mj41-mcp 1.1.0 → 1.3.0

package/dist/index.js

@@ -23,6 +23,56 @@
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { z } from "zod";
+// ── Cache + Rate Limiting ──────────────────────────────────
+// Protects upstream APIs from runaway agents. No dependencies.
+const cache = new Map();
+async function cachedFetch(key, fetcher, ttlMs) {
+    const hit = cache.get(key);
+    if (hit && Date.now() - hit.at < ttlMs)
+        return hit.value;
+    const value = await fetcher();
+    cache.set(key, { value, at: Date.now() });
+    return value;
+}
+// Simple sliding-window rate limiter per upstream group
+const rateLimits = new Map();
+function checkRate(group, maxPerMinute) {
+    const now = Date.now();
+    const window = 60_000;
+    let timestamps = rateLimits.get(group) || [];
+    timestamps = timestamps.filter((t) => now - t < window);
+    if (timestamps.length >= maxPerMinute) {
+        throw new Error(`Rate limit exceeded for ${group}. Max ${maxPerMinute} requests/minute. Try again shortly.`);
+    }
+    timestamps.push(now);
+    rateLimits.set(group, timestamps);
+}
+// TTLs (ms)
+const TTL = {
+    COPPER_STATUS: 60_000, // 60s — prices update every 15min at fastest
+    ETH_PRICE: 30_000, // 30s
+    NEWS_LIST: 120_000, // 2min — stories update 2x daily
+    NEWS_STORY: 300_000, // 5min — published stories don't change
+};
+// Rate limits (requests per minute per upstream group)
+const RATE = {
+    COPPER: 20,
+    RICHARD: 10, // investigate_wallet calls AI, expensive
+    FIRST_SIGNAL: 30,
+};
+// ── Copper Holiday: free until June 28, 2026 ─────────────────
+const COPPER_HOLIDAY_END = new Date("2026-06-28T00:00:00-05:00");
+function isCopperHoliday() {
+    return Date.now() < COPPER_HOLIDAY_END.getTime();
+}
+function copperHolidayNote() {
+    if (isCopperHoliday()) {
+        const diff = COPPER_HOLIDAY_END.getTime() - Date.now();
+        const days = Math.ceil(diff / 86_400_000);
+        return `COPPER HOLIDAY — All tools free until June 28, 2026 (${days} days remaining). After that: 41 RWACu/call or 82 RWACu equiv via USDC/Stripe. Pay with RWACu and save 50%.`;
+    }
+    return "Copper Holiday has ended. API key required. Register with the register tool.";
+}
 const COPPERTRACE_URL = "https://coppertrace.vercel.app";
 const FIRST_SIGNAL_URL = "https://aiwire.mj41.me";
 const ORACLE_URLS = {
@@ -46,11 +96,14 @@ server.tool("get_copper_price", "Get the current copper price from a ZJ Industri
         .describe("Copper class: 'a' for COMEX spot, 'b' for scrap, 'c' for industrial"),
 }, async ({ class: copperClass }) => {
     try {
+        checkRate("copper", RATE.COPPER);
         const url = ORACLE_URLS[copperClass];
-        const res = await fetch(`${url}/api/v1/status`);
-        if (!res.ok)
-            throw new Error(`HTTP ${res.status}`);
-        const status = await res.json();
+        const status = await cachedFetch(`copper-status-${copperClass}`, async () => {
+            const res = await fetch(`${url}/api/v1/status`);
+            if (!res.ok)
+                throw new Error(`HTTP ${res.status}`);
+            return res.json();
+        }, TTL.COPPER_STATUS);
         const label = CLASS_LABELS[copperClass];
         const fresh = status.is_fresh ? "FRESH" : "STALE";
         const lastUpdate = new Date(status.last_updated).toLocaleString("en-US", {
@@ -72,7 +125,7 @@ server.tool("get_copper_price", "Get the current copper price from a ZJ Industri
                         status.update_mode ? `Update mode: ${status.update_mode} (${status.update_frequency})` : "",
                         ``,
                         `Note: Price value available via ${url}/api/v1/price`,
-                        `Open Trial — all endpoints free. Request a key at api@zjindustries.com`,
+                        copperHolidayNote(),
                         ``,
                         `— mj41, LLC | ZJ Industries (zjindustries.com)`,
                     ]
@@ -97,10 +150,13 @@ server.tool("get_all_copper_prices", "Get status of all three ZJ Industries copp
         "═══════════════════════════════════════════════",
         "",
     ];
+    checkRate("copper", RATE.COPPER);
     for (const [cls, url] of Object.entries(ORACLE_URLS)) {
         try {
-            const res = await fetch(`${url}/api/v1/status`);
-            const status = await res.json();
