algochains-mcp-server 22.4.0__tar.gz

algochains_mcp_server-22.4.0/.env.example

@@ -0,0 +1,245 @@
+# ═══════════════════════════════════════════════════════════════
+# AlgoChains MCP Server v20 — Environment Configuration
+# Copy to .env and fill in your credentials
+# Run "python scripts/startup_health_check.py" to verify setup
+#
+# Tier structure:
+#   Free      → Yahoo Finance data, backtest templates
+#   $49/mo    → Polygon, Alpha Vantage, full strategy builder
+#   $199/mo   → Builder SDK, Supabase data warehouse, marketplace submission
+#   $499/mo   → Institutional execution, FIX gateway, white-label
+# ═══════════════════════════════════════════════════════════════
+
+# ── AlgoChains Platform ─────────────────────────────────────────
+# Get your API key from https://algochains.ai/dashboard
+ALGOCHAINS_API_KEY=
+ALGOCHAINS_DJANGO_URL=https://algochains.ai
+
+# ── Builder SDK ($199/mo tier) ───────────────────────────────────
+# Enables: Supabase data warehouse, marketplace submission, paper trading monitor
+# Get from: https://algochains.ai/dashboard/builder
+ALGOCHAINS_BUILDER_KEY=
+
+# ── Signal HMAC Security (Django trade propagation — Roo architecture) ──
+# REQUIRED for paper trading and live mode signal propagation.
+# Minimum 32 characters. Generate with: python3 -c "import secrets; print(secrets.token_hex(32))"
+# This secret signs every signal so Django can verify authenticity.
+ALGOCHAINS_SIGNAL_SECRET=
+# Full ingest URL (HTTPS). MCP tool: propagate_trade_signal
+ALGOCHAINS_SIGNAL_URL=
+# Legacy aliases (also accepted by trade_propagation.py and examples/trade_propagation/send_signal.py)
+SIGNAL_SECRET=
+SIGNAL_URL=
+
+# ── AlgoChains Marketplace API Keys ──────────────────────────────
+# For publishing and updating strategy listings.
+LISTING_API_KEY=
+METRICS_INGEST_API_KEY=
+# CI / production: require both keys in startup_health_check.py
+# ALGOCHAINS_MARKETPLACE_STRICT=1
+# Local dev only (disables fail-fast in MarketplaceBridge — do not use in prod):
+# ALGOCHAINS_SKIP_MARKETPLACE_KEY_CHECK=1
+
+# ── Supabase (Marketplace DB + Platform Tables) ───────────────────
+# Main project: trkpzsnwjtmvgppuzlwu (marketplace listings, subscriptions)
+SUPABASE_URL=
+SUPABASE_ANON_KEY=
+SUPABASE_SERVICE_KEY=          # Service role key for server-side writes (tickets, oauth tokens, analytics)
+SUPABASE_SERVICE_ROLE_KEY=     # Alias used by waitlist.py; set to the same value as SUPABASE_SERVICE_KEY
+SUPABASE_RESET_REDIRECT_URL=https://algochains.ai/auth/reset-password
+
+# ── Email (Resend) ────────────────────────────────────────────────
+# https://resend.com — used for support tickets, waitlist, verification codes
+RESEND_API_KEY=
+SUPPORT_FROM_EMAIL=support@algochains.ai
+WAITLIST_FROM_EMAIL=waitlist@algochains.ai
+VERIFICATION_FROM_EMAIL=noreply@algochains.ai
+SUPPORT_EMAIL=support@algochains.ai
+
+# ── SMS (Twilio) — optional, enables SMS verification codes ───────
+# https://console.twilio.com
+TWILIO_ACCOUNT_SID=
+TWILIO_AUTH_TOKEN=
+TWILIO_FROM_NUMBER=             # E.164 format: +15551234567
+
+# ── Notion Integration — optional, syncs support tickets ─────────
+NOTION_API_KEY=
+NOTION_SUPPORT_DB_ID=           # Notion database ID for support tickets
+
+# ── Charles Schwab (TD Ameritrade successor) ──────────────────────
+# https://developer.schwab.com/products/trader-api--individual-
+SCHWAB_CLIENT_ID=
+SCHWAB_CLIENT_SECRET=
+SCHWAB_ACCESS_TOKEN=            # Set after completing OAuth flow
+SCHWAB_ACCOUNT_HASH=            # Auto-populated on first connect
+SCHWAB_PAPER=false
+
+# ── Kalshi (prediction markets — RSA signed REST) ────────────────
+# https://docs.kalshi.com/getting_started/api_keys
+KALSHI_ACCESS_KEY=
+KALSHI_PRIVATE_KEY_PATH=       # Path to PEM private key (chmod 600)
+# Or inline PEM for containers (avoid in production):
+# KALSHI_PRIVATE_KEY_PEM=
+# Production default: https://api.elections.kalshi.com — override for demo:
+# KALSHI_API_HOST=https://demo-api.kalshi.co
+
+# ── Polymarket CLOB (optional — for authenticated trading only) ───
+POLYMARKET_API_KEY=
+POLYMARKET_API_SECRET=
+POLYMARKET_PASSPHRASE=
+
+# ── OAuth General Settings ────────────────────────────────────────
+ALGOCHAINS_OAUTH_REDIRECT_URI=https://algochains.ai/oauth/callback
+
+# ── HTTP Transport Security ───────────────────────────────────────
+# Bearer token for the HTTP/SSE transport (algochains-mcp-http).
