bitstamp-mcp 1.0.2 → 1.0.3

package/README.md

@@ -19,21 +19,4 @@ node dist/index.js
 
 Data comes from the public Bitstamp API.
 
-<!-- paywall -->
-## Premium tools
 
-These tools need a license key:
-
-* `order_book`
-* `ohlc_candles`
-
-Buy a key at https://mcp-marketplace.io/server/io-github-mrfentmen-bitstamp-mcp and set it in your MCP client config:
-
-```json
-"env": { "MCP_LICENSE_KEY": "mcp_live_..." }
-```
-
-The key is checked against MCP Marketplace, cached for 24 hours, and keeps
-working offline once one check has succeeded. Every other tool on this server
-stays free.
-<!-- /paywall -->

package/dist/api.js

@@ -60,51 +60,6 @@ async function bitstampGet(path) {
     }
     return d;
 }
-export async function orderBook(args) {
-    const pair = (args.pair ?? "").trim().toLowerCase();
-    if (!pair)
-        throw new Error("Provide a pair like btcusd.");
-    const limit = clamp(args.limit, 10, 50);
-    const d = await bitstampGet(`/order_book/${encodeURIComponent(pair)}/?group=1`);
-    const bids = (d.bids ?? []);
-    const asks = (d.asks ?? []);
-    if (!bids.length && !asks.length)
-        return `Bitstamp returned an empty order book for ${pair}.`;
-    const bestBid = bids[0] ? Number(bids[0][0]) : NaN;
-    const bestAsk = asks[0] ? Number(asks[0][0]) : NaN;
-    const spread = Number.isFinite(bestBid) && Number.isFinite(bestAsk) ? bestAsk - bestBid : NaN;
-    const depth = (side) => side.slice(0, limit).reduce((a, r) => a + Number(r[1] || 0) * Number(r[0] || 0), 0);
-    return [
-        `Bitstamp ${pair} order book at ${when(d.timestamp)}:`,
-        `Best bid ${Number.isFinite(bestBid) ? bestBid : "?"} | best ask ${Number.isFinite(bestAsk) ? bestAsk : "?"} | spread ${Number.isFinite(spread) ? spread.toFixed(2) : "?"}`,
-        `Top ${Math.min(limit, bids.length)} bids notional ${depth(bids).toFixed(2)} | top ${Math.min(limit, asks.length)} asks notional ${depth(asks).toFixed(2)}`,
-        "",
-        "Bids:",
-        ...bids.slice(0, limit).map((r, i) => `  ${i + 1}. ${r[0]} @ ${r[1]}`),
-        "Asks:",
-        ...asks.slice(0, limit).map((r, i) => `  ${i + 1}. ${r[0]} @ ${r[1]}`),
-    ].join("\n");
-}
-export async function ohlcCandles(args) {
-    const pair = (args.pair ?? "").trim().toLowerCase();
-    if (!pair)
-        throw new Error("Provide a pair like btcusd.");
-    const step = Math.round(Number(args.step ?? 3600));
-    const known = OHLC_STEPS.find(([s]) => s === step);
-    if (!known) {
-        return `Bitstamp does not accept step ${step}. Valid steps in seconds: ${OHLC_STEPS.map(([s]) => s).join(", ")}.`;
-    }
-    const limit = clamp(args.limit, 10, 100);
-    const d = await bitstampGet(`/ohlc/${encodeURIComponent(pair)}/?step=${step}&limit=${limit}`);
-    const data = (d.data ?? {});
-    const rows = (data.ohlc ?? []);
-    if (!rows.length)
-        return `No OHLC candles returned for ${pair} at step ${step}.`;
-    return [
-        `Bitstamp ${String(data.pair ?? pair)} candles, ${known[1]} step, ${rows.length} of ${limit} requested.`,
-        ...rows.map((c, i) => `${i + 1}. ${when(c.timestamp)} | open ${c.open} | high ${c.high} | low ${c.low} | close ${c.close} | volume ${c.volume}`),
-    ].join("\n");
-}
 export async function tradingPairs(args) {
     const d = (await bitstampGet("/trading-pairs-info/"));
     if (!Array.isArray(d) || !d.length)

