finoptima 1.2.2 → 1.3.1

package/index.js

@@ -13,6 +13,7 @@
  *
  * Environment variables:
  *   ECOCHAIN_API_URL — Optional. API base URL (default: https://api.toutcreer.com)
+ *   ECOCHAIN_API_KEY — Optional. API key for agent auth (skips phone login)
  */
 
 const { Server } = require('@modelcontextprotocol/sdk/server/index.js');
@@ -30,6 +31,14 @@ const POLL_TIMEOUT_MS = 120000;
 
 let authenticated = false;
 
+// API key auth — skip phone login if ECOCHAIN_API_KEY is set (DEC-2026-050)
+const API_KEY = process.env.ECOCHAIN_API_KEY;
+if (API_KEY) {
+  apiClient.setApiKey(API_KEY);
+  authenticated = true;
+  console.error('[EcoChain MCP] Authenticated via API key (no phone login required)');
+}
+
 /**
  * EcoAuth login flow
  */
@@ -97,7 +106,11 @@ const loginTool = {
   },
   handler: async ({ phone_number }) => {
     if (authenticated) {
-      return JSON.stringify({ status: 'already_authenticated', user_id: process.env.ECOCHAIN_USER_ID });
+      return JSON.stringify({
+        status: 'already_authenticated',
+        auth_method: API_KEY ? 'api_key' : 'ecoauth',
+        user_id: process.env.ECOCHAIN_USER_ID
+      });
     }
 
     const result = await loginWithEcoAuth(phone_number);
@@ -118,7 +131,7 @@ const loginTool = {
 const allToolsWithLogin = [loginTool, ...allTools];
 
 // Server instructions — shown to the AI to explain how to use FINOPTIMA
-const SERVER_INSTRUCTIONS = `FINOPTIMA — EcoChain AI Finance Agent (v1.2.0, 30 tools)
+const SERVER_INSTRUCTIONS = `FINOPTIMA — EcoChain AI Finance Agent (v1.3.0, ${allTools.length + 1} tools)
 
 ## Setup
 If the user doesn't have FINOPTIMA installed, they can add it to their MCP config:
@@ -135,29 +148,56 @@ If the user doesn't have FINOPTIMA installed, they can add it to their MCP confi
 \`\`\`
 
 ## Authentication
+Two authentication methods are supported:
+
+### Method 1: EcoAuth (interactive — for users)
 1. Ask the user for their phone number (format: +33...)
 2. Call the \`login\` tool — a push notification is sent to their EcoAuth mobile app
 3. The user approves on their phone — JWT session is established
 4. All other tools are now active
 
+### Method 2: API Key (non-interactive — for agents)
+Set \`ECOCHAIN_API_KEY\` in the MCP config env:
+\`\`\`json
+{
+  "env": {
+    "ECOCHAIN_API_URL": "https://api.toutcreer.com",
+    "ECOCHAIN_API_KEY": "eco_ak_..."
+  }
+}
+\`\`\`
+No login call needed — all tools are immediately available.
+API keys are scoped (read/trade/swap/liquidity/send/strategy) and rate-limited.
+Requires a Pro or API subscription plan.
+
 ## Available Capabilities
 - **Portfolio**: get_balances, get_portfolio, get_prices, get_lp_positions, get_transaction_history
 - **Market**: get_pools, get_pool_details, get_orderbook, get_ticker, get_candles, get_trading_pairs
 - **Trading**: place_order, cancel_order, get_my_orders, get_trade_history
-- **Swap (AMM)**: get_swap_quote, execute_swap (0.3% fee)
+- **Swap (AMM)**: get_swap_quote, execute_swap (0.3% fee, multi-hop routing supported)
 - **Liquidity**: add_liquidity, remove_liquidity
 - **Transfer**: send_funds
 - **AI Strategies**: create_strategy, list_strategies, get_strategy, activate_strategy, pause_strategy
+- **Marketplace**: get_templates, subscribe_template, get_leaderboard, follow_strategy, unfollow_strategy
 - **Intents**: create_intent, list_intents
 - **Performance**: get_strategy_performance
 
+## Multi-Pool AMM
+Multiple liquidity pools supported (ECO/BTC, ECO/ETH). Swaps between non-direct pairs (e.g., BTC↔ETH) are automatically routed via ECO as a hub token (2-hop swap).
+
 ## AI Trading Strategies
-3 automated strategies available: LP Yield, DCA, BTC Hedge.
+4 strategy types: LP Yield, DCA, BTC Hedge, Eco Pilot.
 Pipeline: Create (draft) → Activate → Runner evaluates every 60s → Creates intents → Policy validation (8 rules) → Auto-approve if < 0.01 BTC, else manual approval → Execute.
 Modes: "auto" (auto-approve small trades) or "watch" (all manual approval).
 
