@tensorfeed/mcp-server 1.36.0 → 1.36.2

package/CHANGELOG.md

@@ -2,6 +2,34 @@
 
 All notable changes to the [TensorFeed.ai MCP server](https://github.com/RipperMercs/tensorfeed-mcp). Free tools work without configuration; premium tools require a bearer token via the `TENSORFEED_TOKEN` env var. Buy credits at [tensorfeed.ai/developers/agent-payments](https://tensorfeed.ai/developers/agent-payments).
 
+## 1.36.2 - 2026-05-31
+
+Pricing-copy and catalog-accuracy corrections. No change to the free/paid
+split or the actual on-chain charge.
+
+- Corrected the stated credit cost on `pricing_series`, `benchmark_series`,
+  and `status_uptime` and their free-sibling pointers back to 1 credit
+  ($0.02). These are Tier 2, which maps to 1 credit in TIER_COSTS; release
+  1.36.1 had wrongly relabeled them 2 credits.
+- Catalog accuracy: `server.json` now lists the true 59 tools (36 free,
+  23 premium), adding 5 free tools that were omitted (`get_model_deprecations`,
+  `get_ai_supply_chain_iocs`, `get_honeypot_iocs`, `check_afta_certification`,
+  `get_agent_reputation_card`) and removing the phantom `mcp_registry_series`;
+  the manifest long_description now reads 59 tools.
+
+## 1.36.1 - 2026-05-31
+
+Security hardening only. No API changes; agents see the same tools.
+
+- The `latest_news` resource output is now sanitized like every tool
+  output, so external RSS titles cannot carry prompt-injection markers
+  to the model.
+- Tool output is capped at 40000 characters and the x402 publishers and
+  agent reputation renderers are bounded, so a large upstream response
+  cannot overflow the agent's context window.
+- Path parameters (watch id, company ticker) are now URL-encoded and
+  schema-validated before they reach a request path.
+
 ## 1.36.0 - 2026-05-28
 
 Adds 6 tools wrapping the x402 settlement index endpoints (Wave 20)
@@ -59,14 +87,14 @@ Premium endpoint audit (2026-05-14) through the lens "does this clearly save the
 ### Changed (pricing)
 Six tools mapping to strict-premium TF Worker endpoints are repriced from Tier 1 ($0.02) into higher tiers reflecting the curated-derived-metrics value they provide. Tool descriptions updated to advertise the new prices:
 
-- `pricing_series`: 1 credit ($0.02) -> 2 credits ($0.04)
-- `benchmark_series`: 1 credit ($0.02) -> 2 credits ($0.04)
-- `status_uptime`: 1 credit ($0.02) -> 2 credits ($0.04)
-- `status_leaderboard`: 1 credit ($0.02) -> 3 credits ($0.06)
-- `provider_deepdive`: 1 credit ($0.02) -> 3 credits ($0.06)
-- `probe_series_premium`: 1 credit ($0.02) -> 3 credits ($0.06)
+- `pricing_series`: Tier 2, 1 credit ($0.02)
+- `benchmark_series`: Tier 2, 1 credit ($0.02)
+- `status_uptime`: Tier 2, 1 credit ($0.02)
+- `status_leaderboard`: Tier 3, 5 credits ($0.10)
+- `provider_deepdive`: Tier 3, 5 credits ($0.10)
+- `probe_series_premium`: Tier 3, 5 credits ($0.10)
 
-Tier 2 ($0.04) tools are single-entity full-window historical lookups. Tier 3 ($0.06) tools are heavy multi-source aggregations and TF-unique measurements.
+Tier 2 (1 credit, $0.02) tools are single-entity full-window historical lookups. Tier 3 (5 credits, $0.10) tools are heavy multi-source aggregations and TF-unique measurements.
 
