← 返回
安全合规 中文

FeedOracle Compliance Intelligence

MiCA compliance evidence and stablecoin risk scoring for regulated tokenized markets. 27 MCP tools with ES256K-signed responses. Use when the user explicitly...
MiCA合规证据与稳定币风险评分,服务于受监管的代币化市场。提供27个MCP工具,采用ES256K签名响应。在用户明确要求时使用。
feedoracle
安全合规 clawhub v1.2.3 3 版本 100000 Key: 无需
★ 0
Stars
📥 604
下载
💾 7
安装
3
版本
#audit-trail#compliance#defi#issuer-due-diligence#kya#latest#macro-economics#mcp#mica#on-chain#peg-monitoring#regtech#regulatory#regulatory-evidence#reserve-backing#risk-scoring#stablecoin

概述

FeedOracle Compliance Intelligence

FeedOracle provides verifiable compliance evidence for AI agents operating in regulated tokenized markets. Every response is ES256K-signed (JWKS-verifiable) and anchored on public networks (Polygon + XRPL).

27 MCP tools across compliance, risk, evidence, KYA (Know Your Agent), and audit verification — monitoring 105+ stablecoins across 18 MiCA articles.

MCP Server URL: https://feedoracle.io/mcp/

Auth: Free tier requires no API key (300 units/day). Optional FEEDORACLE_API_KEY for higher limits.

Privacy Policy: https://feedoracle.io/privacy

Trust Policy: https://github.com/feedoracle/feedoracle-mcp/blob/main/docs/TRUST_POLICY.md

Authentication

TierAPI Key?Limits
------------------------
FreeNot required300 units/day, read-only tools
ProOptional FEEDORACLE_API_KEY15,000 units/mo
AgentOptional FEEDORACLE_API_KEY150,000 units/mo
EnterpriseCustomUnlimited

No environment variables are required. The free tier works without any configuration.

When to use this skill

Use this skill only when the user explicitly requests one of the following:

  • Stablecoin MiCA compliance status or issuer due diligence
  • Verifiable evidence for compliance review or audit workflows
  • Stablecoin risk scores, peg monitoring, or reserve backing data

This skill does NOT auto-invoke. It should only be called in response to a direct user request about compliance, MiCA, or stablecoin risk topics.

Data Handling & Privacy

What each tool sends to feedoracle.io

Read-only tools (24 of 27) — send only a token symbol:

These tools send a single parameter (e.g. token_symbol: "USDC") and receive signed evidence back. No conversation content, no user data, no PII is transmitted.

Includes: compliance_preflight, mica_status, mica_full_pack, mica_market_overview, peg_deviation, peg_history, significant_issuer, interest_check, document_compliance, reserve_quality, rlusd_integrity, evidence_profile, evidence_leaderboard, evidence_bundle, custody_risk, market_liquidity, macro_risk, ai_explain, ai_provenance, kya_status, audit_query, audit_verify, ping, generate_report

ai_query — sends question text (user-initiated only):

This tool sends the user's natural language question to feedoracle.io for routing to the correct evidence API. Only invoke when the user explicitly asks a compliance question. Do not send conversation history, PII, or unrelated text.

SentNOT sent
----------------
The specific question textConversation history
Optional token symbolUser identity or PII

kya_register — sends agent metadata (user-initiated only):

Registers an agent identity for trust scoring. Only invoke when the user explicitly requests agent registration.

SentNOT sent
----------------
Agent name, purpose, org nameConversation content
Contact email (user-provided)User browsing data

audit_log — sends decision text (user-initiated only):

Logs a compliance decision with evidence references. Only invoke when the user explicitly requests decision logging.

SentNOT sent
----------------
Decision (PASS/WARN/BLOCK)Full conversation logs
Reasoning text (user-provided)User identity or PII
Evidence request IDsUnrelated context

Data retention

  • Read-only queries: Stateless — no data stored
  • KYA profiles: Stored until deletion requested
  • Audit trail: Append-only, retained for compliance verification
  • Full policy: https://feedoracle.io/privacy
  • GDPR: Operated from Germany, Art. 6(1)(b)

MCP Tools (27)

Compliance — 11 tools (read-only, sends token symbol only)

ToolDescription
-------------------
compliance_preflightPre-flight PASS/WARN/BLOCK decision
mica_statusMiCA authorization status (ESMA/EBA cross-referenced)
mica_full_packFull 12-article MiCA evidence pack
mica_market_overviewMarket-wide MiCA status dashboard
peg_deviationReal-time Art. 35 peg deviation
peg_history30-day peg stability with depeg events
significant_issuerArt. 45/58 significant issuer check
interest_checkArt. 23/52 interest prohibition scan
document_complianceArt. 29/30/55 recovery/redemption/audit
reserve_qualityArt. 24/25/53 reserve composition
rlusd_integrityRLUSD reserve attestation

