraps `/api/security/iocs.json`. First-party honeypot indicators-of-compromise observed against TensorFeed.ai trap endpoints over the last 30 days. Filter by `type` (ip / ua / path), cap with `limit` (default 50, max 500). License CC0; pure first-party observation, not a re-export. Pairs with `get_ai_supply_chain_iocs` (GHSA-derived) for a two-layer defender feed.
+- `check_afta_certification` (free): wraps `/api/afta-certify/check`. Runs 6 deterministic AFTA probes (well-known endpoints, x402 manifest, pricing transparency, free trial, federation membership, signed receipts) against any domain and returns score, verdict, and per-check pass/fail. Useful for federation prospects, agent governance audits, and demand-side trust signals.
+- `get_agent_reputation_card` (free): wraps `/api/agents/reputation/{wallet}` and `/api/agents/reputation/by-token/{prefix}`. Returns the Agent Reputation Bureau card for an EVM wallet or tf_live_ token prefix: reliability, activity, spend, streak, composite trust score, trust grade (S/A/B/C/D), flags, claim status, leaderboard ranks. Cards rebuild daily 04:50 UTC. Returns a helpful 404 hint when no card exists yet.
+
+### Added (MCP primitive)
+- `tensorfeed://news/latest` resource: latest 20 AI news articles as a JSON resource. First TF use of the MCP `resources` primitive, exposed alongside the existing `get_ai_news` tool. Hosts that prefer data-shaped surfaces (Claude Desktop, some agent frameworks) can attach the news feed directly without going through tool-call decision loops.
+
+### Fixed
+- `registerTool` now auto-infers `PREMIUM_READ_TOOL` annotations (`idempotentHint: false`) for any tool whose description includes "Costs N credit". Previously all read tools defaulted to `idempotentHint: true`, which meant agents that retried paid calls on transient failure could double-charge users. Affects every paid read tool (premium_routing, pricing_series, benchmark_series, status_uptime, status_leaderboard, premium_agents_directory, whats_new, compare_models, provider_deepdive, cost_projection, news_search, probe_series_premium). Write tools (create_*_watch / delete_watch) keep their explicit CREATE_TOOL / DELETE_TOOL annotations and bypass the inference.
+
+Tool count: 46 -> 49. First MCP resource live. Annotations now spec-honest about retry semantics.
+
 ## 1.28.0 - 2026-05-13
 
 ### Added

package/dist/index.js

@@ -78,6 +78,16 @@ const READ_TOOL = {
     idempotentHint: true,
     openWorldHint: true,
 };
+// Paid read tools: same as READ_TOOL but idempotentHint: false because each
+// call burns a credit. Agents that retry on transient failure under
+// READ_TOOL semantics would double-charge users on flaky networks. Applied
+// automatically below when a tool's description includes "Costs N credit".
+const PREMIUM_READ_TOOL = {
+    readOnlyHint: true,
+    destructiveHint: false,
+    idempotentHint: false,
+    openWorldHint: true,
+};
 const CREATE_TOOL = {
     readOnlyHint: false,
     destructiveHint: false,
@@ -90,15 +100,50 @@ const DELETE_TOOL = {
     idempotentHint: true,
     openWorldHint: true,
 };
-function registerTool(name, description, paramsSchema, cb, annotations = READ_TOOL) {
+const PAID_TOOL_RE = /Costs \d+ credit/i;
+function registerTool(name, description, paramsSchema, cb, annotations) {
+    // When no explicit annotation is passed, infer from the description.
+    // Free reads: READ_TOOL (idempotent). Paid reads (description mentions
+    // "Costs N credit"): PREMIUM_READ_TOOL (NOT idempotent, because each
+    // call burns a credit and naive retry would double-charge). Tools that
+    // mutate (create_*_watch / delete_watch) pass CREATE_TOOL / DELETE_TOOL
+    // explicitly and bypass this inference.
+    const finalAnnotations = annotations ?? (PAID_TOOL_RE.test(description) ? PREMIUM_READ_TOOL : READ_TOOL);
     const wrapped = (async (args, extra) => {
         const result = await cb(args, extra);
         return sanitizeToolResponse(result);
     });
     // Direct dispatch to the SDK's underlying registration. Do not call
     // registerTool() here or it will recurse forever.
