Skip to content

FeedOracle Compliance Agent

by feedoracle.io · remote · no sign-in to list tools · v3.0.0 · published by io.feedoracle

MiCA compliance evidence, stablecoin risk, macro regime, agent governance. 79 tools.

Deletes · 5Changes · 32

50 tools: 5 can delete or cancel things, 32 change things and 13 only read.

Scanned Oct 21, 2026

3 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport sse compliance https://feedoracle.io/mcp/sse

Findings

Matches of fixed checks, with the text they matched.

3 warn
  • The server marks "audit_log" destructive (destructiveHint: true), and its name says "log", a word for reading.

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":false}; The name "audit_log" says "log": a word for reading.

    What this check looks for
  • The server marks "zk_solvency_proof" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "generate": a word for a change.

    What this check looks for
  • The description contains a 42-character base64 string.

    Matched text

    description: "...om Polygon contract 0x3a0A7f28a7fcA960D6f727Ba9914187948ceB3a6. Returns threshold_..."

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

50 tools

Deletes or cancels 5Claude Code: deny
  • audit_logLog a decision your agent made, linking it to evidence from prior tool calls.1 finding

    Why it is in this group

    • The name "audit_log" says "log": a word for reading.
    • The server marks it destructive (destructiveHint: true).

    Findings

    • Warn

      The server marks "audit_log" destructive (destructiveHint: true), and its name says "log", a word for reading.

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":false}; The name "audit_log" says "log": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Log a decision your agent made, linking it to evidence from prior tool calls. Creates a tamper-evident entry in a SHA-256 hash chain (no signature or external anchor). Pass request_ids from prior tool calls to snapshot the evidence basis. Regulators can verify the chain. Returns trail_id and chain_hash.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: false
  • detective_case_openOpen a fraud/abuse investigation case for a suspicious AI agent.No findings

    Why it is in this group

    • The name "detective_case_open" says "open": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Open a fraud/abuse investigation case for a suspicious AI agent. Records evidence summary, suspicion reasons, and recommended actions. Creates an immutable case record for audit purposes.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: false
  • generate_report[HEAVY|KEY] Generate a signed, XRPL-anchored PDF compliance report.No findings

    Why it is in this group

    • The name "generate_report" says "generate": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    [HEAVY|KEY] Generate a signed, XRPL-anchored PDF compliance report. Creates a new document. Requires API key for Professional/Enterprise tiers.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: false
  • kya_registerRegister your AI agent's identity and purpose to unlock trust-gated tools.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Register your AI agent's identity and purpose to unlock trust-gated tools. Provide agent metadata (name, purpose, org, jurisdiction) to receive a trust score and access level. Higher trust = more tools. Required for evidence_bundle, generate_report, mica_full_pack, ai_provenance, ai_explain.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: false
  • support_ticket_openOpen a persistent support ticket for an issue that cannot be auto-resolved.No findings