+# Set this to secure remote agent connections.
+# Generate with: python3 -c "import secrets; print(secrets.token_hex(32))"
+ALGOCHAINS_HTTP_TRANSPORT_SECRET=
+# Allowed CORS origins for HTTP transport (comma-separated, * = all)
+ALGOCHAINS_HTTP_CORS_ORIGINS=*
+
+# ── Account Protection Preset ────────────────────────────────────
+# Options: conservative | moderate | aggressive
+# conservative: VIX>25 kill, daily loss $200, drawdown 8%
+# moderate:     VIX>35 kill, daily loss $500, drawdown 15%  ← recommended
+# aggressive:   VIX>45 kill, daily loss $2000, drawdown 25%
+ALGOCHAINS_PROTECTION_PRESET=moderate
+
+# ═══════════════════════════════════════════════════════════════
+# BROKERS — Fill in at least one for live trading
+# ═══════════════════════════════════════════════════════════════
+
+# ── Tradovate (Futures — MNQ, CL, MES, NQ, ES) ────────────────
+TRADOVATE_USERNAME=
+TRADOVATE_PASSWORD=
+TRADOVATE_APP_ID=
+TRADOVATE_CID=
+TRADOVATE_SECRET=
+TRADOVATE_DEVICE_ID=
+# Environment: demo | live
+TRADOVATE_ENVIRONMENT=demo
+
+# ── Alpaca (Equities — stocks, ETFs) ─────────────────────────
+ALPACA_API_KEY=
+ALPACA_SECRET_KEY=
+# https://paper-api.alpaca.markets (paper) | https://api.alpaca.markets (live)
+ALPACA_BASE_URL=https://paper-api.alpaca.markets
+
+# ── Interactive Brokers (TWS must be running) ────────────────
+IBKR_HOST=127.0.0.1
+IBKR_PORT=7497
+IBKR_CLIENT_ID=1
+
+# ── OANDA (Forex) ────────────────────────────────────────────
+OANDA_ACCOUNT_ID=
+OANDA_ACCESS_TOKEN=
+# practice | live
+OANDA_ENVIRONMENT=practice
+
+# ── TradersPost.io (Webhook Meta-Router) ─────────────────────
+# Routes signals to: Schwab, Robinhood, Tastytrade, TradeStation,
+#                    Tradier, Coinbase, Kraken, Bitget, ByBit
+TRADERSPOST_WEBHOOK_URL=
+TRADERSPOST_API_KEY=
+
+# ── QuantConnect (LEAN Algorithm Platform) ───────────────────
+QUANTCONNECT_USER_ID=
+QUANTCONNECT_API_TOKEN=
+
+# ═══════════════════════════════════════════════════════════════
+# DATA PROVIDERS — Pick any you want (Yahoo Finance = free, no key)
+# ═══════════════════════════════════════════════════════════════
+
+# ── Polygon.io (Stocks, Options, Forex, Crypto) ─────────────────
+# Free: 5/min | $29/mo: unlimited | https://polygon.io
+POLYGON_API_KEY=
+
+# ── Alpha Vantage (Stocks, Forex, Crypto, 110+ technicals) ─────
+# Free: 25/day | $49.99/mo: 75/min | https://alphavantage.co
+ALPHA_VANTAGE_API_KEY=
+
+# ── Finnhub (Quotes, news, earnings, insider trades, SEC) ───────
+# Free: 60/min | $49/mo: 300/min | https://finnhub.io
+FINNHUB_API_KEY=
+
+# ── Twelve Data (800+ exchanges, stocks/forex/crypto) ───────────
+# Free: 800 credits/day | $29/mo | https://twelvedata.com
+TWELVE_DATA_API_KEY=
+
+# ── Databento (Tick Data / L2 Book — institutional) ─────────────
+# Professional-grade tick data, L2 order book, futures
+# No free tier | https://databento.com