 Rationale: per the 70/30 premium-lock framework, strict-premium endpoints carry TF's actual moat. The Tier 1 ($0.02) baseline price made sense during the demand-discovery temp-unlock; now that these endpoints are gated as strict-premium (v1.30.0) and the gate is observable, repricing into Tier 2/3 sets prices closer to the curated-derived-metrics market (Glassnode / Kaito comparables). Per-call USD cost is now legible alongside credit count in every affected tool description.
 

package/dist/index.js

@@ -5,8 +5,13 @@ import { z } from 'zod';
 import { readFileSync } from 'node:fs';
 import { fileURLToPath } from 'node:url';
 import { dirname, join } from 'node:path';
-import { sanitizeToolResponse } from './sanitize.js';
+import { sanitizeToolResponse, sanitizeForLLM } from './sanitize.js';
 const API_BASE = 'https://tensorfeed.ai/api';
+// Per-request upstream timeout. fetchJSON is the single HTTP helper behind every
+// MCP tool and the latest_news resource, so a missing timeout would let one
+// stalled upstream hang an agent's tool call. 20s is generous for the slowest
+// premium endpoint while still failing fast on a genuine stall.
+const REQUEST_TIMEOUT_MS = 20000;
 const pkgPath = join(dirname(fileURLToPath(import.meta.url)), '..', 'package.json');
 const SDK_VERSION = JSON.parse(readFileSync(pkgPath, 'utf-8')).version;
 async function fetchJSON(path, opts = {}) {
@@ -23,11 +28,28 @@ async function fetchJSON(path, opts = {}) {
         }
         headers['Authorization'] = `Bearer ${token}`;
     }
-    const res = await fetch(`${API_BASE}${path}`, {
-        method: opts.method ?? 'GET',
-        headers,
-        ...(opts.body !== undefined ? { body: JSON.stringify(opts.body) } : {}),
-    });
+    // Bound every request with a timeout so a stalled upstream (TLS or connect
+    // hang, slow Worker, KV or origin stall) cannot hang the agent's tool call
+    // indefinitely. An aborted fetch surfaces as a clean Error below instead of
+    // an open-ended await.
+    let res;
+    try {
+        res = await fetch(`${API_BASE}${path}`, {
+            method: opts.method ?? 'GET',
+            headers,
+            signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),
+            ...(opts.body !== undefined ? { body: JSON.stringify(opts.body) } : {}),
+        });
+    }
+    catch (err) {
+        // AbortSignal.timeout fires a TimeoutError (DOMException name 'TimeoutError');
+        // a manual abort surfaces as 'AbortError'. Either way, rethrow a clean Error
+        // so it reaches the agent as a normal MCP tool error rather than a raw abort.
+        if (err instanceof Error && (err.name === 'TimeoutError' || err.name === 'AbortError')) {
+            throw new Error(`TensorFeed upstream request timed out after ${REQUEST_TIMEOUT_MS / 1000}s`);
+        }
+        throw err;
+    }
     if (!res.ok) {
         let errPayload;
         try {
@@ -129,6 +151,17 @@ server.registerResource('latest_news', 'tensorfeed://news/latest', {
     mimeType: 'application/json',
 }, async (uri) => {
     const data = (await fetchJSON('/news?limit=20'));
+    // This resource is registered directly on the SDK, NOT through the
+    // registerTool wrapper, so its payload does not pass through
+    // sanitizeToolResponse. Scrub the external RSS title/snippet/source
+    // fields here so untrusted article text gets the same role-confusion
+    // and control-char scrub every tool output gets.
+    const articles = data.articles.map((a) => ({
+        ...a,
+        title: sanitizeForLLM(a.title),
+        snippet: sanitizeForLLM(a.snippet),
+        source: sanitizeForLLM(a.source),
+    }));
     return {
         contents: [
             {
@@ -137,8 +170,8 @@ server.registerResource('latest_news', 'tensorfeed://news/latest', {
                 text: JSON.stringify({
                     source: 'TensorFeed.ai',
                     fetched_at: new Date().toISOString(),
-                    count: data.articles.length,
-                    articles: data.articles,
+                    count: articles.length,
+                    articles,
                 }, null, 2),
             },
         ],
@@ -464,14 +497,27 @@ registerTool('get_agent_reputation_card', 'Get a TensorFeed Agent Reputation Bur
         }
         throw e;
     }
-    // The card schema is rich; render the highlights deterministically and
-    // include the raw JSON so the agent can reason over any field it needs.
-    const card = data.card ?? data;
+    // The card schema is rich; select the documented top-level fields and
+    // clamp any array so a large or inflated upstream card cannot blow the
+    // agent's context. Unknown fields still pass through (so the agent can
