@wickedlabs/wicked-mcp 0.7.4 → 0.7.5

package/README.md

@@ -1,5 +1,6 @@
 # WickedAPI MCP Server
 
+[![WickedAPI/wicked-mcp MCP server](https://glama.ai/mcp/servers/WickedAPI/wicked-mcp/badges/score.svg)](https://glama.ai/mcp/servers/WickedAPI/wicked-mcp)
 [![smithery badge](https://smithery.ai/badge/wickedapi/wicked-mcp)](https://smithery.ai/servers/wickedapi/wicked-mcp)
 
 MCP server for the whole [Wicked](https://wickedapi.com) suite — trading data, DeFi protocol health, token safety, brokerage sync, agent identity, reputation, a tool-reliability registry, hallucination checks, persistent agent memory, and x402 paywalls, in one server.
@@ -27,7 +28,7 @@ These tools never sign anything or hold a key. Agents with no wallet can still t
 
 ## Remote endpoint (no install)
 
-Also listed on [Smithery](https://smithery.ai/servers/wickedapi/wicked-mcp), the official MCP Registry (`io.github.WickedAPI/wicked-mcp`) and Glama.
+Also listed on [Glama](https://glama.ai/mcp/servers/WickedAPI/wicked-mcp), the official MCP Registry (`io.github.WickedAPI/wicked-mcp`) and [Smithery](https://smithery.ai/servers/wickedapi/wicked-mcp).
 
 The same 107 tools are served over streamable HTTP at **`https://mcp.wickedapi.com/mcp`** (stateless, rate-limited per IP; the public deployment carries no personal keys, so paid calls return the x402 challenge). Point any streamable-HTTP MCP client at it. To self-host, build the `Dockerfile` and run it with `node dist/http.js` (the image defaults to the stdio entry point), or `npm run build && npm run start:http`; see `.env.example` for `RATE_LIMIT_PER_MINUTE`, `ALLOWED_HOSTS` and `TRUSTED_CLIENT_IP_HEADER`.
 

package/dist/http.js

@@ -14,7 +14,7 @@ import { landingHtml, llmsTxt, serverCard } from "./landing.js";
 import { knownTools, usageHooks, usageSnapshot } from "./usage.js";
 import { buildServer, loadWorld, SERVER_VERSION } from "./server.js";
 import { configuredKeys } from "./suite.js";
-import { captureServerError, flushSentry, initSentry } from "./observability.js";
+import { captureServerError, flushSentry, initSentry, isClientAbort } from "./observability.js";
 initSentry(SERVER_VERSION);
 const PORT = Number(process.env.PORT || 8080);
 const RATE_LIMIT_PER_MINUTE = Number(process.env.RATE_LIMIT_PER_MINUTE || 30);
@@ -97,6 +97,8 @@ async function main() {
             await withClient(clientKey(req), () => transport.handleRequest(req, res, body));
         }
         catch (err) {
+            if (isClientAbort(err))
+                return; // the caller hung up mid-request: nothing to report or answer
             const status = err.status ?? 500;
             // Only server faults: 4xx here are client mistakes (bad JSON, oversized body).
             if (status >= 500)

package/dist/observability.js

@@ -14,6 +14,12 @@ const SENSITIVE_HEADERS = new Set([
     "x-payment",
     "payment-signature",
 ]);
+/** A client that hangs up mid-request makes Node throw "aborted" (or ECONNRESET) while the body is read.
+ *  That is a normal network event, not a server fault, so it is never reported. */
+export function isClientAbort(err) {
+    const e = err;
+    return e?.message === "aborted" || e?.code === "ECONNRESET" || e?.code === "ERR_STREAM_PREMATURE_CLOSE";
+}
 export function scrubEvent(event) {
     const req = event.request;
     if (req) {
@@ -36,7 +42,7 @@ export function initSentry(version) {
     Sentry.init({
         dsn,
         environment: process.env.SENTRY_ENVIRONMENT || "production",
-        release: `wickedapi-mcp@${version}`,
+        release: `wicked-mcp@${version}`,
         tracesSampleRate: 0,
         // v11 collects headers, bodies, query strings and stack-frame variables by
         // default. Turn everything off; beforeSend below is defense in depth.
@@ -50,7 +56,8 @@ export function initSentry(version) {
             databaseQueryData: false,
             queues: false,
         },
-        beforeSend: scrubEvent,
+        // Backstop: drop client disconnects that surface through Sentry's own instrumentation, then scrub.
+        beforeSend: (event, hint) => (isClientAbort(hint?.originalException) ? null : scrubEvent(event)),
     });
     return true;
 }

package/dist/server.js

@@ -361,7 +361,7 @@ function registerPrompts(server) {
         };
     });
 }
-export const SERVER_VERSION = "0.7.4";
+export const SERVER_VERSION = "0.7.5";
 export async function loadWorld() {
     const doFetch = await buildFetcher();
     const specs = [];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wickedlabs/wicked-mcp",
-  "version": "0.7.4",
+  "version": "0.7.5",
   "description": "MCP server for the whole Wicked suite — trading data, DeFi protocol health, token safety, SEC filings alerts, wallet and sanctions checks, brokerage sync, agent identity, reputation, tool registry, hallucination checks, persistent memory, and x402 paywalls. 100+ tools, 6 resources, 3 prompts. No signup required: pay per call in USDC via x402, or use a partner API key.",
   "type": "module",
   "bin": {