finoptima 1.2.1 → 1.3.0

package/index.js

@@ -3,7 +3,7 @@
  * EcoChain MCP Server (DEC-2026-043)
  *
  * Model Context Protocol server for AI agent access to EcoChain.
- * Provides 22 tools: 1 login + 21 platform tools.
+ * Provides 30 tools: 1 login + 29 platform tools.
  *
  * Authentication: EcoAuth login flow (no hardcoded credentials)
  *   1. AI asks user for their phone number
@@ -13,6 +13,7 @@
  *
  * Environment variables:
  *   ECOCHAIN_API_URL — Optional. API base URL (default: https://api.toutcreer.com)
+ *   ECOCHAIN_API_KEY — Optional. API key for agent auth (skips phone login)
  */
 
 const { Server } = require('@modelcontextprotocol/sdk/server/index.js');
@@ -30,6 +31,14 @@ const POLL_TIMEOUT_MS = 120000;
 
 let authenticated = false;
 
+// API key auth — skip phone login if ECOCHAIN_API_KEY is set (DEC-2026-050)
+const API_KEY = process.env.ECOCHAIN_API_KEY;
+if (API_KEY) {
+  apiClient.setApiKey(API_KEY);
+  authenticated = true;
+  console.error('[EcoChain MCP] Authenticated via API key (no phone login required)');
+}
+
 /**
  * EcoAuth login flow
  */
@@ -97,7 +106,11 @@ const loginTool = {
   },
   handler: async ({ phone_number }) => {
     if (authenticated) {
-      return JSON.stringify({ status: 'already_authenticated', user_id: process.env.ECOCHAIN_USER_ID });
+      return JSON.stringify({
+        status: 'already_authenticated',
+        auth_method: API_KEY ? 'api_key' : 'ecoauth',
+        user_id: process.env.ECOCHAIN_USER_ID
+      });
     }
 
     const result = await loginWithEcoAuth(phone_number);
@@ -117,16 +130,90 @@ const loginTool = {
 // All tools: login first, then platform tools
 const allToolsWithLogin = [loginTool, ...allTools];
 
+// Server instructions — shown to the AI to explain how to use FINOPTIMA
+const SERVER_INSTRUCTIONS = `FINOPTIMA — EcoChain AI Finance Agent (v1.3.0, ${allTools.length + 1} tools)
+
+## Setup
+If the user doesn't have FINOPTIMA installed, they can add it to their MCP config:
+\`\`\`json
+{
+  "mcpServers": {
+    "ecochain": {
+      "command": "npx",
+      "args": ["-y", "finoptima"],
+      "env": { "ECOCHAIN_API_URL": "https://api.toutcreer.com" }
+    }
+  }
+}
+\`\`\`
+
+## Authentication
+Two authentication methods are supported:
+
+### Method 1: EcoAuth (interactive — for users)
+1. Ask the user for their phone number (format: +33...)
+2. Call the \`login\` tool — a push notification is sent to their EcoAuth mobile app
+3. The user approves on their phone — JWT session is established
+4. All other tools are now active
+
+### Method 2: API Key (non-interactive — for agents)
+Set \`ECOCHAIN_API_KEY\` in the MCP config env:
+\`\`\`json
+{
+  "env": {
+    "ECOCHAIN_API_URL": "https://api.toutcreer.com",
+    "ECOCHAIN_API_KEY": "eco_ak_..."
+  }
+}
+\`\`\`
+No login call needed — all tools are immediately available.
+API keys are scoped (read/trade/swap/liquidity/send/strategy) and rate-limited.
+Requires a Pro or API subscription plan.
+
+## Available Capabilities
+- **Portfolio**: get_balances, get_portfolio, get_prices, get_lp_positions, get_transaction_history
+- **Market**: get_pools, get_pool_details, get_orderbook, get_ticker, get_candles, get_trading_pairs
+- **Trading**: place_order, cancel_order, get_my_orders, get_trade_history
+- **Swap (AMM)**: get_swap_quote, execute_swap (0.3% fee, multi-hop routing supported)
+- **Liquidity**: add_liquidity, remove_liquidity
+- **Transfer**: send_funds
+- **AI Strategies**: create_strategy, list_strategies, get_strategy, activate_strategy, pause_strategy
+- **Marketplace**: get_templates, subscribe_template, get_leaderboard, follow_strategy, unfollow_strategy
+- **Intents**: create_intent, list_intents
+- **Performance**: get_strategy_performance
+
+## Multi-Pool AMM
+Multiple liquidity pools supported (ECO/BTC, ECO/ETH). Swaps between non-direct pairs (e.g., BTC↔ETH) are automatically routed via ECO as a hub token (2-hop swap).
+
+## AI Trading Strategies
+4 strategy types: LP Yield, DCA, BTC Hedge, Eco Pilot.
+Pipeline: Create (draft) → Activate → Runner evaluates every 60s → Creates intents → Policy validation (8 rules) → Auto-approve if < 0.01 BTC, else manual approval → Execute.
+Modes: "auto" (auto-approve small trades) or "watch" (all manual approval).
+
+## Strategy Marketplace
+- Browse public strategy templates (\`get_templates\`)
+- Subscribe to a template to clone its config (\`subscribe_template\`)
+- Follow a provider's live trades with copy trading (\`follow_strategy\`)
+- View top-performing strategies (\`get_leaderboard\`)
+
+## Rules
+- Always call \`login\` first before any other tool (unless using API key auth)
+- Always confirm financial actions (trade, swap, send) with the user before executing
+- Use \`get_swap_quote\` before \`execute_swap\` to show expected outcome
+- Platform: https://www.toutcreer.com/trading
+`;
+
 // Create MCP server
 const server = new Server(
   {
     name: 'ecochain',
-    version: '1.0.0',
+    version: '1.3.0',
   },
   {
     capabilities: {
       tools: {},
     },
+    instructions: SERVER_INSTRUCTIONS,
   }
 );
 
