bitstamp-mcp 1.0.1 → 1.0.2

package/README.md

@@ -18,3 +18,22 @@ node dist/index.js
 ```
 
 Data comes from the public Bitstamp API.
+
+<!-- paywall -->
+## Premium tools
+
+These tools need a license key:
+
+* `order_book`
+* `ohlc_candles`
+
+Buy a key at https://mcp-marketplace.io/server/io-github-mrfentmen-bitstamp-mcp and set it in your MCP client config:
+
+```json
+"env": { "MCP_LICENSE_KEY": "mcp_live_..." }
+```
+
+The key is checked against MCP Marketplace, cached for 24 hours, and keeps
+working offline once one check has succeeded. Every other tool on this server
+stays free.
+<!-- /paywall -->

package/dist/api.js

@@ -20,3 +20,112 @@ export async function ticker(args) {
         `Timestamp: ${get('timestamp') ? new Date(Number(get('timestamp')) * 1000).toISOString() : '?'}`,
     ].filter(Boolean).join('\n');
 }
+// ---- muxA tools:
+const BITSTAMP = 'https://www.bitstamp.net/api/v2';
+const OHLC_STEPS = [
+    [60, '1 minute'],
+    [180, '3 minutes'],
+    [300, '5 minutes'],
+    [900, '15 minutes'],
+    [1800, '30 minutes'],
+    [3600, '1 hour'],
+    [7200, '2 hours'],
+    [14400, '4 hours'],
+    [21600, '6 hours'],
+    [28800, '8 hours'],
+    [43200, '12 hours'],
+    [86400, '1 day'],
+    [259200, '3 days'],
+];
+function when(epoch) {
+    const n = Number(epoch);
+    if (!Number.isFinite(n) || n <= 0)
+        return "unknown";
+    return new Date(n * 1000).toISOString().replace("T", " ").slice(0, 16) + " UTC";
+}
+function clamp(value, fallback, max) {
+    return Math.max(1, Math.min(Math.round(value ?? fallback), max));
+}
+async function bitstampGet(path) {
+    const res = await fetch(`${BITSTAMP}${path}`, {
+        headers: { "User-Agent": UA, Accept: "application/json" },
+        signal: AbortSignal.timeout(20000),
+    });
+    if (!res.ok)
+        throw new Error(`Bitstamp returned ${res.status}`);
+    const d = (await res.json());
+    if (d?.status === "error" || d?.code) {
+        const detail = d.reason ?? d.errors?.[0]?.message ?? "error";
+        throw new Error(`Bitstamp: ${String(detail)}`);
+    }
+    return d;
+}
+export async function orderBook(args) {
+    const pair = (args.pair ?? "").trim().toLowerCase();
+    if (!pair)
+        throw new Error("Provide a pair like btcusd.");
+    const limit = clamp(args.limit, 10, 50);
+    const d = await bitstampGet(`/order_book/${encodeURIComponent(pair)}/?group=1`);
+    const bids = (d.bids ?? []);
+    const asks = (d.asks ?? []);
+    if (!bids.length && !asks.length)
+        return `Bitstamp returned an empty order book for ${pair}.`;
+    const bestBid = bids[0] ? Number(bids[0][0]) : NaN;
+    const bestAsk = asks[0] ? Number(asks[0][0]) : NaN;
+    const spread = Number.isFinite(bestBid) && Number.isFinite(bestAsk) ? bestAsk - bestBid : NaN;
+    const depth = (side) => side.slice(0, limit).reduce((a, r) => a + Number(r[1] || 0) * Number(r[0] || 0), 0);
+    return [
+        `Bitstamp ${pair} order book at ${when(d.timestamp)}:`,
+        `Best bid ${Number.isFinite(bestBid) ? bestBid : "?"} | best ask ${Number.isFinite(bestAsk) ? bestAsk : "?"} | spread ${Number.isFinite(spread) ? spread.toFixed(2) : "?"}`,
+        `Top ${Math.min(limit, bids.length)} bids notional ${depth(bids).toFixed(2)} | top ${Math.min(limit, asks.length)} asks notional ${depth(asks).toFixed(2)}`,
+        "",
+        "Bids:",
+        ...bids.slice(0, limit).map((r, i) => `  ${i + 1}. ${r[0]} @ ${r[1]}`),
+        "Asks:",
+        ...asks.slice(0, limit).map((r, i) => `  ${i + 1}. ${r[0]} @ ${r[1]}`),
+    ].join("\n");
+}
+export async function ohlcCandles(args) {
+    const pair = (args.pair ?? "").trim().toLowerCase();
+    if (!pair)
+        throw new Error("Provide a pair like btcusd.");
+    const step = Math.round(Number(args.step ?? 3600));
+    const known = OHLC_STEPS.find(([s]) => s === step);
+    if (!known) {
+        return `Bitstamp does not accept step ${step}. Valid steps in seconds: ${OHLC_STEPS.map(([s]) => s).join(", ")}.`;
+    }
+    const limit = clamp(args.limit, 10, 100);
+    const d = await bitstampGet(`/ohlc/${encodeURIComponent(pair)}/?step=${step}&limit=${limit}`);
+    const data = (d.data ?? {});
+    const rows = (data.ohlc ?? []);
+    if (!rows.length)
+        return `No OHLC candles returned for ${pair} at step ${step}.`;