package/dist/server.js

@@ -1,7 +1,6 @@
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { z } from "zod";
-import { ticker, orderBook, ohlcCandles, tradingPairs } from "./api.js";
-import { premiumRequired } from "./license.js";
+import { ticker, tradingPairs } from "./api.js";
 const text = (value) => ({ content: [{ type: "text", text: value }] });
 const textError = (t) => ({ content: [{ type: "text", text: t }], isError: true });
 const READ_ONLY = { readOnlyHint: true, openWorldHint: true };
@@ -18,7 +17,7 @@ export function createServer() {
             return text(await ticker(args));
         }
         catch (e) {
-            return textError(error(e));
+            return textError(String(e));
         }
     });
     server.registerTool("order_book", {
@@ -27,16 +26,12 @@ export function createServer() {
         inputSchema: z.object({ pair: z.string().describe("Pair symbol, e.g. btcusd."), group: z.number().describe("Price grouping.").optional(), limit: z.number().describe("Levels per side.").optional() }),
         annotations: READ_ONLY,
     }, async (args) => {
-        // ---- paywall: order_book ----
-        const paywallMessage = await premiumRequired("order_book");
-        if (paywallMessage)
-            return { content: [{ type: "text", text: paywallMessage }], isError: true };
-        // ---- paywall: end ----
+        // TODO: implement book locally (paywall removed)
         try {
-            return text(await orderBook(args));
+            return textError("Not yet implemented: book");
         }
         catch (e) {
-            return textError(error(e));
+            return textError(String(e));
         }
     });
     server.registerTool("ohlc_candles", {
@@ -45,16 +40,12 @@ export function createServer() {
         inputSchema: z.object({ pair: z.string().describe("Pair symbol, e.g. btcusd."), step: z.number().describe("Step in seconds, e.g. 3600 for hourly.").optional(), limit: z.number().describe("Max candles.").optional() }),
         annotations: READ_ONLY,
     }, async (args) => {
-        // ---- paywall: ohlc_candles ----
-        const paywallMessage = await premiumRequired("ohlc_candles");
-        if (paywallMessage)
-            return { content: [{ type: "text", text: paywallMessage }], isError: true };
-        // ---- paywall: end ----
+        // TODO: implement candles locally (paywall removed)
         try {
-            return text(await ohlcCandles(args));
+            return textError("Not yet implemented: candles");
         }
         catch (e) {
-            return textError(error(e));
+            return textError(String(e));
         }
     });
     server.registerTool("trading_pairs", {
@@ -67,7 +58,7 @@ export function createServer() {
             return text(await tradingPairs(args));
         }
         catch (e) {
-            return textError(error(e));
+            return textError(String(e));
         }
     });
     return server;

package/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "1.0.2",
+  "version": "1.0.3",
   "type": "module",
   "repository": {
     "type": "git",
@@ -41,4 +41,4 @@
     "node": ">=20"
   },
   "mcpName": "io.github.mrfentmen/bitstamp-mcp"
-}
+}

package/dist/license.js

@@ -1,79 +0,0 @@
-// Premium tools on this server need a license key bought from MCP Marketplace.
-// Buyers put the key in their MCP client config as MCP_LICENSE_KEY. Every tool
-// that is not listed in PREMIUM keeps working without a key.
-const SLUG = "bitstamp-mcp";
-// Tools that need a key. Everything else is free.
-const PREMIUM = new Set([
-    "order_book",
-    "ohlc_candles",
-]);
-const BUY_URL = `https://mcp-marketplace.io/server/io-github-mrfentmen-${SLUG}`;
-// The license check calls the marketplace's verify endpoint directly instead of
-// using @mcp_marketplace/license. That SDK sends no `apikey` header, so every
-// check it makes is rejected by Supabase before it reaches the function. The
-// publishable key below is public by design - it ships in mcp-marketplace.io's
-// own JavaScript and only ever reaches their licence check.
-const DEFAULT_VERIFY_URL = "https://virupvwhtkpkjsiskckg.supabase.co/functions/v1/verify-key";
-const PUBLISHABLE_KEY = "sb_publishable_BuqlW96Ke8C_zzJG-LQv1Q_YHi_r_4h";
-const OK_CACHE_MS = 60 * 60 * 1000;
-const BAD_CACHE_MS = 60 * 1000;
-const seen = new Map();
-const REASONS = {
-    missing_key: "no key is set",
-    invalid_format: "that key is not a valid MCP Marketplace key",
-    not_found: "that key was not found",
-    revoked: "that key has been revoked",
-    rotated: "that key was rotated, use your new one",
-    expired: "that key has expired, renew it",
-    rate_limited: "there were too many checks just now, try again shortly",
-    network_error: "the license server could not be reached",
-};
-function blocked(tool, reason) {
-    const why = REASONS[reason] ?? `the license server answered "${reason}"`;
-    return `"${tool}" needs a license key, but ${why}. ` +
-        `Set MCP_LICENSE_KEY in your MCP client config. Get a key: ${BUY_URL}`;
-}
-async function verify(key) {
-    const res = await fetch(process.env.MCP_LICENSE_VERIFY_URL || DEFAULT_VERIFY_URL, {
-        method: "POST",
-        headers: {
-            apikey: PUBLISHABLE_KEY,
-            Authorization: `Bearer ${PUBLISHABLE_KEY}`,
-            "Content-Type": "application/json",
-        },
-        body: JSON.stringify({ key, slug: SLUG }),
-        // an unusable key answers 400 with a JSON body, so read the body either way
-        signal: AbortSignal.timeout(15000),
-    });
-    const data = (await res.json());
-    if (typeof data?.valid !== "boolean")
-        return { valid: false, reason: "unexpected_response" };
-    return data;
-}
-/**
- * Returns null when the caller may run the tool, or a short message telling
- * them how to get a key.
- *
- * A good key is remembered for an hour, so a busy session does not hit the
- * license server on every call and keeps working through a brief outage.
- */
-export async function premiumRequired(tool) {
-    if (!PREMIUM.has(tool))
-        return null;
-    const key = process.env.MCP_LICENSE_KEY;
-    if (!key)
-        return blocked(tool, "missing_key");
-    const hit = seen.get(key);
-    if (hit && Date.now() - hit.at < (hit.valid ? OK_CACHE_MS : BAD_CACHE_MS)) {
-        return hit.valid ? null : blocked(tool, hit.reason ?? "invalid");
-    }
-    let result;
-    try {
-        result = await verify(key);
-    }
-    catch {
-        result = { valid: false, reason: "network_error" };
-    }
-    seen.set(key, { ...result, at: Date.now() });
-    return result.valid ? null : blocked(tool, result.reason ?? "invalid");
-}