mj41-mcp 1.1.0 → 1.2.1

package/dist/index.js

@@ -23,6 +23,43 @@
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { z } from "zod";
+// ── Cache + Rate Limiting ──────────────────────────────────
+// Protects upstream APIs from runaway agents. No dependencies.
+const cache = new Map();
+async function cachedFetch(key, fetcher, ttlMs) {
+    const hit = cache.get(key);
+    if (hit && Date.now() - hit.at < ttlMs)
+        return hit.value;
+    const value = await fetcher();
+    cache.set(key, { value, at: Date.now() });
+    return value;
+}
+// Simple sliding-window rate limiter per upstream group
+const rateLimits = new Map();
+function checkRate(group, maxPerMinute) {
+    const now = Date.now();
+    const window = 60_000;
+    let timestamps = rateLimits.get(group) || [];
+    timestamps = timestamps.filter((t) => now - t < window);
+    if (timestamps.length >= maxPerMinute) {
+        throw new Error(`Rate limit exceeded for ${group}. Max ${maxPerMinute} requests/minute. Try again shortly.`);
+    }
+    timestamps.push(now);
+    rateLimits.set(group, timestamps);
+}
+// TTLs (ms)
+const TTL = {
+    COPPER_STATUS: 60_000, // 60s — prices update every 15min at fastest
+    ETH_PRICE: 30_000, // 30s
+    NEWS_LIST: 120_000, // 2min — stories update 2x daily
+    NEWS_STORY: 300_000, // 5min — published stories don't change
+};
+// Rate limits (requests per minute per upstream group)
+const RATE = {
+    COPPER: 20,
+    RICHARD: 10, // investigate_wallet calls AI, expensive
+    FIRST_SIGNAL: 30,
+};
 const COPPERTRACE_URL = "https://coppertrace.vercel.app";
 const FIRST_SIGNAL_URL = "https://aiwire.mj41.me";
 const ORACLE_URLS = {
@@ -46,11 +83,14 @@ server.tool("get_copper_price", "Get the current copper price from a ZJ Industri
         .describe("Copper class: 'a' for COMEX spot, 'b' for scrap, 'c' for industrial"),
 }, async ({ class: copperClass }) => {
     try {
+        checkRate("copper", RATE.COPPER);
         const url = ORACLE_URLS[copperClass];
-        const res = await fetch(`${url}/api/v1/status`);
-        if (!res.ok)
-            throw new Error(`HTTP ${res.status}`);
-        const status = await res.json();
+        const status = await cachedFetch(`copper-status-${copperClass}`, async () => {
+            const res = await fetch(`${url}/api/v1/status`);
+            if (!res.ok)
+                throw new Error(`HTTP ${res.status}`);
+            return res.json();
+        }, TTL.COPPER_STATUS);
         const label = CLASS_LABELS[copperClass];
         const fresh = status.is_fresh ? "FRESH" : "STALE";
         const lastUpdate = new Date(status.last_updated).toLocaleString("en-US", {
@@ -97,10 +137,13 @@ server.tool("get_all_copper_prices", "Get status of all three ZJ Industries copp
         "═══════════════════════════════════════════════",
         "",
     ];
+    checkRate("copper", RATE.COPPER);
     for (const [cls, url] of Object.entries(ORACLE_URLS)) {
         try {
-            const res = await fetch(`${url}/api/v1/status`);
-            const status = await res.json();
+            const status = await cachedFetch(`copper-status-${cls}`, async () => {
+                const res = await fetch(`${url}/api/v1/status`);
+                return res.json();
+            }, TTL.COPPER_STATUS);
             const fresh = status.is_fresh ? "FRESH" : "STALE";
             const lastUpdate = new Date(status.last_updated).toLocaleString("en-US", {
                 timeZone: "America/New_York",
@@ -138,11 +181,14 @@ server.tool("get_oracle_status", "Check if a ZJ Industries copper oracle is oper
         .describe("Copper class: 'a' for COMEX spot, 'b' for scrap, 'c' for industrial"),
 }, async ({ class: copperClass }) => {
     try {
+        checkRate("copper", RATE.COPPER);
         const url = ORACLE_URLS[copperClass];
-        const res = await fetch(`${url}/api/v1/status`);
-        if (!res.ok)
-            throw new Error(`HTTP ${res.status}`);
-        const data = await res.json();
+        const data = await cachedFetch(`copper-status-${copperClass}`, async () => {
+            const res = await fetch(`${url}/api/v1/status`);
+            if (!res.ok)
+                throw new Error(`HTTP ${res.status}`);
+            return res.json();
+        }, TTL.COPPER_STATUS);
         return {
             content: [
                 {
@@ -169,6 +215,8 @@ server.tool("investigate_wallet", "Investigate a blockchain wallet address or tr
         .describe("The investigation query. Can be a wallet address, transaction hash, or incident description (e.g. 'I clicked a link and my wallet was drained, address: 0x...')"),
 }, async ({ query }) => {
     try {
+        checkRate("richard", RATE.RICHARD);
+        // No cache — investigations are unique per query
         const res = await fetch(`${COPPERTRACE_URL}/api/investigate`, {
             method: "POST",
             headers: { "Content-Type": "application/json" },
@@ -205,8 +253,11 @@ server.tool("investigate_wallet", "Investigate a blockchain wallet address or tr
 // ── get_eth_price ───────────────────────────────────────────