@@ -156,7 +243,7 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
   // Block all tools except login if not authenticated
   if (!authenticated && name !== 'login') {
     return {
-      content: [{ type: 'text', text: 'Not authenticated. Please ask the user for their phone number and call the `login` tool first.' }],
+      content: [{ type: 'text', text: 'Not authenticated. Either set ECOCHAIN_API_KEY env var or ask the user for their phone number and call the `login` tool first.' }],
       isError: true,
     };
   }

package/lib/api-client.js

@@ -12,6 +12,7 @@ class ApiClient {
   constructor() {
     this.apiUrl = process.env.ECOCHAIN_API_URL || 'https://api.toutcreer.com';
     this.jwtToken = null; // Set after EcoAuth login
+    this.apiKey = null;   // Set via ECOCHAIN_API_KEY env var (DEC-2026-050)
 
     const parsed = new URL(this.apiUrl);
     this.hostname = parsed.hostname;
@@ -27,6 +28,13 @@ class ApiClient {
     this.jwtToken = token;
   }
 
+  /**
+   * Set API key for agent authentication (DEC-2026-050)
+   */
+  setApiKey(key) {
+    this.apiKey = key;
+  }
+
   /**
    * Make an HTTP request to the backend API
    */
@@ -38,7 +46,9 @@ class ApiClient {
       'X-Client-Type': 'mcp-agent',
     };
 
-    if (this.jwtToken) {
+    if (this.apiKey) {
+      headers['X-API-Key'] = this.apiKey;
+    } else if (this.jwtToken) {
       headers['Authorization'] = `Bearer ${this.jwtToken}`;
     }
 

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "finoptima",
-  "version": "1.2.1",
-  "description": "FINOPTIMA — EcoChain AI Finance Agent via MCP. Portfolio optimization, AMM liquidity, AI trading strategies, swaps. Secured by EcoAuth 2FA.",
+  "version": "1.3.0",
+  "description": "FINOPTIMA — EcoChain AI Finance Agent via MCP. Multi-pool AMM (ECO/BTC, ECO/ETH), 4 AI strategies, strategy marketplace, copy trading, leaderboard. 35 tools. API key auth. Secured by EcoAuth 2FA.",
   "main": "index.js",
   "bin": {
     "finoptima": "index.js"

package/tools/index.js

@@ -393,6 +393,92 @@ const sendTools = [
   }
 ];
 
