Signal Oracle
by NeruoticFarrow · remote · no sign-in to list tools · v1.0.0 · published by GitHub user NeruoticFarrow
Pay-per-call change-intelligence feeds for AI agents over x402 (deps, security, regs, tariffs)
7 tools: 7 only read.
Scanned Oct 21, 2026
- Deletes or cancels0Claude Code: deny
- Can't be undone0Claude Code: ask
- Changes things0Claude Code: ask
- Only reads7Claude Code: allow: see these tools
No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http signal-oracle https://oracles-production.up.railway.app/mcpTools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
7 tools
Only reads 7Claude Code: allow
depwatch_previewFree preview of breaking changes / new releases for a software dependency.No findings
Why it is in this group
- The name "depwatch_preview" says "preview": a word for reading.
Description, as the server wrote it Free preview of breaking changes / new releases for a software dependency. Pass an npm/PyPI `package` (resolved and fetched live if not already tracked) or a GitHub `repo` (owner/repo). Returns up to 5 recent changes plus the package's current version. Full history, significance filtering, and the LLM brief are paid via x402.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
list_feedsList every change-intelligence feed: source slug, label, the question each answers, per-call prices, paid x402 endpoints, and free discovery URLs.No findings
Why it is in this group
- The name "list_feeds" says "list": a word for reading.
Description, as the server wrote it List every change-intelligence feed: source slug, label, the question each answers, per-call prices, paid x402 endpoints, and free discovery URLs. There are ~120 feeds, so pass `category` to filter (e.g. 'security', 'regulatory', 'packages', 'premium', 'infrastructure', 'compliance') and/or `compact: true` to keep the payload small. Use the returned `source` slug with preview_feed.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
packagehealth_previewFREE preview of a dependency's health: current version, deprecation flag, OpenSSF Scorecard, SPDX license, and known-advisory count (via deps.dev).No findings
Why it is in this group
- The name "packagehealth_preview" says "preview": a word for reading.
Description, as the server wrote it FREE preview of a dependency's health: current version, deprecation flag, OpenSSF Scorecard, SPDX license, and known-advisory count (via deps.dev). The full ship/avoid verdict — per-advisory CISA-KEV active-exploit cross-reference, license-fit judgement, and LLM recommendation — is the paid /v1/packagehealth/check.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
preview_feedFree preview (up to 5 recent changes) for any feed.No findings
Why it is in this group
- The name "preview_feed" says "preview": a word for reading.
Description, as the server wrote it Free preview (up to 5 recent changes) for any feed. Pass the feed's `source` slug (from list_feeds). Optionally: `since` (ISO-8601) to window; `scope` to filter to an entity-id prefix on feeds that support it (e.g. an HTS code); or `package`/`repo`/`ecosystem` on feeds that resolve arbitrary entities live (e.g. dependency feeds). The full feed, status, and LLM brief are paid via x402.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
regwatch_previewFree preview of recent Federal Register regulatory actions in the tracked industry vertical.No findings
Why it is in this group
- The name "regwatch_preview" says "preview": a word for reading.
Description, as the server wrote it Free preview of recent Federal Register regulatory actions in the tracked industry vertical. Returns up to 5 recent items. The full windowed feed and the LLM brief are paid via x402.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
tariffwatch_previewFree preview of recent US import-tariff changes.No findings
Why it is in this group
- The name "tariffwatch_preview" says "preview": a word for reading.
Description, as the server wrote it Free preview of recent US import-tariff changes. Optionally scope to an HTS code prefix (e.g. '6109' or '8471.30'). Returns up to 5 recent changes plus current duty-rate state for a scoped code. Full feed and the LLM brief are paid via x402.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
vendorrisk_previewFREE preview of counterparty risk: tracked OFAC designations + product recalls we monitor for the name.No findings
Why it is in this group
- The name "vendorrisk_preview" says "preview": a word for reading.
Description, as the server wrote it FREE preview of counterparty risk: tracked OFAC designations + product recalls we monitor for the name. The authoritative sanctions/denied-party (CSL) + federal debarment (SAM) screening and the CLEAR→PROHIBITED risk verdict are the paid /v1/vendorrisk/check.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 1.0.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http signal-oracle https://oracles-production.up.railway.app/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__signal-oracle__list_feeds",
"mcp__signal-oracle__preview_feed",
"mcp__signal-oracle__packagehealth_preview",
"mcp__signal-oracle__vendorrisk_preview",
"mcp__signal-oracle__depwatch_preview",
"mcp__signal-oracle__regwatch_preview",
"mcp__signal-oracle__tariffwatch_preview"
],
"ask": [],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as signal-oracle. Review it before you use it.