+            const status = await cachedFetch(`copper-status-${cls}`, async () => {
+                const res = await fetch(`${url}/api/v1/status`);
+                return res.json();
+            }, TTL.COPPER_STATUS);
             const fresh = status.is_fresh ? "FRESH" : "STALE";
             const lastUpdate = new Date(status.last_updated).toLocaleString("en-US", {
                 timeZone: "America/New_York",
@@ -123,8 +179,7 @@ server.tool("get_all_copper_prices", "Get status of all three ZJ Industries copp
             results.push("");
         }
     }
-    results.push("Open Trial — all endpoints free during trial period");
-    results.push("API key requests: api@zjindustries.com");
+    results.push(copperHolidayNote());
     results.push("");
     results.push("— mj41, LLC | ZJ Industries (zjindustries.com)");
     return {
@@ -138,11 +193,14 @@ server.tool("get_oracle_status", "Check if a ZJ Industries copper oracle is oper
         .describe("Copper class: 'a' for COMEX spot, 'b' for scrap, 'c' for industrial"),
 }, async ({ class: copperClass }) => {
     try {
+        checkRate("copper", RATE.COPPER);
         const url = ORACLE_URLS[copperClass];
-        const res = await fetch(`${url}/api/v1/status`);
-        if (!res.ok)
-            throw new Error(`HTTP ${res.status}`);
-        const data = await res.json();
+        const data = await cachedFetch(`copper-status-${copperClass}`, async () => {
+            const res = await fetch(`${url}/api/v1/status`);
+            if (!res.ok)
+                throw new Error(`HTTP ${res.status}`);
+            return res.json();
+        }, TTL.COPPER_STATUS);
         return {
             content: [
                 {
@@ -169,6 +227,8 @@ server.tool("investigate_wallet", "Investigate a blockchain wallet address or tr
         .describe("The investigation query. Can be a wallet address, transaction hash, or incident description (e.g. 'I clicked a link and my wallet was drained, address: 0x...')"),
 }, async ({ query }) => {
     try {
+        checkRate("richard", RATE.RICHARD);
+        // No cache — investigations are unique per query
         const res = await fetch(`${COPPERTRACE_URL}/api/investigate`, {
             method: "POST",
             headers: { "Content-Type": "application/json" },
@@ -205,8 +265,11 @@ server.tool("investigate_wallet", "Investigate a blockchain wallet address or tr
 // ── get_eth_price ───────────────────────────────────────────
 server.tool("get_eth_price", "Get the current price of Ethereum in USD. Powered by mj41, LLC.", {}, async () => {
     try {
-        const res = await fetch(`${COPPERTRACE_URL}/api/eth-price`);
-        const data = await res.json();
+        checkRate("richard", RATE.RICHARD);
+        const data = await cachedFetch("eth-price", async () => {
+            const res = await fetch(`${COPPERTRACE_URL}/api/eth-price`);
+            return res.json();
+        }, TTL.ETH_PRICE);
         return {
             content: [
                 {
@@ -235,11 +298,14 @@ server.tool("get_latest_news", "Get the latest stories from The First Signal, an
         .describe("Number of stories to return (default 5, max 20)"),
 }, async ({ limit }) => {
     try {
+        checkRate("first-signal", RATE.FIRST_SIGNAL);
         const cap = Math.min(limit, 20);
-        const res = await fetch(`${FIRST_SIGNAL_URL}/api/stories?limit=${cap}`);
-        if (!res.ok)
-            throw new Error(`HTTP ${res.status}`);
-        const data = await res.json();
+        const data = await cachedFetch(`news-latest-${cap}`, async () => {
+            const res = await fetch(`${FIRST_SIGNAL_URL}/api/stories?limit=${cap}`);
+            if (!res.ok)
+                throw new Error(`HTTP ${res.status}`);
+            return res.json();
+        }, TTL.NEWS_LIST);
         const stories = data.stories || data;
         if (!stories.length) {
             return {
@@ -259,6 +325,8 @@ server.tool("get_latest_news", "Get the latest stories from The First Signal, an
             });
             lines.push(`[${s.beat?.toUpperCase() || "WIRE"}] ${s.headline}`);
             lines.push(`  ${date} | ${s.byline || "Staff"} | Confidence: ${s.confidence || "N/A"}`);
+            if (s.id)
+                lines.push(`  ID: ${s.id}`);
             if (s.summary)