-    return server.tool(name, description, paramsSchema, annotations, wrapped);
+    return server.tool(name, description, paramsSchema, finalAnnotations, wrapped);
 }
+// ── Resource: tensorfeed://news (latest 20 AI articles) ─────────────
+// MCP's `resources` primitive is a parallel surface to tools. Hosts can
+// list resources, subscribe to them, and fetch them by URI without going
+// through the tool-call decision loop. We expose the latest news as a
+// resource AS WELL AS the get_ai_news tool, so clients that prefer
+// data-shaped surfaces (Claude Desktop, some agent frameworks) can attach
+// the news feed directly. Same upstream endpoint; different MCP primitive.
+server.registerResource('latest_news', 'tensorfeed://news/latest', {
+    description: 'Latest 20 AI news articles aggregated by TensorFeed.ai. Refreshed every ~10 minutes from 15+ sources (Anthropic, OpenAI, Google, TechCrunch, The Verge, arXiv, and more). Each row carries title, source, URL, snippet, categories, and publication timestamp. JSON payload. Refresh on `resources/read`; no subscription required.',
+    mimeType: 'application/json',
+}, async (uri) => {
+    const data = (await fetchJSON('/news?limit=20'));
+    return {
+        contents: [
+            {
+                uri: uri.toString(),
+                mimeType: 'application/json',
+                text: JSON.stringify({
+                    source: 'TensorFeed.ai',
+                    fetched_at: new Date().toISOString(),
+                    count: data.articles.length,
+                    articles: data.articles,
+                }, null, 2),
+            },
+        ],
+    };
+});
 // ── Tool: get_ai_news ───────────────────────────────────────────────
 registerTool('get_ai_news', 'Get the latest AI news articles from TensorFeed.ai. Aggregates from 15+ sources including Anthropic, OpenAI, Google, TechCrunch, The Verge, arXiv, and more.', {
     category: z.string().optional().describe('Filter by category (e.g. "anthropic", "openai", "research", "tools")'),
@@ -323,6 +368,114 @@ registerTool('get_ai_supply_chain_iocs', 'Get the latest AI/ML supply-chain indi
     const footer = `\n\nPosture: ${data.posture}`;
     return { content: [{ type: 'text', text: `${header}\n\n${body}${footer}` }] };
 });
+// ── Tool: get_honeypot_iocs ─────────────────────────────────────────
+registerTool('get_honeypot_iocs', 'Get the TensorFeed honeypot indicators-of-compromise feed. Returns attacker IP addresses, user agents, and target paths observed against TensorFeed.ai trap endpoints over the last 30 days. Pure first-party observation; not a re-export of upstream threat intel. License CC0; downstream defenders may ingest and pre-block at their edge. Each row: ioc value, ioc type (ip / ua / path), first_seen, last_seen, hit_count. Useful as a low-noise honeypot signal layered on top of public IOC feeds.', {
+    type: z
+        .enum(['ip', 'ua', 'path'])
+        .optional()
+        .describe('Filter to one IOC type. Omit to return all types.'),
+    limit: z
+        .number()
+        .min(1)
+        .max(500)
+        .optional()
+        .describe('Maximum number of IOCs to return (default 50, max 500)'),
+}, async ({ type, limit }) => {
+    const data = (await fetchJSON('/security/iocs.json'));
+    const typeWanted = type?.toLowerCase();
+    const filtered = data.iocs.filter((e) => !typeWanted || e.type.toLowerCase() === typeWanted);
+    const cap = Math.min(limit ?? 50, 500);
+    const rows = filtered.slice(0, cap);
+    if (rows.length === 0) {
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: `No honeypot IOCs matched (total in feed: ${data.total_iocs}, window ${data.window_hours}h, generated ${data.generated_at}).`,
+                },
+            ],
+        };
+    }
+    const body = rows
+        .map((e, i) => `${i + 1}. [${e.type}] ${e.ioc}\n   hits: ${e.hit_count}  first: ${e.first_seen}  last: ${e.last_seen}`)
+        .join('\n');
+    const header = `TensorFeed honeypot IOCs (${rows.length} of ${filtered.length} matched, ${data.total_iocs} in feed, ${data.window_hours}h window, generated ${data.generated_at}):`;
+    const footer = `\n\nLicense: ${data.policy.license}. ${data.policy.description}`;
+    return { content: [{ type: 'text', text: `${header}\n\n${body}${footer}` }] };
+});
+// ── Tool: check_afta_certification ──────────────────────────────────
