chainhint-mcp 1.3.2 → 1.3.3

package/dist/evidence.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Address evidence wording — MIRROR of the main repo's
+ * backend/supabase/functions/_shared/evidence-labels.ts (migration 129).
+ * Change both or neither; test/evidence.test.mjs pins the strings.
+ *
+ * Rule (owner decision 2026-09-14): "Sanctioned" is printed only for a
+ * sanctions designation. A law-enforcement attribution, an issuer freeze, a
+ * national seizure order and an industry blocklist each say what they are and
+ * that they are not a sanctions designation.
+ */
+export declare const EVIDENCE_CLASSES: readonly ["sanctions_designation", "law_enforcement_attribution", "issuer_freeze", "national_seizure_order", "industry_blocklist", "analyst_verified"];
+export type EvidenceClass = typeof EVIDENCE_CLASSES[number];
+export interface EvidenceItem {
+    class: EvidenceClass | string;
+    authority: string;
+    subject?: string | null;
+    document_ref?: string | null;
+    document_url?: string | null;
+    document_date?: string | null;
+    legal_basis?: string | null;
+    token?: string | null;
+    chain?: string | null;
+    first_seen_at?: string | null;
+}
+export declare const NOT_A_SANCTIONS_DESIGNATION = "Not a sanctions designation.";
+/** "⛔ Sanctioned — US OFAC · … " / "🧊 Frozen by issuer — Tether (USDT, TRON) · … Not a sanctions designation." */
+export declare function evidenceText(e: EvidenceItem): string | null;
+/** Designations first, then by strength of proof; unknown classes dropped. */
+export declare function evidenceLines(items: ReadonlyArray<EvidenceItem> | null | undefined): string[];

package/dist/evidence.js

@@ -0,0 +1,88 @@
+/**
+ * Address evidence wording — MIRROR of the main repo's
+ * backend/supabase/functions/_shared/evidence-labels.ts (migration 129).
+ * Change both or neither; test/evidence.test.mjs pins the strings.
+ *
+ * Rule (owner decision 2026-09-14): "Sanctioned" is printed only for a
+ * sanctions designation. A law-enforcement attribution, an issuer freeze, a
+ * national seizure order and an industry blocklist each say what they are and
+ * that they are not a sanctions designation.
+ */
+export const EVIDENCE_CLASSES = [
+    "sanctions_designation",
+    "law_enforcement_attribution",
+    "issuer_freeze",
+    "national_seizure_order",
+    "industry_blocklist",
+    "analyst_verified",
+];
+export const NOT_A_SANCTIONS_DESIGNATION = "Not a sanctions designation.";
+const TITLES = {
+    sanctions_designation: { icon: "⛔", title: "Sanctioned" },
+    law_enforcement_attribution: { icon: "🚩", title: "Law-enforcement attribution" },
+    issuer_freeze: { icon: "🧊", title: "Frozen by issuer" },
+    national_seizure_order: { icon: "🏛️", title: "National seizure order" },
+    industry_blocklist: { icon: "⚠️", title: "Industry blocklist" },
+    analyst_verified: { icon: "🔎", title: "Analyst-verified" },
+};
+const CHAIN_NAMES = { bsc: "BSC", tron: "TRON", ton: "TON" };
+function isEvidenceClass(v) {
+    return typeof v === "string" && EVIDENCE_CLASSES.includes(v);
+}
+function chainName(chain) {
+    const c = (chain ?? "").trim().toLowerCase();
+    if (!c)
+        return "";
+    return CHAIN_NAMES[c] ?? c.charAt(0).toUpperCase() + c.slice(1);
+}
+function day(value) {
+    if (!value)
+        return null;
+    const m = /^(\d{4}-\d{2}-\d{2})/.exec(value.trim());
+    return m ? m[1] : null;
+}
+const join = (parts, sep) => parts.filter((p) => !!p && p.trim() !== "").join(sep);
+function attributionLine(e) {
+    const date = day(e.document_date);
+    let head = join([e.authority, e.document_ref], ", ");
+    if (date)
+        head = `${head} (${date})`;
+    return e.subject ? `${head}: ${e.subject}` : head;
+}
+/** "⛔ Sanctioned — US OFAC · … " / "🧊 Frozen by issuer — Tether (USDT, TRON) · … Not a sanctions designation." */
+export function evidenceText(e) {
+    if (!isEvidenceClass(e.class))
+        return null;
+    const { icon, title } = TITLES[e.class];
+    const date = day(e.document_date);
+    let line;
+    switch (e.class) {
+        case "sanctions_designation":
+            line = join([e.authority, e.document_ref ?? e.legal_basis, date, e.subject], " · ");
+            break;
+        case "issuer_freeze": {
+            const what = join([e.token, chainName(e.chain)], ", ");
+            const when = date ?? join(["first seen by ChainHint", day(e.first_seen_at)], " ");
+            line = join([what ? `${e.authority} (${what})` : e.authority, when], " · ");
+            break;
+        }
+        case "law_enforcement_attribution":
+        case "national_seizure_order":
+            line = attributionLine(e);
+            break;
+        default:
+            line = join([e.authority, e.subject, date ?? (e.first_seen_at ? `first seen by ChainHint ${day(e.first_seen_at)}` : null)], " · ");
+    }
+    const caveat = e.class === "sanctions_designation" ? null : NOT_A_SANCTIONS_DESIGNATION;
+    return `${icon} ${caveat ? `${title} — ${line}. ${caveat}` : `${title} — ${line}`}`;
+}
+/** Designations first, then by strength of proof; unknown classes dropped. */
+export function evidenceLines(items) {
+    if (!items?.length)
+        return [];
+    const rank = (c) => EVIDENCE_CLASSES.indexOf(c);
+    return [...items]
+        .filter((e) => isEvidenceClass(e.class))
+        .sort((a, b) => rank(a.class) - rank(b.class))
+        .map((e) => `- ${evidenceText(e)}`);
+}