+DATABENTO_API_KEY=
+
+# ── Unusual Whales (Options Flow / Dark Pool) ────────────────────
+# Options flow, dark pool prints, GEX, DIX
+# $57/mo | https://unusualwhales.com
+UNUSUAL_WHALES_API_KEY=
+
+# ── Intrinio (Fundamentals / Options Data) ───────────────────────
+# Company fundamentals, options chains, institutional holdings
+# Free trial | https://intrinio.com
+INTRINIO_API_KEY=
+
+# ── Nasdaq Data Link / Quandl (Economic / Macro) ────────────────
+QUANDL_API_KEY=
+
+# ── OpenBB (Aggregated Multi-Source) ─────────────────────────────
+OPENBB_PAT=
+
+# ═══════════════════════════════════════════════════════════════
+# NOTIFICATIONS (Optional — get alerts on your phone/Slack)
+# ═══════════════════════════════════════════════════════════════
+
+# ── Slack ──────────────────────────────────────────────────────
+SLACK_BOT_TOKEN=
+SLACK_CHANNEL_ID=C0A075W6D4H
+WAITLIST_NOTIFY_SECRET=        # Generate with: python3 -c "import secrets; print(secrets.token_hex(24))"
+SLACK_WEBHOOK_URL=
+# For signal routing alerts to #tradovate-futures-bot-changelog
+SLACK_CHANNEL_SIGNAL_ALERTS=#tradovate-futures-bot-changelog
+
+# ── Discord ────────────────────────────────────────────────────
+DISCORD_WEBHOOK_URL=
+
+# ── Telegram ───────────────────────────────────────────────────
+TELEGRAM_BOT_TOKEN=
+TELEGRAM_CHAT_ID=
+
+# ── Firebase Cloud Messaging (Mobile Push) ─────────────────────
+FCM_SERVER_KEY=
+
+# ── Email (SendGrid / Resend) ──────────────────────────────────
+EMAIL_API_KEY=
+
+# ═══════════════════════════════════════════════════════════════
+# ADVANCED — Only needed for institutional/V14+ features
+# ═══════════════════════════════════════════════════════════════
+
+# ── OpenAI (LLM Strategy Generator, Intent Engine) ─────────────
+OPENAI_API_KEY=
+
+# ── Anthropic (Claude for strategy analysis) ───────────────────
+ANTHROPIC_API_KEY=
+
+# ── Onyx Knowledge Base ─────────────────────────────────────────
+# Self-hosted RAG over AlgoChains docs, strategies, Slack archives
+ONYX_API_KEY=
+ONYX_API_URL=http://100.89.114.31:8080
+
+# ── PostgreSQL (Moltbook debate engine) ─────────────────────────
+MOLTBOOK_DB_URL=postgresql://algochains:@127.0.0.1:5434/moltbook
+
+# ── Redis ────────────────────────────────────────────────────────
+REDIS_URL=redis://127.0.0.1:6380
+
+# ── AWS (S3 tick data backup) ────────────────────────────────────
+AWS_ACCESS_KEY_ID=
+AWS_SECRET_ACCESS_KEY=
+AWS_REGION=us-east-1
+
+# ── BYOK Tool Mode ───────────────────────────────────────────────
+# smart (default) = 25 Tier-1 tools exposed
+# full = all 275+ tools exposed (use with Claude Code, not Cursor)
+ALGOCHAINS_TOOL_MODE=smart

algochains_mcp_server-22.4.0/.gitattributes

@@ -0,0 +1,7 @@
+# Enforce LF for shell scripts + hooks: CRLF breaks bash ("fi\r" -> unexpected EOF)
+# Root cause: core.autocrlf=true smudging .sh to CRLF on Windows checkouts.
