cryptoiz-mcp 4.7.0 → 4.9.0

package/package.json

@@ -1,13 +1,24 @@
 {
   "name": "cryptoiz-mcp",
-  "version": "4.7.0",
+  "version": "4.9.0",
   "description": "CryptoIZ MCP Server — Solana DEX signals with x402 micropayments. Pay $0.01 USDC per call.",
   "type": "module",
   "main": "src/index.js",
   "bin": {
     "cryptoiz-mcp": "src/index.js"
   },
-  "keywords": ["cryptoiz", "solana", "defi", "mcp", "claude", "crypto", "alpha", "signals", "x402", "usdc"],
+  "keywords": [
+    "cryptoiz",
+    "solana",
+    "defi",
+    "mcp",
+    "claude",
+    "crypto",
+    "alpha",
+    "signals",
+    "x402",
+    "usdc"
+  ],
   "author": "CryptoIZ <cryptoiz.suport@gmail.com> (https://cryptoiz.org)",
   "license": "MIT",
   "repository": {
@@ -24,4 +35,4 @@
   "engines": {
     "node": ">=18.0.0"
   }
-}
+}

package/src/index.js

@@ -2,11 +2,14 @@
 import { Server } from '@modelcontextprotocol/sdk/server/index.js';
 import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
 import { CallToolRequestSchema, ListToolsRequestSchema } from '@modelcontextprotocol/sdk/types.js';
-import { Connection, Keypair, PublicKey, Transaction } from '@solana/web3.js';
-import { getOrCreateAssociatedTokenAccount, createTransferInstruction } from '@solana/spl-token';
+import { Connection, Keypair, PublicKey, VersionedTransaction, TransactionMessage } from '@solana/web3.js';
+import { getAssociatedTokenAddress, createTransferInstruction } from '@solana/spl-token';
 import bs58 from 'bs58';
 
 const GATEWAY_URL = 'https://rehqwsypjnjirhuiapqh.supabase.co/functions/v1/mcp-x402-gateway';
+const DEXTER_FACILITATOR = 'https://x402.dexter.cash';
+const DEXTER_FEE_PAYER = new PublicKey('DEXVS3su4dZQWTvvPnLDJLRK1CeeKG6K3QqdzthgAkNV');
+const SOLANA_NETWORK = 'solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp';
 const SVM_PRIVATE_KEY = process.env.SVM_PRIVATE_KEY || '';
 const CRYPTOIZ_WALLET = new PublicKey('DsKmdkYx49Xc1WhqMUAztwhdYPTqieyC98VmnnJdgpXX');
 const USDC_MINT = new PublicKey('EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v');
@@ -25,29 +28,71 @@ const PRICE_LABELS = {
   get_btc_regime:    '$0.01',
 };
 