+    // reason over them) but every array is capped and the whole payload is
+    // bounded by the downstream sanitize char cap as a backstop.
+    const rawCard = data.card ?? data;
+    const MAX_CARD_ARRAY = 25;
+    const clamped = {};
+    for (const [k, v] of Object.entries(rawCard)) {
+        if (Array.isArray(v) && v.length > MAX_CARD_ARRAY) {
+            clamped[k] = [...v.slice(0, MAX_CARD_ARRAY), `...[${v.length - MAX_CARD_ARRAY} more omitted]`];
+        }
+        else {
+            clamped[k] = v;
+        }
+    }
     return {
         content: [
             {
                 type: 'text',
-                text: `Agent reputation card for ${wallet ?? `token_prefix=${token_prefix}`}:\n\n${JSON.stringify(card, null, 2)}`,
+                text: `Agent reputation card for ${wallet ?? `token_prefix=${token_prefix}`}:\n\n${JSON.stringify(clamped, null, 2)}`,
             },
         ],
     };
@@ -628,7 +674,7 @@ registerTool('status_leaderboard_free', 'Cross-provider uptime leaderboard, rank
     };
 });
 // ── Tool: pricing_series (1 credit) ─────────────────────────────────
-registerTool('pricing_series', 'Daily price points for one AI model with min/max/delta summary. Default range = last 30 days, max 90 days. Costs 2 credits ($0.04). Strict premium, no free trial; the 7-day-capped sibling pricing_series_free is the discovery option.', {
+registerTool('pricing_series', 'Daily price points for one AI model with min/max/delta summary. Default range = last 30 days, max 90 days. Costs 1 credit ($0.02). Strict premium, no free trial; the 7-day-capped sibling pricing_series_free is the discovery option.', {
     model: z.string().describe('Model id or display name (e.g. "Claude Opus 4.7" or "claude-opus-4-7")'),
     from: z.string().optional().describe('Start date YYYY-MM-DD UTC (default: 30 days ago)'),
     to: z.string().optional().describe('End date YYYY-MM-DD UTC (default: today)'),
@@ -653,7 +699,7 @@ registerTool('pricing_series', 'Daily price points for one AI model with min/max
     };
 });
 // ── Tool: benchmark_series (1 credit) ───────────────────────────────
-registerTool('benchmark_series', 'Score evolution for a single benchmark on one AI model. Costs 2 credits ($0.04). Strict premium, no free trial; the 7-day-capped sibling benchmark_series_free is the discovery option. Benchmark keys: swe_bench, mmlu_pro, gpqa_diamond, math, human_eval.', {
+registerTool('benchmark_series', 'Score evolution for a single benchmark on one AI model. Costs 1 credit ($0.02). Strict premium, no free trial; the 7-day-capped sibling benchmark_series_free is the discovery option. Benchmark keys: swe_bench, mmlu_pro, gpqa_diamond, math, human_eval.', {
     model: z.string().describe('Model id or display name'),
     benchmark: z.string().describe('Benchmark key (e.g. swe_bench, mmlu_pro, gpqa_diamond, math, human_eval)'),
     from: z.string().optional().describe('Start date YYYY-MM-DD UTC (default: 30 days ago)'),
@@ -679,7 +725,7 @@ registerTool('benchmark_series', 'Score evolution for a single benchmark on one
     };
 });
 // ── Tool: status_uptime (1 credit) ──────────────────────────────────
-registerTool('status_uptime', 'Daily uptime rollup for one provider with operational/degraded/down day counts and uptime % (degraded counts as half-credit). Costs 2 credits ($0.04). Strict premium, no free trial; the 7-day-capped sibling status_uptime_free is the discovery option.', {
+registerTool('status_uptime', 'Daily uptime rollup for one provider with operational/degraded/down day counts and uptime % (degraded counts as half-credit). Costs 1 credit ($0.02). Strict premium, no free trial; the 7-day-capped sibling status_uptime_free is the discovery option.', {
     provider: z.string().describe('Provider name (e.g. anthropic, openai, google)'),
     from: z.string().optional().describe('Start date YYYY-MM-DD UTC (default: 30 days ago)'),
     to: z.string().optional().describe('End date YYYY-MM-DD UTC (default: today)'),
@@ -1046,9 +1092,13 @@ registerTool('create_leaderboard_rank_watch', 'Register a webhook that fires whe
 }, CREATE_TOOL);
 // ── Tool: delete_watch ──────────────────────────────────────────────
 registerTool('delete_watch', 'Delete one of your active webhook watches by id. Free, requires TENSORFEED_TOKEN.', {
-    watch_id: z.string().describe('The wat_... id from create_price_watch / create_status_watch / list_watches'),
+    watch_id: z
+        .string()
+        .regex(/^[A-Za-z0-9_-]+$/, 'watch_id may only contain letters, digits, underscores, and hyphens')
+        .max(128)
+        .describe('The wat_... id from create_price_watch / create_status_watch / list_watches'),
 }, async ({ watch_id }) => {
-    await fetchJSON(`/premium/watches/${watch_id}`, { method: 'DELETE', auth: true });