+*.sh text eol=lf
+*.bash text eol=lf
+*.zsh text eol=lf
+hooks/** text eol=lf
+.husky/** text eol=lf

algochains_mcp_server-22.4.0/.github/workflows/mcp-regression-gate.yml

@@ -0,0 +1,266 @@
+name: MCP Tool Regression Gate
+on: [push, pull_request]
+
+jobs:
+  tool-schema-validation:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+      - uses: actions/setup-python@v5
+        with:
+          python-version: '3.12'
+
+      - name: Install AlgoChains MCP + MCPorter
+        run: |
+          pip install -e ".[dev]"
+          npm install -g mcporter
+
+      - name: Configure MCPorter
+        run: |
+          mkdir -p config
+          cat > config/mcporter.json << 'EOF'
+          {
+            "mcpServers": {
+              "algochains": {
+                "command": "algochains-mcp",
+                "env": {
+                  "ALGOCHAINS_TOOL_MODE": "full"
+                }
+              }
+            }
+          }
+          EOF
+
+      # Gate 1: Tool count must not decrease.
+      # Floor is conservatively below the current ground-truth (476 full, 150 smart).
+      # Bump both together when intentionally adding or removing tool families.
+      - name: "Gate 1: Full-Mode Tool Count (≥460)"
+        run: |
+          TOOLS=$(npx mcporter list algochains --json | jq '.tools | length')
+          echo "Tool count (full mode): $TOOLS"
+          [ "$TOOLS" -ge 460 ] || (echo "❌ FAIL: Expected ≥460 full-mode tools, got $TOOLS" && exit 1)
+          echo "✅ Full-mode tool count: $TOOLS"
+
+      # Gate 1b: Smart-mode Tier-1 count must stay in band.
+      - name: "Gate 1b: Smart-Mode Tier-1 Count (100–200)"
+        run: |
+          python3 - << 'PYEOF'
+          import sys
+          sys.path.insert(0, 'src')
+          import algochains_mcp.server as srv
+          count = len(srv.TOOLS_TIER1)
+          print(f"Smart-mode Tier-1 count: {count}")
+          assert 100 <= count <= 200, (
+              f"Smart-mode Tier-1 count {count} out of range [100, 200]. "
+              "Review TIER1_TOOL_NAMES in server.py."
+          )
+          print(f"✅ Smart-mode Tier-1 count: {count}")
+          PYEOF
+
+      # Gate 2: All Tier 1 tools must be present in smart mode
+      - name: "Gate 2: Tier 1 Tools Present"
+        env:
+          ALGOCHAINS_TOOL_MODE: smart
+        run: |
+          TIER1_EXPECTED="discover_tools get_tool_details execute_dynamic_tool massive_search_endpoints massive_call_api massive_query_data massive_run_pipeline get_positions get_account get_orders get_bot_health get_quant_regime_state portfolio_summary connect_broker run_backtest validate_strategy validate_strategy_metrics optimize_strategy browse_strategy_marketplace execute_intent approve_intent create_shadow_portfolio detect_market_regime"
+          TOOLS_JSON=$(npx mcporter list algochains --json)
+          for tool in $TIER1_EXPECTED; do
+            echo "$TOOLS_JSON" | jq -e ".tools[] | select(.name == \"$tool\")" > /dev/null 2>&1 \
+              || (echo "❌ Missing Tier 1 tool: $tool" && exit 1)
+          done
+          echo "✅ All Tier 1 tools present (v22 smart mode)"
+
+      # Gate 3: BM25 Smart Discovery returns relevant results (Python direct test — no mcporter call needed)
+      - name: "Gate 3: Smart Discovery BM25"
+        run: |
+          python3 - << 'PYEOF'
+          import sys
+          sys.path.insert(0, 'src')
+          from algochains_mcp.dynamic_toolsets.gateway import DynamicToolsetGateway
+          from algochains_mcp.server import TOOLS
+
+          gw = DynamicToolsetGateway()