+registerTool('check_afta_certification', 'Check whether a domain is AFTA-certified (Agent Fair-Trade Agreement). AFTA is an open standard: cryptographically-signed receipts, transparent pricing, no-charge guarantees for failed responses, on-chain settlement, and federated trust between participating sites. The check runs 6 deterministic probes against the target domain (e.g. tensorfeed.ai, terminalfeed.io): well-known endpoint, receipts endpoint, x402 payment manifest, pricing transparency, free trial availability, federation membership. Returns score, verdict, and which checks passed/failed.', {
+    domain: z
+        .string()
+        .describe('Domain to certify (e.g. "tensorfeed.ai", "terminalfeed.io"). Bare host, no protocol.'),
+}, async ({ domain }) => {
+    const data = (await fetchJSON(`/afta-certify/check?domain=${encodeURIComponent(domain)}`));
+    const lines = data.checks.map((c) => `  ${c.passed ? 'PASS' : 'FAIL'}  ${c.name}${c.details ? ` (${c.details})` : ''}`);
+    const certified = data.afta_certified ? 'AFTA-CERTIFIED' : 'NOT certified';
+    const next = data.next_step ? `\nNext step: ${data.next_step}` : '';
+    return {
+        content: [
+            {
+                type: 'text',
+                text: `Domain: ${data.domain}\nScore: ${data.score}/${data.max}\nVerdict: ${data.verdict} (${certified})\nChecked: ${data.checked_at}\n\nChecks:\n${lines.join('\n')}${next}`,
+            },
+        ],
+    };
+});
+// ── Tool: get_agent_reputation_card ─────────────────────────────────
+registerTool('get_agent_reputation_card', 'Get a TensorFeed Agent Reputation Bureau card for an EVM wallet address or a tf_live_ token prefix. Cards rebuild daily at 04:50 UTC from on-chain receipts plus TF telemetry. Includes reliability score, paid-call activity, total USDC spent, longest paid streak, composite trust score (0-1), trust grade (S/A/B/C/D), flags (sybil_risk, abuse, paid_free_ratio_low), operator-claim status (wallet -> display name signed by EOA), and per-metric leaderboard ranks. Returns null/404 for unknown agents (TF only builds cards for wallets observed in production). Useful for assessing third-party agent trustworthiness before delegating high-value work.', {
+    wallet: z
+        .string()
+        .optional()
+        .describe('EVM wallet address (0x... 42 chars). Provide either this OR token_prefix.'),
+    token_prefix: z
+        .string()
+        .optional()
+        .describe('First N chars of an agent\'s tf_live_ bearer token. Useful when the agent has not signed an operator-claim yet.'),
+}, async ({ wallet, token_prefix }) => {
+    if (!wallet && !token_prefix) {
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: 'Provide either `wallet` (0x... EVM address) or `token_prefix` (tf_live_... token prefix). Both are accepted, one is required.',
+                },
+            ],
+        };
+    }
+    const path = wallet
+        ? `/agents/reputation/${encodeURIComponent(wallet)}`
+        : `/agents/reputation/by-token/${encodeURIComponent(token_prefix)}`;
+    let data;
+    try {
+        data = await fetchJSON(path);
+    }
+    catch (e) {
+        const msg = e instanceof Error ? e.message : String(e);
+        if (msg.includes('404') || msg.toLowerCase().includes('not_found')) {
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: `No reputation card for ${wallet ?? token_prefix}. TF only builds cards for wallets observed in production; if this is a real agent that has paid TF before, it should appear in the next daily rebuild (04:50 UTC).`,
+                    },
+                ],
+            };
+        }
+        throw e;
+    }
+    // The card schema is rich; render the highlights deterministically and
+    // include the raw JSON so the agent can reason over any field it needs.
+    const card = data.card ?? data;
+    return {
+        content: [
+            {
+                type: 'text',
+                text: `Agent reputation card for ${wallet ?? `token_prefix=${token_prefix}`}:\n\n${JSON.stringify(card, null, 2)}`,
+            },
+        ],
+    };
+});
 // ════════════════════════════════════════════════════════════════════
 // PREMIUM TOOLS (require TENSORFEED_TOKEN env var, paid in USDC on Base)
 // ════════════════════════════════════════════════════════════════════

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tensorfeed/mcp-server",
-  "version": "1.28.0",
+  "version": "1.29.0",
   "mcpName": "ai.tensorfeed/mcp-server",
   "description": "MCP server for TensorFeed.ai - AI news, status, model data, and premium endpoints (routing, cost projection, forecast, history series, news search, webhook watches with digest tier, enriched directory) for AI agents",
   "main": "dist/index.js",