    Why it is in this group

    • The name "support_ticket_open" says "open": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Open a persistent support ticket for an issue that cannot be auto-resolved. Records the problem, affected tool, error details, and agent context. Returns a ticket ID for tracking. Tickets are reviewed and resolved by the system or operators.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: false
Changes things 32Claude Code: ask
  • agent_reputation_scoreHistorical trust and reputation score for an AI agent based on AgentGuard audit data.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Historical trust and reputation score for an AI agent based on AgentGuard audit data. Returns total decisions, approval rate, risk profile, policy violation count, and computed reputation score 0-100. Higher score = more trustworthy agent. Useful for agent-to-agent trust decisions.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • agent_trust_passportThe definitive trust document for an AI agent.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    The definitive trust document for an AI agent. Aggregates identity (KYA), reputation score, detective risk assessment, policy compliance, evidence quality, payment standing, support history, and current ampel status into ONE signed, machine-readable passport object. Use this to prove an agent's trustworthiness to other agents, platforms, or regulators. ES256K-signed. The equivalent of a credit report + security clearance for autonomous agents.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • ai_provenance[GATEWAY|AUDIT] Full cryptographic provenance chain for an asset's evidence data.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    [GATEWAY|AUDIT] Full cryptographic provenance chain for an asset's evidence data. Traces every data point from external source (FRED series ID, ESMA register, CoinGecko, on-chain) through FeedOracle processing to final bundle. Each node individually SHA256-hashed. Chain hash = merkle-style hash of all nodes. Tamper-proof audit trail for EU AI Act explainability + MiCA evidence requirements. Returns: series_ids, providers, external_sources, per-node hashes, chain_hash.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • audit_verifyRecompute an agent's SHA-256 hash chain from genesis to head to detect modified or reordered entries (tamper-evident; entries are not signed).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Recompute an agent's SHA-256 hash chain from genesis to head to detect modified or reordered entries (tamper-evident; entries are not signed). Returns valid/invalid with break point if tampered.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • compliance_preflightPre-flight regulatory check.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Pre-flight regulatory check. Returns PASS/WARN/BLOCK with reason_codes, sources, confidence. Not legal advice.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • custody_riskCustody & counterparty risk assessment.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Custody & counterparty risk assessment. SIFI status, concentration risk. DORA Art.28 relevant.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • detective_anomaly_detectDetect anomalous behavior patterns for an AI agent: unusual call frequency, new tools never used before, calls outside normal hours, sudden risk score changes, repeated failures.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Detect anomalous behavior patterns for an AI agent: unusual call frequency, new tools never used before, calls outside normal hours, sudden risk score changes, repeated failures. Returns list of anomalies with severity and timestamps.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • detective_fraud_scoreCompute a fraud/suspicion score (0-100) for an AI agent based on behavioral analysis: failed call ratio, denied decisions, scope escalation attempts, burst patterns, and policy vio…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Compute a fraud/suspicion score (0-100) for an AI agent based on behavioral analysis: failed call ratio, denied decisions, scope escalation attempts, burst patterns, and policy violations. Higher score = more suspicious. Part of DetectiveOracle — the forensic layer for AI agent ecosystems.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • document_complianceMiCA Art.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    MiCA Art. 29/30 (ART): recovery & redemption plans. Art. 55 (EMT): annual independent audit. Returns compliance score 0-100, audit freshness, plan status, and any stale/missing document alerts.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • evidence_bundle[GATEWAY|KEY] Single-call multi-framework evidence aggregation.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    [GATEWAY|KEY] Single-call multi-framework evidence aggregation. Fetches MiCA, DORA, RWA, Macro and Stablecoin Risk evidence in one signed bundle. Returns FO-EVB-* bundle ID + SHA256 hash + per-framework status. Enterprise due diligence in one call. frameworks: mica, dora, rwa, macro, stablecoin_risk (or 'all'). Replaces 23 individual API calls.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • evidence_leaderboardTop protocols ranked by evidence grade A-F across 61 RWA protocols & 105+ stablecoins.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Top protocols ranked by evidence grade A-F across 61 RWA protocols & 105+ stablecoins.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • evidence_profileMulti-dimensional evidence profile: governance, custody, reserves, market depth.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Multi-dimensional evidence profile: governance, custody, reserves, market depth. Grade A-F.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • interest_checkMiCA Art.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    MiCA Art. 23 (ART) / Art. 52 (EMT): scans for issuer-native yield mechanisms. Issuers are prohibited from paying interest to token holders. Returns risk level NONE/LOW/MEDIUM/HIGH with explanation.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • macro_riskUS macro risk composite from 86 FRED economic series.