+// ============================================
+// MARKETPLACE TOOLS (DEC-2026-050)
+// ============================================
+
+const marketplaceTools = [
+  {
+    name: 'get_leaderboard',
+    description: 'Get top performing public strategies. Returns strategy name, type, total return, max drawdown, follower count, and provider name.',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        limit: { type: 'number', description: 'Max results (default 50)' }
+      },
+      required: []
+    },
+    handler: withLogging('get_leaderboard', async ({ limit }) => {
+      const params = limit ? `?limit=${limit}` : '';
+      const data = await apiClient.get(`/performance/leaderboard${params}`);
+      return JSON.stringify(data);
+    })
+  },
+  {
+    name: 'get_templates',
+    description: 'List all active strategy templates in the marketplace. Returns template name, type, parameters, return, subscribers, and provider.',
+    inputSchema: {
+      type: 'object',
+      properties: {},
+      required: []
+    },
+    handler: withLogging('get_templates', async () => {
+      const data = await apiClient.get('/strategies/templates');
+      return JSON.stringify(data);
+    })
+  },
+  {
+    name: 'subscribe_template',
+    description: 'Subscribe to a strategy template. Clones the template config into a new strategy for the user. Requires pilot+ plan.',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        template_id: { type: 'string', description: 'The UUID of the template to subscribe to' }
+      },
+      required: ['template_id']
+    },
+    handler: withLogging('subscribe_template', async ({ template_id }) => {
+      const data = await apiClient.post(`/strategies/templates/${template_id}/subscribe`);
+      return JSON.stringify(data);
+    })
+  },
+  {
+    name: 'follow_strategy',
+    description: 'Start copy trading a public strategy. Creates a shadow strategy that mirrors the provider\'s trades with optional scaling. Requires pilot+ plan.',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        strategy_id: { type: 'string', description: 'The UUID of the public strategy to follow' },
+        scale_factor: { type: 'number', description: 'Trade size multiplier (0.1-2.0, default 1.0)' },
+        max_trade_btc: { type: 'number', description: 'Maximum trade size in BTC (default 0.01)' }
+      },
+      required: ['strategy_id']
+    },
+    handler: withLogging('follow_strategy', async ({ strategy_id, scale_factor, max_trade_btc }) => {
+      const body = {};
+      if (scale_factor !== undefined) body.scale_factor = scale_factor;
+      if (max_trade_btc !== undefined) body.max_trade_btc = max_trade_btc;
+      const data = await apiClient.post(`/strategies/${strategy_id}/follow`, body);
+      return JSON.stringify(data);
+    })
+  },
+  {
+    name: 'unfollow_strategy',
+    description: 'Stop copy trading a strategy. Pauses the shadow strategy and removes the copy trading link.',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        strategy_id: { type: 'string', description: 'The UUID of the strategy to unfollow' }
+      },
+      required: ['strategy_id']
+    },
+    handler: withLogging('unfollow_strategy', async ({ strategy_id }) => {
+      const data = await apiClient.delete(`/strategies/${strategy_id}/follow`);
+      return JSON.stringify(data);
+    })
+  },
+];
+
 // Export all tools grouped by scope
 module.exports = {
   readTools,
@@ -403,6 +489,7 @@ module.exports = {
   strategyTools,
   intentTools,
   performanceTools,
+  marketplaceTools,
   allTools: [
     ...readTools,
     ...tradeTools,
@@ -411,6 +498,7 @@ module.exports = {
     ...sendTools,
     ...strategyTools,
     ...intentTools,
-    ...performanceTools
+    ...performanceTools,
+    ...marketplaceTools,
   ]
 };

package/tools/intent-tools.js

@@ -14,7 +14,7 @@ const intentTools = [
       type: 'object',
       properties: {
         strategy_id: { type: 'string', description: 'Optional: link to a strategy' },
-        action: { type: 'string', description: 'Trading action', enum: ['execute_swap', 'add_liquidity', 'remove_liquidity', 'place_order'] },
+        action: { type: 'string', description: 'Trading action', enum: ['execute_swap', 'add_liquidity', 'remove_liquidity', 'zap_liquidity', 'place_order', 'vault_to_hot'] },
         params: {
           type: 'object',
           description: 'Action parameters. Swap: {token_in, token_out, amount_in, max_slippage_bps}. Liquidity: {pool_id, amount_a, amount_b}. Order: {pair_id, side, type, amount, price}.'