+          gw.register_tools_from_list(
+              [{"name": t.name, "description": t.description, "inputSchema": t.inputSchema}
+               for t in TOOLS],
+              category="core", version="v20"
+          )
+          gw.build_index()
+
+          # Test 1: sentiment query
+          results = gw.discover("sentiment analysis", top_k=10)
+          sentiment_hits = [r for r in results if "sentiment" in r["name"].lower()]
+          assert sentiment_hits, f"BM25 'sentiment analysis' returned no sentiment tools. Got: {[r['name'] for r in results]}"
+          print(f"✅ BM25 sentiment: {[r['name'] for r in sentiment_hits]}")
+
+          # Test 2: portfolio query
+          results = gw.discover("portfolio positions", top_k=10)
+          portfolio_hits = [r for r in results if "portfolio" in r["name"].lower() or "position" in r["name"].lower()]
+          assert portfolio_hits, f"BM25 'portfolio positions' returned no portfolio/position tools. Got: {[r['name'] for r in results]}"
+          print(f"✅ BM25 portfolio: {[r['name'] for r in portfolio_hits]}")
+
+          print("✅ BM25 index returning relevant results")
+          PYEOF
+
+      # Gate 4: V18 Intent Engine tools present and callable
+      - name: "Gate 4: V18 Intent Engine Tools"
+        run: |
+          V18_TOOLS="execute_intent get_intent_plan approve_intent get_intent_history create_shadow_portfolio get_shadow_results evolve_strategies detect_arbitrage detect_market_regime prefetch_context"
+          TOOLS_JSON=$(npx mcporter list algochains --json)
+          COUNT=0
+          for tool in $V18_TOOLS; do
+            if echo "$TOOLS_JSON" | jq -e ".tools[] | select(.name == \"$tool\")" > /dev/null 2>&1; then
+              COUNT=$((COUNT + 1))
+            else
+              echo "❌ Missing V18 tool: $tool"
+              exit 1
+            fi
+          done
+          echo "✅ All $COUNT V18 Intent Engine + Genius Layer tools present"
+
+      # Gate 5: detect_market_regime returns valid regime output (Python direct test)
+      - name: "Gate 5: V18 Smoke Test"
+        run: |
+          python3 - << 'PYEOF'
+          import sys, asyncio
+          sys.path.insert(0, 'src')
+          from algochains_mcp.intent_engine.regime_detector import RegimeDetector, RegimeSignals
+
+          async def run():
+              eng = RegimeDetector()
+              result = await eng.detect(RegimeSignals())
+              data = result.to_dict()
+              assert "regime" in data, f"detect_market_regime missing 'regime' key: {data}"
+              print(f"✅ V18 detect_market_regime returns valid regime: {data['regime']}")
+
+          asyncio.run(run())
+          PYEOF
+
+      # Gate 6: Python AST parse (no syntax errors in server.py)
+      - name: "Gate 6: Python AST Validation"
+        run: |
+          python3 -c "
+          import ast
+          with open('src/algochains_mcp/server.py') as f:
+              tree = ast.parse(f.read())
+          print('✅ server.py AST parse OK')
+          "
+          python3 -c "
+          import ast, glob
+          for f in glob.glob('src/algochains_mcp/intent_engine/*.py'):
+              with open(f) as fh:
+                  ast.parse(fh.read())
+              print(f'✅ {f} OK')
+          "
+
+      # Gate 7: Massive white-label provider imports cleanly and the 4 composable
+      # tool methods are addressable. When a MASSIVE_API_KEY is available in CI
+      # (encrypted secret), build the BM25 index and run a read-only search so we
+      # catch upstream `llms.txt` drift before it hits the Tyler account.