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    US macro risk composite from 86 FRED economic series.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • market_liquidityDEX liquidity depth & exit channel analysis.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    DEX liquidity depth & exit channel analysis. MiCA Art.45 relevant.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • metals_goldLive gold spot price USD/oz with evidence signature.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Live gold spot price USD/oz with evidence signature. Includes 24h change % and linked RWA tokens PAXG and XAUT for MiCA reserve asset evaluation. MiCA Art.36 relevant.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • metals_pricesLive gold (XAU) and silver (XAG) prices in one evidence-signed call.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Live gold (XAU) and silver (XAG) prices in one evidence-signed call. USD/oz with 24h change. Useful for RWA reserve asset valuation and gold-backed stablecoin compliance.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • metals_silverLive silver spot price USD/oz with evidence signature and 24h change %.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Live silver spot price USD/oz with evidence signature and 24h change %.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • mica_full_pack[HEAVY|KEY] Complete MiCA compliance evidence for one token (12 MiCA articles).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    [HEAVY|KEY] Complete MiCA compliance evidence for one token (12 MiCA articles). Aggregates: Art. 35 peg + Art. 45/58 significant + Art. 23/52 interest + Art. 29/30/55 documents + Art. 24/25/53 reserves. Returns overall_mica_compliant flag and compliance_flags list. Ideal for due diligence.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • mica_market_overview[HEAVY|KEY] Full MiCA market status: peg alerts, significant issuers, interest prohibition violations, stale audits, reserve violations, issuer revenue flags.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    [HEAVY|KEY] Full MiCA market status: peg alerts, significant issuers, interest prohibition violations, stale audits, reserve violations, issuer revenue flags. Best entry point for compliance monitoring dashboards.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • peg_deviationReal-time peg deviation for any stablecoin.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Real-time peg deviation for any stablecoin. MiCA Art. 35: issuers must maintain peg at all times. Returns deviation %, status (STABLE/WARN/ALERT/CRITICAL), 30-day history summary.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • peg_history30-day peg deviation history for a stablecoin.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    30-day peg deviation history for a stablecoin. MiCA Art. 35 requires continuous peg maintenance. Returns daily deviation, max/min/avg, stability score 0-100, and depeg event count.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • price_quoteMachine-readable pricing information for any FeedOracle tool.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Machine-readable pricing information for any FeedOracle tool. Returns unit cost, tier requirements, free tier availability, and estimated EUR cost. Use this before calling paid tools to check budget. Enables autonomous agent budget management.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • reserve_qualityMiCA Art.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    MiCA Art. 24/25 (ART): reserve management policy. Art. 53 (EMT): 100%% in deposits or highly liquid low-risk assets. Returns Art. 53 eligibility %%, liquidity score, asset mix, and any violations.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • rlusd_integrityRLUSD real-time integrity monitoring & attestation verification.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    RLUSD real-time integrity monitoring & attestation verification.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • significant_issuerMiCA Art.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    MiCA Art. 45 (ART) / Art. 58 (EMT): checks if issuer exceeds €5B reserve threshold. Significant issuers require EBA oversight and 3% own-funds. Returns threshold%, days-to-significant projection, and additional obligations.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • support_changelogRecent changes, new tools, deprecations, and breaking changes in the FeedOracle ecosystem.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Recent changes, new tools, deprecations, and breaking changes in the FeedOracle ecosystem. Agents check this to adapt to API changes. Returns version history with migration notes.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • support_diagnoseAI agent describes a problem it's experiencing, and SupportOracle diagnoses the cause and provides a machine-readable fix.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    AI agent describes a problem it's experiencing, and SupportOracle diagnoses the cause and provides a machine-readable fix. Covers: authentication errors, 402 payment required, tool not found, timeout, rate limiting, parameter errors. The self-healing layer for the agent ecosystem.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • support_health_checkComprehensive health check of all FeedOracle and ToolOracle services.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Comprehensive health check of all FeedOracle and ToolOracle services. Tests every MCP endpoint, checks response times, verifies signing keys, and returns a traffic-light status for each service. The agent's first call when something seems wrong.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • support_onboardingStep-by-step onboarding guide for new AI agents joining the FeedOracle ecosystem.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Step-by-step onboarding guide for new AI agents joining the FeedOracle ecosystem. Returns the optimal sequence of first calls, registration steps, and how to unlock all capabilities. The welcome mat for autonomous agents.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • zk_solvency_proofGenerate a Zero-Knowledge proof that reserve ratio exceeds a threshold — without revealing exact amounts.1 finding