 server.tool("get_eth_price", "Get the current price of Ethereum in USD. Powered by mj41, LLC.", {}, async () => {
     try {
-        const res = await fetch(`${COPPERTRACE_URL}/api/eth-price`);
-        const data = await res.json();
+        checkRate("richard", RATE.RICHARD);
+        const data = await cachedFetch("eth-price", async () => {
+            const res = await fetch(`${COPPERTRACE_URL}/api/eth-price`);
+            return res.json();
+        }, TTL.ETH_PRICE);
         return {
             content: [
                 {
@@ -235,11 +286,14 @@ server.tool("get_latest_news", "Get the latest stories from The First Signal, an
         .describe("Number of stories to return (default 5, max 20)"),
 }, async ({ limit }) => {
     try {
+        checkRate("first-signal", RATE.FIRST_SIGNAL);
         const cap = Math.min(limit, 20);
-        const res = await fetch(`${FIRST_SIGNAL_URL}/api/stories?limit=${cap}`);
-        if (!res.ok)
-            throw new Error(`HTTP ${res.status}`);
-        const data = await res.json();
+        const data = await cachedFetch(`news-latest-${cap}`, async () => {
+            const res = await fetch(`${FIRST_SIGNAL_URL}/api/stories?limit=${cap}`);
+            if (!res.ok)
+                throw new Error(`HTTP ${res.status}`);
+            return res.json();
+        }, TTL.NEWS_LIST);
         const stories = data.stories || data;
         if (!stories.length) {
             return {
@@ -259,6 +313,8 @@ server.tool("get_latest_news", "Get the latest stories from The First Signal, an
             });
             lines.push(`[${s.beat?.toUpperCase() || "WIRE"}] ${s.headline}`);
             lines.push(`  ${date} | ${s.byline || "Staff"} | Confidence: ${s.confidence || "N/A"}`);
+            if (s.id)
+                lines.push(`  ID: ${s.id}`);
             if (s.summary)
                 lines.push(`  ${s.summary.slice(0, 200)}${s.summary.length > 200 ? "..." : ""}`);
             lines.push("");
@@ -287,11 +343,14 @@ server.tool("get_news_by_beat", "Get stories from a specific beat on The First S
         .describe("Number of stories (default 5)"),
 }, async ({ beat, limit }) => {
     try {
+        checkRate("first-signal", RATE.FIRST_SIGNAL);
         const cap = Math.min(limit, 20);
-        const res = await fetch(`${FIRST_SIGNAL_URL}/api/stories?beat=${beat}&limit=${cap}`);
-        if (!res.ok)
-            throw new Error(`HTTP ${res.status}`);
-        const data = await res.json();
+        const data = await cachedFetch(`news-beat-${beat}-${cap}`, async () => {
+            const res = await fetch(`${FIRST_SIGNAL_URL}/api/stories?beat=${beat}&limit=${cap}`);
+            if (!res.ok)
+                throw new Error(`HTTP ${res.status}`);
+            return res.json();
+        }, TTL.NEWS_LIST);
         const stories = data.stories || data;
         if (!stories.length) {
             return {
@@ -310,6 +369,8 @@ server.tool("get_news_by_beat", "Get stories from a specific beat on The First S
             });
             lines.push(`${s.headline}`);
             lines.push(`  ${date} | ${s.byline || "Staff"} | Confidence: ${s.confidence || "N/A"}`);
+            if (s.id)
+                lines.push(`  ID: ${s.id}`);
             if (s.summary)
                 lines.push(`  ${s.summary.slice(0, 200)}${s.summary.length > 200 ? "..." : ""}`);
             lines.push("");
@@ -333,10 +394,13 @@ server.tool("get_story", "Read the full text of a specific story from The First
         .describe("The story ID (UUID)"),
 }, async ({ id }) => {
     try {
-        const res = await fetch(`${FIRST_SIGNAL_URL}/api/stories/${id}`);
-        if (!res.ok)
-            throw new Error(`HTTP ${res.status}`);
-        const story = await res.json();
+        checkRate("first-signal", RATE.FIRST_SIGNAL);
+        const story = await cachedFetch(`news-story-${id}`, async () => {
+            const res = await fetch(`${FIRST_SIGNAL_URL}/api/stories/${id}`);
+            if (!res.ok)
+                throw new Error(`HTTP ${res.status}`);
+            return res.json();
+        }, TTL.NEWS_STORY);
         const lines = [
             `THE FIRST SIGNAL`,
             "════════════════════════════════",
@@ -371,6 +435,8 @@ server.tool("submit_story_idea", "Submit a story idea or investigation request t
     description: z.string().describe("Details about what should be investigated"),
 }, async ({ topic, description }) => {
     try {
+        checkRate("first-signal", RATE.FIRST_SIGNAL);
+        // No cache — write operation
         const res = await fetch(`${FIRST_SIGNAL_URL}/api/requests`, {
             method: "POST",
             headers: { "Content-Type": "application/json" },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mj41-mcp",
-  "version": "1.1.0",
+  "version": "1.2.1",
   "description": "MJ41 MCP Server — Agent gateway for mj41, LLC. Live copper price oracles (COMEX/scrap/industrial on Base L2), blockchain investigation, and AI news wire with 16 autonomous reporters.",
   "type": "module",
   "main": "dist/index.js",