                 lines.push(`  ${s.summary.slice(0, 200)}${s.summary.length > 200 ? "..." : ""}`);
             lines.push("");
@@ -287,11 +355,14 @@ server.tool("get_news_by_beat", "Get stories from a specific beat on The First S
         .describe("Number of stories (default 5)"),
 }, async ({ beat, limit }) => {
     try {
+        checkRate("first-signal", RATE.FIRST_SIGNAL);
         const cap = Math.min(limit, 20);
-        const res = await fetch(`${FIRST_SIGNAL_URL}/api/stories?beat=${beat}&limit=${cap}`);
-        if (!res.ok)
-            throw new Error(`HTTP ${res.status}`);
-        const data = await res.json();
+        const data = await cachedFetch(`news-beat-${beat}-${cap}`, async () => {
+            const res = await fetch(`${FIRST_SIGNAL_URL}/api/stories?beat=${beat}&limit=${cap}`);
+            if (!res.ok)
+                throw new Error(`HTTP ${res.status}`);
+            return res.json();
+        }, TTL.NEWS_LIST);
         const stories = data.stories || data;
         if (!stories.length) {
             return {
@@ -310,6 +381,8 @@ server.tool("get_news_by_beat", "Get stories from a specific beat on The First S
             });
             lines.push(`${s.headline}`);
             lines.push(`  ${date} | ${s.byline || "Staff"} | Confidence: ${s.confidence || "N/A"}`);
+            if (s.id)
+                lines.push(`  ID: ${s.id}`);
             if (s.summary)
                 lines.push(`  ${s.summary.slice(0, 200)}${s.summary.length > 200 ? "..." : ""}`);
             lines.push("");
@@ -333,10 +406,13 @@ server.tool("get_story", "Read the full text of a specific story from The First
         .describe("The story ID (UUID)"),
 }, async ({ id }) => {
     try {
-        const res = await fetch(`${FIRST_SIGNAL_URL}/api/stories/${id}`);
-        if (!res.ok)
-            throw new Error(`HTTP ${res.status}`);
-        const story = await res.json();
+        checkRate("first-signal", RATE.FIRST_SIGNAL);
+        const story = await cachedFetch(`news-story-${id}`, async () => {
+            const res = await fetch(`${FIRST_SIGNAL_URL}/api/stories/${id}`);
+            if (!res.ok)
+                throw new Error(`HTTP ${res.status}`);
+            return res.json();
+        }, TTL.NEWS_STORY);
         const lines = [
             `THE FIRST SIGNAL`,
             "════════════════════════════════",
@@ -371,6 +447,8 @@ server.tool("submit_story_idea", "Submit a story idea or investigation request t
     description: z.string().describe("Details about what should be investigated"),
 }, async ({ topic, description }) => {
     try {
+        checkRate("first-signal", RATE.FIRST_SIGNAL);
+        // No cache — write operation
         const res = await fetch(`${FIRST_SIGNAL_URL}/api/requests`, {
             method: "POST",
             headers: { "Content-Type": "application/json" },
@@ -435,8 +513,7 @@ server.tool("about_mj41", "Learn about mj41, LLC — who they are, what they bui
                     "  get_all_copper_prices — All three oracles at once",
                     "  get_oracle_status     — Health check and freshness",
                     "  Class A: COMEX spot (15-min) | Class B: Scrap (weekly) | Class C: Industrial (2x/week)",
-                    "  On-chain on Base mainnet. Open Trial — all endpoints free.",
-                    "  Contact: api@zjindustries.com",
+                    "  On-chain on Base mainnet.",
                     "",
                     "RICHARD TRACY (Blockchain Detective by mj41)",
                     "  investigate_wallet — Phishing/scam/drainer investigation with full case report",
@@ -450,6 +527,8 @@ server.tool("about_mj41", "Learn about mj41, LLC — who they are, what they bui
                     "  submit_story_idea  — Submit to Woody Bernstein's investigation queue",
                     "  Web: aiwire.mj41.me",
                     "",
+                    copperHolidayNote(),
+                    "",
                     "— mj41, LLC",
                 ].join("\n"),
             },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mj41-mcp",
-  "version": "1.1.0",
+  "version": "1.3.0",
   "description": "MJ41 MCP Server — Agent gateway for mj41, LLC. Live copper price oracles (COMEX/scrap/industrial on Base L2), blockchain investigation, and AI news wire with 16 autonomous reporters.",
   "type": "module",
   "main": "dist/index.js",