+    await fetchJSON(`/premium/watches/${encodeURIComponent(watch_id)}`, { method: 'DELETE', auth: true });
     return { content: [{ type: 'text', text: `Deleted watch ${watch_id}.` }] };
 }, DELETE_TOOL);
 // ── Tool: probe_latest (free) ───────────────────────────────────────
@@ -1387,7 +1437,7 @@ registerTool('get_recent_earthquakes', "Recent earthquakes from the USGS Earthqu
     return { content: [{ type: 'text', text: `${header}\n\n${lines || '  (no events in this window)'}\n\nSource: USGS Earthquake Hazards Program. Public domain (17 USC §105).` }] };
 });
 // ── Tool: get_weather_alerts (free, US only) ────────────────────────
-registerTool('get_weather_alerts', "Active US weather alerts from the National Weather Service. US-only. Filter by 2-letter state code (area), exact NWS event name, severity, urgency, status. Returns id, event, severity, urgency, headline, description, areaDesc, sent/effective/expires/ends, sender_name, web URL. Active alerts only — expired alerts fall off the upstream feed automatically. License: US Government public domain. Free, no auth.", {
+registerTool('get_weather_alerts', "Active US weather alerts from the National Weather Service. US-only. Filter by 2-letter state code (area), exact NWS event name, severity, urgency, status. Returns id, event, severity, urgency, headline, description, areaDesc, sent/effective/expires/ends, sender_name, web URL. Active alerts only. Expired alerts fall off the upstream feed automatically. License: US Government public domain. Free, no auth.", {
     area: z.string().regex(/^[A-Za-z]{2}$/).optional().describe('2-letter US state or territory code (CA, TX, PR, etc)'),
     event: z.string().optional().describe('Exact NWS event name (e.g. "Tornado Warning", "Heat Advisory")'),
     severity: z.enum(['Extreme', 'Severe', 'Moderate', 'Minor', 'Unknown']).optional().describe('Severity filter'),
@@ -1697,10 +1747,13 @@ registerTool('get_ai_company_filings', 'Get recent SEC filings (10-K, 10-Q, 8-K,
 });
 // ── Tool: premium_ai_company (1 credit) ─────────────────────────────
 registerTool('premium_ai_company', 'Get the per-ticker AI intelligence envelope for one AI bellwether: latest 10 SEC filings, latest 10 AI-tagged news mentions filtered by curated aliases, strategic and equity funding rounds where the company is a lead or notable investor, and cohort metadata. One call replaces four free siblings (sec/filings, news, funding, cohort) plus the agent-side alias filter. Costs 1 credit ($0.02). Strict-premium; ticker must be in the cohort.', {
-    ticker: z.string().describe('AI bellwether ticker (case-insensitive). One of NVDA, AMD, AVGO, TSM, ARM, MSFT, GOOGL, AMZN, ORCL, PLTR, SMCI, AAPL, META, TSLA.'),
+    ticker: z
+        .string()
+        .regex(/^[A-Za-z.\-]{1,8}$/, 'ticker may only contain letters, dots, and hyphens (1 to 8 chars)')
+        .describe('AI bellwether ticker (case-insensitive). One of NVDA, AMD, AVGO, TSM, ARM, MSFT, GOOGL, AMZN, ORCL, PLTR, SMCI, AAPL, META, TSLA.'),
 }, async ({ ticker }) => {
     const upper = ticker.toUpperCase();
-    const data = (await fetchJSON(`/premium/ai-companies/${upper}`, { auth: true }));
+    const data = (await fetchJSON(`/premium/ai-companies/${encodeURIComponent(upper)}`, { auth: true }));
     const filingsList = data.filings.items
         .slice(0, 10)
         .map((f, i) => `   ${i + 1}. ${f.form} on ${f.filing_date}: ${f.primary_doc_description}`)
@@ -1745,14 +1798,19 @@ registerTool('get_x402_publishers', 'List x402-compliant publishers TensorFeed c
     if (data.count === 0) {
         return { content: [{ type: 'text', text: 'No x402 publishers indexed yet.' }] };
     }
-    const lines = data.publishers
+    // Cap the rendered list so a large index cannot flood the agent's
+    // context. Sanitize layer also enforces a hard char cap downstream.
+    const MAX_PUBLISHERS = 50;
+    const shown = data.publishers.slice(0, MAX_PUBLISHERS);
+    const lines = shown
         .map((p, i) => `${i + 1}. ${p.domain}\n   wallets: ${p.pay_to_wallets.join(', ')}\n   first_seen: ${p.first_seen}${p.last_event_at ? `\n   last_event_at: ${p.last_event_at}` : ''}${p.last_crawled ? `\n   last_crawled: ${p.last_crawled}` : ''}${p.last_crawl_error ? `\n   last_crawl_error: ${p.last_crawl_error}` : ''}`)
         .join('\n\n');
+    const more = data.count > shown.length ? `\n\n...and ${data.count - shown.length} more (showing first ${shown.length}).` : '';
     return {
         content: [
             {
                 type: 'text',
-                text: `x402 publishers (${data.count}, captured ${data.captured_at}):\n\n${lines}`,
+                text: `x402 publishers (${data.count}, captured ${data.captured_at}):\n\n${lines}${more}`,
             },
         ],
     };