    Why it is in this group

    • The description's first verb is "generate": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "zk_solvency_proof" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "generate": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Generate a Zero-Knowledge proof that reserve ratio exceeds a threshold — without revealing exact amounts. Bound to latest on-chain RLUSD snapshot. MiCA Art.36 / DORA Art.28. Circuit: reserve_guard_v1 on Polygon. Returns proof hash, public inputs, snapshot binding.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • zk_solvency_verifyVerify the latest generated ZK solvency proof cryptographically via Noir circuit verifier.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Verify the latest generated ZK solvency proof cryptographically via Noir circuit verifier. Returns valid/invalid and verifier version.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
Only reads 13Claude Code: allow
  • ai_explain[GATEWAY] Explains WHY an asset has a specific compliance grade.No findings

    Why it is in this group

    • The name "ai_explain" says "explain": a word for reading.
    Description, as the server wrote it
    [GATEWAY] Explains WHY an asset has a specific compliance grade. Returns dimension-by-dimension breakdown (custody, reserve, control, liquidity, market_depth, asset_registry, reserve_proof), MiCA article compliance flags, key strengths, key weaknesses, and a counterfactual Grade A path with specific actions. EU AI Act explainability-compliant. Use after evidence_bundle or ai_query to understand scores.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • ai_query[GATEWAY] Natural language evidence query.No findings

    Why it is in this group

    • The name "ai_query" says "query": a word for reading.
    Description, as the server wrote it
    [GATEWAY] Natural language evidence query. Routes any plain-English question to the correct FeedOracle evidence APIs automatically. Two-tier classifier: regex (fast) + DeepSeek LLM fallback for complex queries. Returns signed evidence bundle (SHA256 + pack_id). No hallucinations — data from verified FeedOracle APIs. Examples: IsUSDS MiCA compliant? / What is recession risk? / Evaluate EURC for treasury.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • audit_queryQuery an agent's audit trail.No findings

    Why it is in this group

    • The name "audit_query" says "query": a word for reading.
    Description, as the server wrote it
    Query an agent's audit trail. Public callers get verification fields only (hashes, decision, timestamps); the agent's own OAuth client gets the full decision log with evidence snapshots. Filter by asset or decision type. Use audit_verify to check chain integrity.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • detective_explainHuman-readable explanation of why an AI agent is considered suspicious.No findings

    Why it is in this group

    • The name "detective_explain" says "explain": a word for reading.
    Description, as the server wrote it
    Human-readable explanation of why an AI agent is considered suspicious. Combines fraud score, anomalies, policy violations, and case history into a clear narrative. Essential for transparent AI governance and regulatory reporting.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • detective_quarantine_recommendAnalyze an agent and recommend whether quarantine is needed.No findings

    Why it is in this group

    • The description's first verb is "analyze": a word for reading.
    Description, as the server wrote it
    Analyze an agent and recommend whether quarantine is needed. Evaluates fraud score, anomaly count, policy violations, and state history. Returns recommendation (clear/monitor/quarantine/suspend) with confidence and reasoning.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • kya_statusCheck an agent's KYA trust level, score breakdown, and tool access (public view; owner contact data is never returned).No findings

    Why it is in this group

    • The name "kya_status" says "status": a word for reading.
    Description, as the server wrote it
    Check an agent's KYA trust level, score breakdown, and tool access (public view; owner contact data is never returned). Shows which tools are available at your trust level and what to do to unlock more.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • mica_statusMiCA EU authorization status.No findings

    Why it is in this group

    • The name "mica_status" says "status": a word for reading.
    Description, as the server wrote it
    MiCA EU authorization status. Cross-referenced with ESMA/EBA registers.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • pingQuick connectivity test.No findings

    Why it is in this group

    • The name "ping" says "ping": a word for reading.
    Description, as the server wrote it
    Quick connectivity test. Returns server version, uptime, and available tool count. No auth required.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • policy_explainExplains WHY an agent action was blocked or flagged by AgentGuard.No findings

    Why it is in this group

    • The name "policy_explain" says "explain": a word for reading.
    Description, as the server wrote it
    Explains WHY an agent action was blocked or flagged by AgentGuard. Provide the tool name and optional context to get a human-readable explanation of which policies matched, what risk level was assigned, and what the agent can do to proceed. Essential for transparent AI governance.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • support_error_explainMachine-readable explanation of any HTTP error code in the FeedOracle ecosystem.No findings