+## Strategy Marketplace
+- Browse public strategy templates (\`get_templates\`)
+- Subscribe to a template to clone its config (\`subscribe_template\`)
+- Follow a provider's live trades with copy trading (\`follow_strategy\`)
+- View top-performing strategies (\`get_leaderboard\`)
+
 ## Rules
-- Always call \`login\` first before any other tool
+- Always call \`login\` first before any other tool (unless using API key auth)
 - Always confirm financial actions (trade, swap, send) with the user before executing
 - Use \`get_swap_quote\` before \`execute_swap\` to show expected outcome
 - Platform: https://www.toutcreer.com/trading
@@ -167,7 +207,7 @@ Modes: "auto" (auto-approve small trades) or "watch" (all manual approval).
 const server = new Server(
   {
     name: 'ecochain',
-    version: '1.2.0',
+    version: '1.3.0',
   },
   {
     capabilities: {
@@ -203,7 +243,7 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
   // Block all tools except login if not authenticated
   if (!authenticated && name !== 'login') {
     return {
-      content: [{ type: 'text', text: 'Not authenticated. Please ask the user for their phone number and call the `login` tool first.' }],
+      content: [{ type: 'text', text: 'Not authenticated. Either set ECOCHAIN_API_KEY env var or ask the user for their phone number and call the `login` tool first.' }],
       isError: true,
     };
   }

package/lib/api-client.js

@@ -12,6 +12,7 @@ class ApiClient {
   constructor() {
     this.apiUrl = process.env.ECOCHAIN_API_URL || 'https://api.toutcreer.com';
     this.jwtToken = null; // Set after EcoAuth login
+    this.apiKey = null;   // Set via ECOCHAIN_API_KEY env var (DEC-2026-050)
 
     const parsed = new URL(this.apiUrl);
     this.hostname = parsed.hostname;
@@ -27,6 +28,13 @@ class ApiClient {
     this.jwtToken = token;
   }
 
+  /**
+   * Set API key for agent authentication (DEC-2026-050)
+   */
+  setApiKey(key) {
+    this.apiKey = key;
+  }
+
   /**
    * Make an HTTP request to the backend API
    */
@@ -38,7 +46,9 @@ class ApiClient {
       'X-Client-Type': 'mcp-agent',
     };
 
-    if (this.jwtToken) {
+    if (this.apiKey) {
+      headers['X-API-Key'] = this.apiKey;
+    } else if (this.jwtToken) {
       headers['Authorization'] = `Bearer ${this.jwtToken}`;
     }
 

package/mcp-registry-key.pem

@@ -0,0 +1,3 @@
+-----BEGIN PRIVATE KEY-----
+MC4CAQAwBQYDK2VwBCIEIJ9Ouq7yDU4Qqpm8doI3i5KHM6044kKTPjpd0o2dIZ0i
+-----END PRIVATE KEY-----

package/package.json

@@ -1,7 +1,8 @@
 {
   "name": "finoptima",
-  "version": "1.2.2",
-  "description": "FINOPTIMA — EcoChain AI Finance Agent via MCP. Portfolio optimization, AMM liquidity, AI trading strategies, swaps. Secured by EcoAuth 2FA.",
+  "version": "1.3.1",
+  "mcpName": "com.toutcreer/finoptima",
+  "description": "FINOPTIMA — EcoChain AI Finance Agent via MCP. Multi-pool AMM (ECO/BTC, ECO/ETH), 4 AI strategies, strategy marketplace, copy trading, leaderboard. 35 tools. API key auth. Secured by EcoAuth 2FA.",
   "main": "index.js",
   "bin": {
     "finoptima": "index.js"

package/server.json

@@ -0,0 +1,58 @@
+{
+  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
+  "name": "com.toutcreer/finoptima",
+  "title": "FINOPTIMA",
+  "description": "AI trading agent: multi-pool AMM, 4 strategies, marketplace, copy trading. 35 tools.",
+  "version": "1.3.1",
+  "repository": {
+    "url": "https://github.com/toutcreer/finoptima",
+    "source": "github"
+  },
+  "packages": [
+    {
+      "registryType": "npm",
+      "registryBaseUrl": "https://registry.npmjs.org",
+      "identifier": "finoptima",
+      "version": "1.3.1",
+      "transport": {
+        "type": "stdio"
+      },
+      "environmentVariables": [
+        {
+          "name": "ECOCHAIN_API_URL",
+          "description": "EcoChain API endpoint (default: https://api.toutcreer.com)",
+          "isRequired": false,
+          "isSecret": false
+        },
+        {
+          "name": "ECOCHAIN_API_KEY",
+          "description": "API key for autonomous agent authentication (format: eco_ak_...). Optional — alternative to EcoAuth 2FA login. Available on Pro and API subscription plans.",
+          "isRequired": false,
+          "isSecret": true
+        }
+      ],
+      "arguments": ["-y", "finoptima"]
+    }
+  ],
+  "_meta": {
+    "io.modelcontextprotocol.registry/publisher-provided": {
+      "homepage": "https://www.toutcreer.com/finoptima",
+      "documentation": "https://www.toutcreer.com/trading/finoptima.md",
+      "categories": ["finance", "trading", "defi", "portfolio"],
+      "toolCount": 35,
+      "features": [
+        "Multi-pool AMM (ECO/BTC, ECO/ETH) with smart router",
+        "4 AI trading strategies (DCA, BTC Hedge, LP Yield, Eco Pilot)",
+        "Strategy marketplace with templates and copy trading",
+        "Policy engine with 8 security rules",
+        "EcoAuth 2FA + API key authentication"
+      ],
+      "pricing": {
+        "free": "0 EUR — browse marketplace",
+        "pilot": "9 EUR/mo — 5 strategies, follow",
+        "pro": "29 EUR/mo — 20 strategies, publish, 3 API keys",
+        "api": "99 EUR/mo — unlimited, 10 API keys"
+      }
+    }
+  }
+}

package/tools/index.js

@@ -393,6 +393,92 @@ const sendTools = [
   }
 ];
 