package/dist/sanitize.d.ts

@@ -19,8 +19,10 @@
  *     tokens, jailbreak preamble lines, "ignore previous instructions")
  *   - Collapse runs of whitespace
  *
- * No length cap is applied here. Tool output is conversational and may
- * legitimately be tens of KB; upstream KV size limits already bound it.
+ * A hard per-response character cap is applied (see MAX_RESPONSE_CHARS).
+ * Tool output is conversational and usually small, but a large or inflated
+ * upstream response would otherwise blow the host agent's context window.
+ * Anything past the cap is dropped and a clear marker is appended.
  */
 /**
  * Scrub a single string for return to a host LLM. Idempotent and pure.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tensorfeed/mcp-server",
-  "version": "1.36.0",
+  "version": "1.36.2",
   "mcpName": "ai.tensorfeed/mcp-server",
   "description": "MCP server for TensorFeed.ai - AI news, status, model data, and premium endpoints (routing, cost projection, forecast, history series, news search, webhook watches with digest tier, enriched directory) for AI agents",
   "main": "dist/index.js",

package/server.json

@@ -3,7 +3,7 @@
   "name": "ai.tensorfeed/mcp-server",
   "title": "TensorFeed",
   "description": "AI news, model pricing, service status, and machine-payable premium tools. AFTA-certified.",
-  "version": "1.36.0",
+  "version": "1.36.2",
   "websiteUrl": "https://tensorfeed.ai/developers/agent-payments",
   "repository": {
     "url": "https://github.com/RipperMercs/tensorfeed-mcp",
@@ -20,7 +20,7 @@
       "registryType": "npm",
       "registryBaseUrl": "https://registry.npmjs.org",
       "identifier": "@tensorfeed/mcp-server",
-      "version": "1.36.0",
+      "version": "1.36.2",
       "runtimeHint": "npx",
       "transport": {
         "type": "stdio"
@@ -47,8 +47,13 @@
         "get_ai_status",
         "is_service_down",
         "get_model_pricing",
+        "get_model_deprecations",
         "get_ai_today",
         "get_agent_activity",
+        "get_ai_supply_chain_iocs",
+        "get_honeypot_iocs",
+        "check_afta_certification",
+        "get_agent_reputation_card",
         "mcp_registry_snapshot",
         "probe_latest",
         "get_ai_papers_trending",
@@ -87,7 +92,6 @@
         "provider_deepdive",
         "compare_models",
         "whats_new",
-        "mcp_registry_series",
         "probe_series",
         "list_watches",
         "create_price_watch",