io.github.LembaGang/headless-oracle-mcp
Ed25519-signed market-state receipts for 28 exchanges. Fail-closed pre-trade gate.
التثبيت
أضف هذا إلى إعدادات MCP في عميلك (Claude Desktop: claude_desktop_config.json، وCursor: .cursor/mcp.json، ويستخدم VS Code وغيره الصيغة نفسها «mcpServers»).
headless-oracle-mcpclaude mcp add headless-oracle-mcp -- npx -y headless-oracle-mcp@1.0.3
{
"mcpServers": {
"headless-oracle-mcp": {
"command": "npx",
"args": [
"-y",
"headless-oracle-mcp@1.0.3"
]
}
}
}
التوثيق
مأخوذ من ملف README للمشروع على GitHub ويُحدَّث أسبوعيًا. تفتح الروابط على GitHub.
المحتويات
Headless Oracle
Ed25519-signed market-state attestations for 28 global exchanges.
What It Does
Autonomous trading agents need to know if an exchange is open before executing trades. Headless Oracle answers that question with a cryptographically signed receipt that any agent can verify independently — no trust in the operator required. UNKNOWN states are always treated as CLOSED (fail-closed).
Quick Start
# MCP (Claude Desktop, Cursor, any MCP client)
npx headless-oracle-mcp
# REST API — demo receipt (no auth required)
curl https://headlessoracle.com/v5/demo?mic=XNYS
# Sandbox key (200 calls, 7 days, no card) - POST with an email
curl -X POST https://headlessoracle.com/v5/sandbox \
-H 'Content-Type: application/json' \
-d '{"email":"you@example.com"}'
Architecture
Single TypeScript Cloudflare Worker. Ed25519 signing via @noble/ed25519. Three KV namespaces (overrides, API keys, telemetry). Two Durable Objects (webhooks, SSE streams). Runs on Cloudflare's edge network - no origin server.
4-tier fail-closed: KV override check -> schedule engine -> UNKNOWN fallback -> unsigned critical failure.
See docs/architecture/overview.md for the full architecture.
API
Four MCP tools - get_market_status, get_market_schedule, list_exchanges,
get_payment_options. Receipt verification is REST-only (POST /v5/verify) or
offline with @headlessoracle/verify.
The REST surface is enumerated in the OpenAPI 3.1 spec, which is served live and is the list of record. Full references:
Exchanges
23 traditional markets (XNYS, XNAS, XLON, XJPX, XPAR, XHKG, XSES, XASX, XBOM, XNSE, XSHG, XSHE, XKRX, XJSE, XBSP, XSWX, XMIL, XIST, XSAU, XDFM, XNZE, XHEL, XSTO) plus 5 extended (XCBT, XNYM, XCBO, XCOI, XBIN). DST handled automatically via IANA timezone names. Lunch breaks, half-days, and holidays for 2026-2027.
Testing
npm test # the full unit/integration suite
npm run test:smoke # 11 smoke tests against live production
The passing count is published by the worker itself at
/v5/metrics/public as
tests_passing, and CI fails if that number and the suite disagree. It is not
restated here, because a number in a README is a number nothing checks.
Security
Ed25519 signatures on every response. 60-second receipt TTL. Fail-closed architecture (UNKNOWN = CLOSED). Security headers on all responses (HSTS, CSP, X-Content-Type-Options, X-Frame-Options).
See SECURITY.md for the responsible disclosure policy.
Documentation
Full documentation organized by audience:
- Engineers: Architecture, API Reference, ADRs
- Operations: Deployment, Monitoring, SLA
- Legal: Terms of Service, Privacy Policy, IP Ownership
- Business: Pricing, Competitive Analysis
See docs/README.md for the full index.
License
MIT — see LICENSE
الأسئلة الشائعة
ما هو io.github.LembaGang/headless-oracle-mcp؟
Ed25519-signed market-state receipts for 28 exchanges. Fail-closed pre-trade gate.
كيف أثبّت io.github.LembaGang/headless-oracle-mcp؟
يعمل على جهازك. في Claude Code: claude mcp add headless-oracle-mcp -- npx -y headless-oracle-mcp@1.0.3. وفي العملاء الآخرين، الصق إعداد JSON من هذه الصفحة في إعدادات MCP الخاصة بهم.
هل يحتاج io.github.LembaGang/headless-oracle-mcp إلى مفتاح API؟
لا يذكر إدراجه في السجل أي مفتاح أو سر إلزامي. قد تتطلب بعض الميزات حسابًا لدى الخدمة التي يتصل بها.
هل io.github.LembaGang/headless-oracle-mcp مفتوح المصدر؟
نعم. شيفرته متاحة على GitHub بترخيص MIT.
من يصون io.github.LembaGang/headless-oracle-mcp؟
ينشره LembaGang. يدرجه AI.tn لكنه لا يصونه ولا يوصي به.
من سجل MCP الرسمي. الإدراج ليس توصية: راجع شيفرة الخادم وصلاحياته قبل منحه الوصول إلى بياناتك.