+// ============================================
+// MARKETPLACE TOOLS (DEC-2026-050)
+// ============================================
+
+const marketplaceTools = [
+  {
+    name: 'get_leaderboard',
+    description: 'Get top performing public strategies. Returns strategy name, type, total return, max drawdown, follower count, and provider name.',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        limit: { type: 'number', description: 'Max results (default 50)' }
+      },
+      required: []
+    },
+    handler: withLogging('get_leaderboard', async ({ limit }) => {
+      const params = limit ? `?limit=${limit}` : '';
+      const data = await apiClient.get(`/performance/leaderboard${params}`);
+      return JSON.stringify(data);
+    })
+  },
+  {
+    name: 'get_templates',
+    description: 'List all active strategy templates in the marketplace. Returns template name, type, parameters, return, subscribers, and provider.',
+    inputSchema: {
+      type: 'object',
+      properties: {},
+      required: []
+    },
+    handler: withLogging('get_templates', async () => {
+      const data = await apiClient.get('/strategies/templates');
+      return JSON.stringify(data);
+    })
+  },
+  {
+    name: 'subscribe_template',
+    description: 'Subscribe to a strategy template. Clones the template config into a new strategy for the user. Requires pilot+ plan.',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        template_id: { type: 'string', description: 'The UUID of the template to subscribe to' }
+      },
+      required: ['template_id']
+    },
+    handler: withLogging('subscribe_template', async ({ template_id }) => {
+      const data = await apiClient.post(`/strategies/templates/${template_id}/subscribe`);
+      return JSON.stringify(data);
+    })
+  },
+  {
+    name: 'follow_strategy',
+    description: 'Start copy trading a public strategy. Creates a shadow strategy that mirrors the provider\'s trades with optional scaling. Requires pilot+ plan.',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        strategy_id: { type: 'string', description: 'The UUID of the public strategy to follow' },
+        scale_factor: { type: 'number', description: 'Trade size multiplier (0.1-2.0, default 1.0)' },
+        max_trade_btc: { type: 'number', description: 'Maximum trade size in BTC (default 0.01)' }
+      },
+      required: ['strategy_id']
+    },
+    handler: withLogging('follow_strategy', async ({ strategy_id, scale_factor, max_trade_btc }) => {
+      const body = {};
+      if (scale_factor !== undefined) body.scale_factor = scale_factor;
+      if (max_trade_btc !== undefined) body.max_trade_btc = max_trade_btc;
+      const data = await apiClient.post(`/strategies/${strategy_id}/follow`, body);
+      return JSON.stringify(data);
+    })
+  },
+  {
+    name: 'unfollow_strategy',
+    description: 'Stop copy trading a strategy. Pauses the shadow strategy and removes the copy trading link.',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        strategy_id: { type: 'string', description: 'The UUID of the strategy to unfollow' }
+      },
+      required: ['strategy_id']
+    },
+    handler: withLogging('unfollow_strategy', async ({ strategy_id }) => {
+      const data = await apiClient.delete(`/strategies/${strategy_id}/follow`);
+      return JSON.stringify(data);
+    })
+  },
+];
+
 // Export all tools grouped by scope
 module.exports = {
   readTools,
@@ -403,6 +489,7 @@ module.exports = {
   strategyTools,
   intentTools,
   performanceTools,
+  marketplaceTools,
   allTools: [
     ...readTools,
     ...tradeTools,
@@ -411,6 +498,7 @@ module.exports = {
     ...sendTools,
     ...strategyTools,
     ...intentTools,
-    ...performanceTools
+    ...performanceTools,
+    ...marketplaceTools,
   ]
 };

package/tools/intent-tools.js

@@ -14,7 +14,7 @@ const intentTools = [
       type: 'object',
       properties: {
         strategy_id: { type: 'string', description: 'Optional: link to a strategy' },
-        action: { type: 'string', description: 'Trading action', enum: ['execute_swap', 'add_liquidity', 'remove_liquidity', 'place_order'] },
+        action: { type: 'string', description: 'Trading action', enum: ['execute_swap', 'add_liquidity', 'remove_liquidity', 'zap_liquidity', 'place_order', 'vault_to_hot'] },
         params: {
           type: 'object',
           description: 'Action parameters. Swap: {token_in, token_out, amount_in, max_slippage_bps}. Liquidity: {pool_id, amount_a, amount_b}. Order: {pair_id, side, type, amount, price}.'