+    return [
+        `Bitstamp ${String(data.pair ?? pair)} candles, ${known[1]} step, ${rows.length} of ${limit} requested.`,
+        ...rows.map((c, i) => `${i + 1}. ${when(c.timestamp)} | open ${c.open} | high ${c.high} | low ${c.low} | close ${c.close} | volume ${c.volume}`),
+    ].join("\n");
+}
+export async function tradingPairs(args) {
+    const d = (await bitstampGet("/trading-pairs-info/"));
+    if (!Array.isArray(d) || !d.length)
+        throw new Error("Bitstamp returned no trading pairs.");
+    const q = (args.search ?? "").trim().toLowerCase();
+    let rows = d;
+    if (q)
+        rows = rows.filter((p) => `${p.name ?? ""} ${p.url_symbol ?? ""}`.toLowerCase().includes(q));
+    if (args.trading_only !== false)
+        rows = rows.filter((p) => String(p.trading ?? "").toLowerCase() === "enabled");
+    if (!rows.length) {
+        return q ? `No trading pair matches "${q}".` : "Bitstamp lists no enabled trading pairs.";
+    }
+    const limit = clamp(args.limit, 25, 100);
+    const shown = rows.slice(0, limit);
+    return [
+        `Bitstamp trading pairs: ${rows.length} ${rows.length === 1 ? "match" : "matches"}, showing ${shown.length} of ${d.length} total.`,
+        ...shown.map((p, i) => `${i + 1}. ${String(p.name ?? "?")} | symbol ${String(p.url_symbol ?? "?")} | base decimals ${p.base_decimals ?? "?"}` +
+            ` | min order ${String(p.minimum_order ?? "not reported")} | trading ${p.trading ?? "?"} | instant ${String(p.instant_trading ?? "?")}`),
+        rows.length > limit ? `plus ${rows.length - limit} more` : "",
+    ]
+        .filter(Boolean)
+        .join("\n");
+}

package/dist/license.js

@@ -0,0 +1,79 @@
+// Premium tools on this server need a license key bought from MCP Marketplace.
+// Buyers put the key in their MCP client config as MCP_LICENSE_KEY. Every tool
+// that is not listed in PREMIUM keeps working without a key.
+const SLUG = "bitstamp-mcp";
+// Tools that need a key. Everything else is free.
+const PREMIUM = new Set([
+    "order_book",
+    "ohlc_candles",
+]);
+const BUY_URL = `https://mcp-marketplace.io/server/io-github-mrfentmen-${SLUG}`;
+// The license check calls the marketplace's verify endpoint directly instead of
+// using @mcp_marketplace/license. That SDK sends no `apikey` header, so every
+// check it makes is rejected by Supabase before it reaches the function. The
+// publishable key below is public by design - it ships in mcp-marketplace.io's
+// own JavaScript and only ever reaches their licence check.
+const DEFAULT_VERIFY_URL = "https://virupvwhtkpkjsiskckg.supabase.co/functions/v1/verify-key";
+const PUBLISHABLE_KEY = "sb_publishable_BuqlW96Ke8C_zzJG-LQv1Q_YHi_r_4h";
+const OK_CACHE_MS = 60 * 60 * 1000;
+const BAD_CACHE_MS = 60 * 1000;
+const seen = new Map();
+const REASONS = {
+    missing_key: "no key is set",
+    invalid_format: "that key is not a valid MCP Marketplace key",
+    not_found: "that key was not found",
+    revoked: "that key has been revoked",
+    rotated: "that key was rotated, use your new one",
+    expired: "that key has expired, renew it",
+    rate_limited: "there were too many checks just now, try again shortly",
+    network_error: "the license server could not be reached",
+};
+function blocked(tool, reason) {
+    const why = REASONS[reason] ?? `the license server answered "${reason}"`;
+    return `"${tool}" needs a license key, but ${why}. ` +
+        `Set MCP_LICENSE_KEY in your MCP client config. Get a key: ${BUY_URL}`;
+}
+async function verify(key) {
+    const res = await fetch(process.env.MCP_LICENSE_VERIFY_URL || DEFAULT_VERIFY_URL, {
+        method: "POST",
+        headers: {
+            apikey: PUBLISHABLE_KEY,
+            Authorization: `Bearer ${PUBLISHABLE_KEY}`,
+            "Content-Type": "application/json",
+        },
+        body: JSON.stringify({ key, slug: SLUG }),
+        // an unusable key answers 400 with a JSON body, so read the body either way
+        signal: AbortSignal.timeout(15000),
+    });
+    const data = (await res.json());
+    if (typeof data?.valid !== "boolean")
+        return { valid: false, reason: "unexpected_response" };
+    return data;
+}
+/**
+ * Returns null when the caller may run the tool, or a short message telling
+ * them how to get a key.