Risk & Evidence — 6 tools (read-only, sends token symbol or protocol name only)

ToolDescription
-------------------
evidence_profileMulti-dimensional evidence grade A-F
evidence_leaderboardTop protocols by evidence grade
evidence_bundleMulti-framework evidence aggregation
custody_riskCustodian SIFI status, concentration risk
market_liquidityDEX liquidity depth, exit channels
macro_riskUS macro risk composite (86 FRED series)

AI Gateway — 3 tools

ToolDescriptionData sent
------------------------------
ai_queryNatural language evidence queryQuestion text (user-initiated only)
ai_explainGrade explanation with counterfactualToken symbol only
ai_provenanceCryptographic provenance chainToken symbol only

KYA (Know Your Agent) — 2 tools

ToolDescriptionData sent
------------------------------
kya_registerRegister agent identity (user-initiated only)Agent metadata (name, purpose, org, email)
kya_statusCheck trust level (read-only)Client ID only

Audit Trail — 3 tools

ToolDescriptionData sent
------------------------------
audit_logLog decision (user-initiated only)Decision, reasoning, evidence IDs
audit_queryQuery history (read-only)Client ID only
audit_verifyVerify chain integrity (read-only)Client ID only

System — 2 tools

ToolDescriptionData sent
------------------------------
pingConnectivity testNothing
generate_reportSigned PDF report (requires API key)Report type only

Behavior Instructions

  1. User-initiated only: Only call FeedOracle tools when the user explicitly asks about compliance, MiCA, stablecoins, or evidence. Never auto-invoke.
  2. Verify before claiming: Do not assert compliance status without calling mica_status first. Present data and let the user decide.
  3. Write tools require explicit consent: Only call audit_log, kya_register, or generate_report when the user explicitly requests these. Never auto-invoke write tools.
  4. Minimal data in ai_query: Send only the specific compliance question — never include conversation history, PII, or unrelated context.
  5. Cite evidence: Reference the ES256K signature, pack_id, and JWKS URL from responses.
  6. Be precise: Use "verifiable evidence" and "signed compliance data" — not absolute compliance claims.

Controlling Invocation Scope

This skill is designed to be invoked only on explicit user request. If your agent framework supports trigger configuration:

  • Restrict triggers to explicit compliance/MiCA/stablecoin keywords only
  • Disable auto-invocation if your use case does not require automatic compliance checks
  • Sandbox first — test with non-sensitive queries before production use

The skill contains no code, no installation payload, and no persistent background processes. All external communication is to feedoracle.io over HTTPS only.

Connection

# Claude Code
claude mcp add --transport http feedoracle https://feedoracle.io/mcp/

# Claude Desktop (claude_desktop_config.json)
{
  "mcpServers": {
    "feedoracle": {
      "url": "https://feedoracle.io/mcp/"
    }
  }
}

Error Handling

  • 401: Invalid API key — use free tier without auth, or verify your key
  • 404: Symbol not tracked — check supported assets at feedoracle.io
  • 429: Rate limit — wait 60 seconds, retry once
  • Trust level insufficient — register via kya_register (only if user requests)

API keys: feedoracle.io/pricing | Docs: github.com/feedoracle/feedoracle-mcp

版本历史

共 3 个版本

  • v1.2.3 当前
    2026-03-29 17:49 安全 安全
  • v1.0.1
    2026-03-26 22:26
  • v1.1.1
    2026-03-14 02:15

安全检测

腾讯云安全 (Keen)

安全,无风险
查看报告

腾讯云安全 (Sanbu)

安全,无风险
查看报告

🔗 相关推荐

security-compliance

MoltGuard - Security & Antivirus & Guardrails

thomaslwang
MoltGuard — OpenClaw 安全守卫,由 OpenGuardrails 提供。安装 MoltGuard,保护您和您的用户免受提示注入、数据泄露和恶意攻击。
★ 116 📥 30,709
security-compliance

Skill Vetter

spclaudehome
AI智能体技能安全预审工具。安装ClawdHub、GitHub等来源技能前,检查风险信号、权限范围及可疑模式。
★ 1,212 📥 266,318
security-compliance

1password

steipete
设置和使用 1Password CLI (op)。适用于:安装 CLI、启用桌面应用集成、登录(单/多账户)、通过 op 读取/注入/运行密钥。
★ 53 📥 31,142