+const fetchWithTimeout = (u, opts = {}, ms = 20000) => {
+  const ctrl = new AbortController();
+  const t = setTimeout(() => ctrl.abort(), ms);
+  return fetch(u, { ...opts, signal: ctrl.signal }).finally(() => clearTimeout(t));
+};
+
 async function payAndFetch(url, tool = 'get_alpha_scanner') {
   const AMOUNT = PRICES[tool] || 10000;
-  if (!SVM_PRIVATE_KEY) return { error: 'SVM_PRIVATE_KEY not set.' };
-  // Timeout: 20s for initial check, 30s for paid request
-  const fetchWithTimeout = (u, opts = {}, ms = 20000) => {
-    const ctrl = new AbortController();
-    const t = setTimeout(() => ctrl.abort(), ms);
-    return fetch(u, { ...opts, signal: ctrl.signal }).finally(() => clearTimeout(t));
-  };
+  if (!SVM_PRIVATE_KEY) return { error: 'SVM_PRIVATE_KEY not set. Add SVM_PRIVATE_KEY to Claude Desktop config.' };
+
+  // Step 1: First fetch to trigger 402
   let first;
   try { first = await fetchWithTimeout(url, {}, 20000); }
   catch (e) { return { error: `Gateway timeout or unreachable: ${e.message}` }; }
   if (first.status !== 402) return first.json();
+
   try {
+    // Step 2: Build Solana VersionedTransaction with Dexter as fee payer
     const keypair = Keypair.fromSecretKey(bs58.decode(SVM_PRIVATE_KEY));
     const connection = new Connection(SOL_RPC, 'confirmed');
-    const fromAta = await getOrCreateAssociatedTokenAccount(connection, keypair, USDC_MINT, keypair.publicKey);
-    const toAta = await getOrCreateAssociatedTokenAccount(connection, keypair, USDC_MINT, CRYPTOIZ_WALLET);
-    const tx = new Transaction().add(createTransferInstruction(fromAta.address, toAta.address, keypair.publicKey, AMOUNT));
-    const sig = await connection.sendTransaction(tx, [keypair]);
-    await connection.confirmTransaction(sig, 'confirmed');
-    const payment = Buffer.from(JSON.stringify({ signature: sig, network: 'solana', x402Version: 1 })).toString('base64');
-    const paid = await fetchWithTimeout(url, { headers: { 'x-payment': payment } }, 30000);
+
+    // Compute ATAs (no creation — user must have USDC already)
+    const fromAta = await getAssociatedTokenAddress(USDC_MINT, keypair.publicKey);
+    const toAta = await getAssociatedTokenAddress(USDC_MINT, CRYPTOIZ_WALLET);
+
+    // Get latest blockhash
+    const { blockhash } = await connection.getLatestBlockhash('confirmed');
+
+    // Build versioned message with Dexter as fee payer (Dexter sponsors SOL gas)
+    const message = new TransactionMessage({
+      payerKey: DEXTER_FEE_PAYER,
+      recentBlockhash: blockhash,
+      instructions: [
+        createTransferInstruction(fromAta, toAta, keypair.publicKey, AMOUNT)
+      ]
+    }).compileToV0Message();
+
+    const tx = new VersionedTransaction(message);
+    tx.sign([keypair]); // Partial sign — buyer signs, Dexter will add fee payer sig + submit
+
+    const serializedTx = Buffer.from(tx.serialize()).toString('base64');
+
+    // Step 3: Build x402 v2 paymentPayload
+    const paymentPayload = {
+      x402Version: 2,
+      resource: {
+        url,
+        description: `CryptoIZ ${tool} — ${PRICE_LABELS[tool] || '$0.01 USDC'}/call`,
+        mimeType: 'application/json',
+      },
+      accepted: {
+        scheme: 'exact',
+        network: SOLANA_NETWORK,
+        asset: USDC_MINT.toString(),
+        amount: String(AMOUNT),
+        payTo: CRYPTOIZ_WALLET.toString(),
+        maxTimeoutSeconds: 600,
+      },
+      payload: { transaction: serializedTx },
+    };
+
+    const paymentHeader = Buffer.from(JSON.stringify(paymentPayload)).toString('base64');
+
+    // Step 4: Retry with payment header — Dexter settles on-chain
+    const paid = await fetchWithTimeout(url, { headers: { 'x-payment': paymentHeader } }, 45000);
     return paid.json();
   } catch (err) {
     return { error: `Payment failed: ${err.message}` };
@@ -64,7 +109,12 @@ const dexLink = ca => ca ? `[Chart 📊](https://dexscreener.com/solana/${ca})`
 // ALPHA SCANNER — Markdown Table Format
 // ══════════════════════════════════════════════════════════════════
 function formatAlpha(data) {
-  if (data.error) return `❌ **Error:** ${data.error}\n\nSetup: https://cryptoiz.org`;
+  if (data.error) return `❌ **Error:** ${data.error}\n\nSetup: https://cryptoiz.org/McpLanding`;
+  
+  // Show signal quality warnings at top
+  let warnings = '';
+  if (data.signal_quality) warnings += `\n${data.signal_quality}\n`;
+  if (data.data_freshness) warnings += `\n${data.data_freshness}\n`;
   const signals = data.signals || [];
   const date = data.fetched_at?.split('T')[0];
 