+      - name: "Gate 7: Massive Provider Import + Optional Mocked API"
+        env:
+          MASSIVE_API_KEY: ${{ secrets.MASSIVE_API_KEY }}
+        run: |
+          python3 - << 'PYEOF'
+          import asyncio
+          import os
+          import sys
+          sys.path.insert(0, 'src')
+
+          from algochains_mcp.data_providers.massive_whitelabel import (
+              MassiveWhiteLabelProvider,
+          )
+          from algochains_mcp.config import MassiveConfig
+
+          required = {"search_endpoints", "get_endpoint_docs", "call_api", "query_data", "startup"}
+          missing = [m for m in required if not hasattr(MassiveWhiteLabelProvider, m)]
+          assert not missing, f"MassiveWhiteLabelProvider missing methods: {missing}"
+          print(f"✅ Massive provider exposes composable tool surface: {sorted(required)}")
+
+          if not os.environ.get("MASSIVE_API_KEY"):
+              print("ℹ️  MASSIVE_API_KEY absent in this CI context — skipping live BM25 smoke")
+              sys.exit(0)
+
+          async def _smoke():
+              cfg = MassiveConfig(api_key=os.environ["MASSIVE_API_KEY"])
+              prov = MassiveWhiteLabelProvider(cfg)
+              await prov.startup()
+              hits = prov.search_endpoints(query="aggregates", top_k=3)
+              assert isinstance(hits, list) and hits, f"search_endpoints returned nothing: {hits!r}"
+              print(f"✅ Massive BM25 returned {len(hits)} hits (top: {hits[0].get('path', '?')})")
+
+          asyncio.run(_smoke())
+          PYEOF
+
+      # Gate 8: server.py non-empty — catches accidental zeroing
+      - name: "Gate 8: server.py Non-Empty"
+        run: |
+          SIZE=$(wc -c < src/algochains_mcp/server.py)
+          echo "server.py size: $SIZE bytes"
+          [ "$SIZE" -gt 10000 ] || (echo "❌ FAIL: server.py is only $SIZE bytes — likely accidental deletion" && exit 1)
+          echo "✅ server.py size: $SIZE bytes"
+
+      # Gate 9: Secret scan — no hardcoded API keys in src/ or tests/
+      - name: "Gate 9: Secret Scan"
+        run: |
+          python3 scripts/secret_scan.py --ci
+          echo "✅ Secret scan clean"
+
+      # Gate 10: Docs drift check — README/pyproject must agree on major version
+      - name: "Gate 10: Docs Version Drift"
+        run: |
+          python3 - << 'PYEOF'
+          import re
+          from pathlib import Path
+
+          root = Path(".")
+          pyproject = (root / "pyproject.toml").read_text()
+          readme = (root / "README.md").read_text()
+
+          # Extract version from pyproject.toml
+          m = re.search(r'^version\s*=\s*["\']([^"\']+)["\']', pyproject, re.MULTILINE)
+          assert m, "Could not find version in pyproject.toml"
+          pyproject_version = m.group(1)  # e.g. "22.2.0"
+          major = pyproject_version.split(".")[0]  # "22"
+
+          # README should reference same major version in badge or changelog
+          assert f"v{major}" in readme or f"version-{major}" in readme.lower() or major in readme, (
+              f"README does not reference major version v{major} from pyproject.toml. "
+              "Update README badge or changelog header."
+          )
+          print(f"✅ Version consistency: pyproject={pyproject_version}, README references v{major}")
+          PYEOF
+
+      # Gate 11: algochains.ts description must not say v18 (stale wrapper check)
+      - name: "Gate 11: Generated Wrapper Freshness"
+        run: |
+          python3 - << 'PYEOF'
+          from pathlib import Path
+          ts = Path("algochains.ts")
+          if not ts.exists():
+              print("ℹ️  algochains.ts not found — skipping wrapper freshness check")
+              import sys; sys.exit(0)
+          content = ts.read_text(errors="replace")
+          stale_markers = ["v18 ", "v18—", "167+ tools", "167+", "~25 core tools"]
+          found = [m for m in stale_markers if m.lower() in content.lower()]
+          assert not found, (
+              f"algochains.ts contains stale version markers: {found}. "
+              "Run: npx mcporter generate algochains --out algochains.ts  to regenerate."
+          )
+          print("✅ algochains.ts has no stale v18/167+ markers")
+          PYEOF
+
+      # Gate 12: No zero-byte non-init source files
+      - name: "Gate 12: No Zero-Byte Source Files"
+        run: |
+          # __init__.py files may be intentionally empty as package markers
+          ZEROED=$(find src/algochains_mcp -name "*.py" ! -name "__init__.py" -empty 2>/dev/null | head -20)
+          if [ -n "$ZEROED" ]; then
+            echo "❌ Zero-byte source files detected (excluding __init__.py):"
+            echo "$ZEROED"
+            exit 1
+          fi
+          echo "✅ No zero-byte source files"