+ *
+ * A good key is remembered for an hour, so a busy session does not hit the
+ * license server on every call and keeps working through a brief outage.
+ */
+export async function premiumRequired(tool) {
+    if (!PREMIUM.has(tool))
+        return null;
+    const key = process.env.MCP_LICENSE_KEY;
+    if (!key)
+        return blocked(tool, "missing_key");
+    const hit = seen.get(key);
+    if (hit && Date.now() - hit.at < (hit.valid ? OK_CACHE_MS : BAD_CACHE_MS)) {
+        return hit.valid ? null : blocked(tool, hit.reason ?? "invalid");
+    }
+    let result;
+    try {
+        result = await verify(key);
+    }
+    catch {
+        result = { valid: false, reason: "network_error" };
+    }
+    seen.set(key, { ...result, at: Date.now() });
+    return result.valid ? null : blocked(tool, result.reason ?? "invalid");
+}

package/dist/server.js

@@ -1,6 +1,7 @@
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { z } from "zod";
-import { ticker } from "./api.js";
+import { ticker, orderBook, ohlcCandles, tradingPairs } from "./api.js";
+import { premiumRequired } from "./license.js";
 const text = (value) => ({ content: [{ type: "text", text: value }] });
 const textError = (t) => ({ content: [{ type: "text", text: t }], isError: true });
 const READ_ONLY = { readOnlyHint: true, openWorldHint: true };
@@ -20,5 +21,54 @@ export function createServer() {
             return textError(error(e));
         }
     });
+    server.registerTool("order_book", {
+        title: "Order book",
+        description: "Live Bitstamp order book with best bid and ask, spread, top level notional depth and the ladder of both sides.",
+        inputSchema: z.object({ pair: z.string().describe("Pair symbol, e.g. btcusd."), group: z.number().describe("Price grouping.").optional(), limit: z.number().describe("Levels per side.").optional() }),
+        annotations: READ_ONLY,
+    }, async (args) => {
+        // ---- paywall: order_book ----
+        const paywallMessage = await premiumRequired("order_book");
+        if (paywallMessage)
+            return { content: [{ type: "text", text: paywallMessage }], isError: true };
+        // ---- paywall: end ----
+        try {
+            return text(await orderBook(args));
+        }
+        catch (e) {
+            return textError(error(e));
+        }
+    });
+    server.registerTool("ohlc_candles", {
+        title: "OHLC candles",
+        description: "Bitstamp candlestick history for a pair at a chosen step from one minute to three days, with open, high, low, close and volume per candle.",
+        inputSchema: z.object({ pair: z.string().describe("Pair symbol, e.g. btcusd."), step: z.number().describe("Step in seconds, e.g. 3600 for hourly.").optional(), limit: z.number().describe("Max candles.").optional() }),
+        annotations: READ_ONLY,
+    }, async (args) => {
+        // ---- paywall: ohlc_candles ----
+        const paywallMessage = await premiumRequired("ohlc_candles");
+        if (paywallMessage)
+            return { content: [{ type: "text", text: paywallMessage }], isError: true };
+        // ---- paywall: end ----
+        try {
+            return text(await ohlcCandles(args));
+        }
+        catch (e) {
+            return textError(error(e));
+        }
+    });
+    server.registerTool("trading_pairs", {
+        title: "Trading pairs",
+        description: "List Bitstamp trading pairs with URL symbol, decimal places, minimum order size and whether trading and instant trading are enabled.",
+        inputSchema: z.object({ trading_only: z.boolean().describe("Only enabled pairs.").optional(), search: z.string().describe("Filter by name or symbol.").optional(), limit: z.number().describe("Max pairs.").optional() }),
+        annotations: READ_ONLY,
+    }, async (args) => {
+        try {
+            return text(await tradingPairs(args));
+        }
+        catch (e) {
+            return textError(error(e));
+        }
+    });
     return server;
 }

package/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "1.0.1",
+  "version": "1.0.2",
   "type": "module",
   "repository": {
     "type": "git",