package/dist/index.js

@@ -18,12 +18,13 @@ import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { z } from "zod";
 import { apiErrorMessage, formatRiskLevel, lookupRiskLines, traceStatusLine } from "./verdicts.js";
+import { evidenceLines } from "./evidence.js";
 // ── Config ────────────────────────────────────────────────────────────────────
 const API_KEY = process.env.CHAINHINT_API_KEY;
 const BASE_URL = process.env.CHAINHINT_API_URL ?? "https://kjiwfwymnuzxriokhcjk.supabase.co/functions/v1";
 const SUPABASE_URL = process.env.CHAINHINT_SUPABASE_URL ?? "https://kjiwfwymnuzxriokhcjk.supabase.co";
 const SUPABASE_ANON_KEY = process.env.CHAINHINT_SUPABASE_ANON_KEY ?? "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6ImtqaXdmd3ltbnV6eHJpb2toY2prIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NzI3MzkxODgsImV4cCI6MjA4ODMxNTE4OH0.VqzzF_jI8zF072cbjWEDbYo3PnMDlIPy621iWkXEqyo";
-const VERSION = "1.3.2";
+const VERSION = "1.3.3";
 const USER_AGENT = `chainhint-mcp/${VERSION}`;
 const FREE_CHECKS_PER_DAY = 3;
 const UPGRADE_HINT = "set CHAINHINT_API_KEY (Agency plan, https://chainhint.com/pricing) for 10,000/day";
@@ -256,9 +257,14 @@ server.tool("check_wallet_risk", "Fast risk check for a crypto wallet address ag
         else {
             lines.push(`**Risk Score:** ${d.risk_score}/100 — **${(d.risk_level ?? formatRiskLevel(d.risk_score)).toUpperCase()}**`);
         }
-        if (d.sanctions?.hit) {
-            lines.push(`⛔ **SANCTIONED / OFAC-linked**`);
+        // sanctions.hit comes only from a sanctions designation (API since migration 129);
+        // the evidence lines say which authority and that other classes are not sanctions.
+        const walletEvidence = evidenceLines(d.evidence);
+        if (d.sanctions?.hit && !walletEvidence.some((l) => l.startsWith("- ⛔"))) {
+            lines.push(`⛔ **SANCTIONED**`);
         }
+        if (walletEvidence.length)
+            lines.push(`**Evidence:**`, ...walletEvidence);
         if (d.entity?.name) {
             const sub = d.entity.subcategory ? ` / ${d.entity.subcategory}` : "";
             const ver = d.entity.verified ? ", verified" : "";
@@ -328,6 +334,9 @@ server.tool("lookup_address", "Detailed lookup of a blockchain address: entity a
             lines.push(`**Labels:** ${[...new Set(d.labels)].join(", ")}`);
         // Never a score or "CLEAN" when there was nothing to score (verdicts.ts).
         lines.push(...lookupRiskLines(d));
+        const lookupEvidence = evidenceLines(d.evidence);
+        if (lookupEvidence.length)
+            lines.push(`**Evidence:**`, ...lookupEvidence);
         const sanctionIds = d.sanctions?.identifications ?? [];
         if (sanctionIds.length) {
             const names = sanctionIds.map((s) => [s.name, s.program].filter(Boolean).join(" / ")).filter(Boolean);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "chainhint-mcp",
-  "version": "1.3.2",
+  "version": "1.3.3",
   "description": "ChainHint MCP server \u2014 crypto risk intelligence tools for Claude Desktop and Cursor",
   "license": "MIT",
   "repository": {