@@ -348,20 +398,29 @@ async function getTokenCA(tokenName, data) {
 // ══════════════════════════════════════════════════════════════════
 function formatStatus() {
   const walletReady = !!SVM_PRIVATE_KEY;
+  const securityWarning = [
+    ``,
+    `> 🔐 **SECURITY WARNING**`,
+    `> Use a **dedicated wallet** with max $5 USDC + 0.01 SOL.`,
+    `> **NEVER** use your main wallet. **NEVER** share your config file.`,
+    `> If compromised → create a new wallet immediately.`,
+    ``,
+  ].join('\n');
+  
   return [
-    `## ⚡ CryptoIZ MCP Server v4.5.0`,
+    `## ⚡ CryptoIZ MCP Server v4.7.0`,
     `**AI-Powered Solana DEX Smart Money Signals — Pay Per Call via Solana USDC**`,
     ``,
     `> Detect whale accumulation, divergence signals, and BTC macro regime directly in Claude Desktop.`,
     `> No subscription needed — pay only when you call.`,
-    ``,
+    securityWarning,
     `---`,
     ``,
     `### 🔌 Connection Status`,
     ``,
     `| | |`,
     `|-|-|`,
-    `| Server | ✅ Connected |`,
+    `| Server | ✅ Connected — v4.7.0 |`,
     `| Wallet | ${walletReady ? '✅ Ready — USDC payments enabled' : '❌ Not configured — add SVM_PRIVATE_KEY to Claude Desktop config'} |`,
     `| Network | Solana Mainnet · USDC payments |`,
     `| Platform | https://cryptoiz.org |`,
@@ -372,11 +431,11 @@ function formatStatus() {
     ``,
     `| Tool | What You Get | Cost |`,
     `|------|-------------|------|`,
-    `| \`get_alpha_scanner\` | Top 20 ALPHA_EARLY + ALPHA_BUILDING signals. Score, phase, whale/dolphin delta, MC now vs signal MC, risk flags, CA + DexScreener chart | **$0.05 USDC** |`,
+    `| \`get_alpha_scanner\` | Top signals (ALPHA_EARLY + BUILDING + WATCHLIST). Score, phase, whale/dolphin delta, MC now vs signal MC, risk flags, CA + chart + Jupiter buy link | **$0.05 USDC** |`,
     `| \`get_divergence\` | 3 divergence types (Hidden/Breakout/Classic). Score, confidence, whale holders now vs prev, dolphin delta, MC, CA + chart | **$0.02 USDC** |`,
-    `| \`get_accumulation\` | 4-dimension accumulation score (Structure/AccDist/Holder/Market). Top 20 tokens in accumulation with CA + chart | **$0.02 USDC** |`,
-    `| \`get_btc_regime\` | BTC macro: regime (Bull/Bear/Neutral), Fear & Greed, OI regime, funding rate, RSI/EMA/MACD (1H), altcoin recommendation | **$0.01 USDC** |`,
-    `| \`get_token_ca\` | Exact contract address lookup + DexScreener link. Protects against fake/scam tokens with same name | **FREE** |`,
+    `| \`get_accumulation\` | 4-dimension accumulation score (Structure/AccDist/Holder/Market). Top 20 tokens with CA + chart | **$0.02 USDC** |`,
+    `| \`get_btc_regime\` | BTC macro: regime (Bull/Bear/Neutral), Fear & Greed, OI regime, funding rate, RSI/EMA/MACD (1H) | **$0.01 USDC** |`,
+    `| \`get_token_ca\` | Contract address lookup + DexScreener + Jupiter. Protects against scam tokens with same name | **FREE** |`,
     `| \`get_status\` | This status page | **FREE** |`,
     ``,
     `---`,
@@ -384,12 +443,12 @@ function formatStatus() {
     `### 💡 Quick Start`,
     ``,
     `\`\`\``,
-    `get_status                 ← you are here`,
+    `get_status                 ← you are here (free)`,
+    `get token ca [name]        ← verify any token CA (free)`,
     `get btc regime             ← check macro first ($0.01)`,
     `get alpha scanner          ← find best entry signals ($0.05)`,
     `get divergence scanner     ← find reversal signals ($0.02)`,
     `get accumulation dashboard ← find tokens in accumulation ($0.02)`,
-    `get token ca [name]        ← verify any token CA (free)`,
     `\`\`\``,
     ``,
     `---`,
@@ -403,7 +462,7 @@ function formatStatus() {
     `| 3 Months | **$120** | Serious investors |`,
     `| 1 Year | **$400** | Best value |`,
     ``,
-    `Full platform includes: visual charts, real-time alerts, Phase Leaderboard, Episode Feed, VIP Telegram signals.`,
+    `Full platform: visual charts, real-time alerts, Phase Leaderboard, Episode Feed, VIP Telegram.`,
     ``,
     `🔗 **Subscribe:** https://cryptoiz.org/Pricing`,
     `🔗 **Setup Guide:** https://cryptoiz.org/McpLanding`,
@@ -427,7 +486,7 @@ const TOOLS = [
 // ══════════════════════════════════════════════════════════════════
 // SERVER
 // ══════════════════════════════════════════════════════════════════
-const server = new Server({ name: 'cryptoiz-mcp', version: '4.6.0' }, { capabilities: { tools: {} } });
+const server = new Server({ name: 'cryptoiz-mcp', version: '4.7.0' }, { capabilities: { tools: {} } });
 server.setRequestHandler(ListToolsRequestSchema, async () => ({ tools: TOOLS }));
 server.setRequestHandler(CallToolRequestSchema, async (request) => {
   const { name, arguments: args } = request.params;