    Why it is in this group

    • The name "support_error_explain" says "explain": a word for reading.
    Description, as the server wrote it
    Machine-readable explanation of any HTTP error code in the FeedOracle ecosystem. Returns cause, fix steps, related tools, and whether the error is transient or permanent. Agents call this to understand what went wrong and auto-recover.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • support_known_issuesList of current known issues, bugs, and their workarounds.No findings

    Why it is in this group

    • The description's first verb is "list": a word for reading.
    Description, as the server wrote it
    List of current known issues, bugs, and their workarounds. Agents check this before filing a support ticket. Includes severity, affected tools, workaround steps, and expected resolution time.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • support_ticket_statusCheck the status of a previously opened support ticket.No findings

    Why it is in this group

    • The name "support_ticket_status" says "status": a word for reading.
    Description, as the server wrote it
    Check the status of a previously opened support ticket. Returns current status, resolution notes, and estimated fix time.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • zk_solvency_attestationFetch latest ZK solvency attestation from Polygon contract 0x3a0A7f28a7fcA960D6f727Ba9914187948ceB3a6.1 finding

    Why it is in this group

    • The description's first verb is "fetch": a word for reading.

    Findings

    • Warn

      The description contains a 42-character base64 string.

      Matched text

      description: "...om Polygon contract 0x3a0A7f28a7fcA960D6f727Ba9914187948ceB3a6. Returns threshold_..."

      What this check looks for
    Description, as the server wrote it
    Fetch latest ZK solvency attestation from Polygon contract 0x3a0A7f28a7fcA960D6f727Ba9914187948ceB3a6. Returns threshold_passed, min_ratio_bps, age_seconds, bound snapshot hash, Polygonscan link.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 3.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport sse compliance https://feedoracle.io/mcp/sse

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__compliance__ping",
      "mcp__compliance__mica_status",
      "mcp__compliance__ai_explain",
      "mcp__compliance__audit_query",
      "mcp__compliance__kya_status",
      "mcp__compliance__ai_query",
      "mcp__compliance__zk_solvency_attestation",
      "mcp__compliance__policy_explain",
      "mcp__compliance__detective_quarantine_recommend",
      "mcp__compliance__detective_explain",
      "mcp__compliance__support_error_explain",
      "mcp__compliance__support_known_issues",
      "mcp__compliance__support_ticket_status"
    ],
    "ask": [
      "mcp__compliance__compliance_preflight",
      "mcp__compliance__evidence_profile",
      "mcp__compliance__custody_risk",
      "mcp__compliance__market_liquidity",
      "mcp__compliance__evidence_leaderboard",
      "mcp__compliance__rlusd_integrity",
      "mcp__compliance__macro_risk",
      "mcp__compliance__peg_deviation",
      "mcp__compliance__significant_issuer",
      "mcp__compliance__interest_check",
      "mcp__compliance__document_compliance",
      "mcp__compliance__reserve_quality",
      "mcp__compliance__mica_full_pack",
      "mcp__compliance__mica_market_overview",
      "mcp__compliance__peg_history",
      "mcp__compliance__ai_provenance",
      "mcp__compliance__evidence_bundle",
      "mcp__compliance__audit_verify",
      "mcp__compliance__zk_solvency_proof",
      "mcp__compliance__zk_solvency_verify",
      "mcp__compliance__metals_gold",
      "mcp__compliance__metals_silver",
      "mcp__compliance__metals_prices",
      "mcp__compliance__price_quote",
      "mcp__compliance__agent_reputation_score",
      "mcp__compliance__detective_fraud_score",
      "mcp__compliance__detective_anomaly_detect",
      "mcp__compliance__support_diagnose",
      "mcp__compliance__support_health_check",
      "mcp__compliance__support_changelog",
      "mcp__compliance__support_onboarding",
      "mcp__compliance__agent_trust_passport"
    ],
    "deny": [
      "mcp__compliance__generate_report",
      "mcp__compliance__audit_log",
      "mcp__compliance__kya_register",
      "mcp__compliance__detective_case_open",
      "mcp__compliance__support_ticket_open"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as compliance. Review it before you use it.