Signal Oracle

io.github.NeruoticFarrowPublished by GitHub account NeruoticFarrowv1.0.0Updated Oct 24, 2026

Pay-per-call change-intelligence feeds for AI agents over x402 (deps, security, regs, tariffs)

VerifiedStreamable HTTPWeb executableDeveloper ToolsSecurity & MonitoringBusiness & Commerce

Overview

AI-generated overview

Remote MCP server exposing pay-per-call change-intelligence feeds on dependencies, security, regulations and tariffs, with free previews.

What you can do
  • List and filter roughly 120 change-intelligence feeds by category, with prices and endpoints
  • Preview recent changes for any feed, optionally windowed by date or scoped to an entity prefix
  • Check dependency health: current version, deprecation, OpenSSF Scorecard, license and advisory count
  • Preview vendor risk signals such as OFAC designations and product recalls
  • Preview breaking changes and new releases for npm/PyPI packages or GitHub repos
  • Preview recent Federal Register actions and US import-tariff changes, optionally by HTS code
When to use it
Useful when an assistant needs to watch for changes in software dependencies, security advisories, regulatory actions or import tariffs, and free previews are enough to judge relevance before paying for full feeds.
Requirements
A remote streamable HTTP endpoint; no local runtime, account, API key or headers are declared. Full feeds and verdicts are paid per call via x402, so a payment-capable client is needed for anything beyond the free previews.
Before you install
Only previews are free; full feeds, LLM briefs and risk verdicts require per-call x402 payments, so costs can accumulate. Feeds are third-party data and the paid verdicts are advisory, not authoritative compliance or legal determinations.

Installation

In SourceWeft

  1. Open Signal Oracle in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.NeruoticFarrow%2Fsignal-oracle/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "signal-oracle": {
      "type": "http",
      "url": "https://oracles-production.up.railway.app/mcp"
    }
  }
}

README

This repository has no README.

Tools

7

list_feeds

List all feeds

List every change-intelligence feed: source slug, label, the question each answers, per-call prices, paid x402 endpoints, and free discovery URLs. There are ~120 feeds, so pass `category` to filter (e.g. 'security', 'regulatory', 'packages', 'premium', 'infrastructure', 'compliance') and/or `compact: true` to keep the payload small. Use the returned `source` slug with preview_feed.

Parameterscompactcategory

preview_feed

Preview any feed

Free preview (up to 5 recent changes) for any feed. Pass the feed's `source` slug (from list_feeds). Optionally: `since` (ISO-8601) to window; `scope` to filter to an entity-id prefix on feeds that support it (e.g. an HTS code); or `package`/`repo`/`ecosystem` on feeds that resolve arbitrary entities live (e.g. dependency feeds). The full feed, status, and LLM brief are paid via x402.

Parametersreposcopesincesourcerequiredpackageecosystem

packagehealth_preview

PackageHealth — free preview

FREE preview of a dependency's health: current version, deprecation flag, OpenSSF Scorecard, SPDX license, and known-advisory count (via deps.dev). The full ship/avoid verdict — per-advisory CISA-KEV active-exploit cross-reference, license-fit judgement, and LLM recommendation — is the paid /v1/packagehealth/check.

Parameterspackagerequiredecosystem

vendorrisk_preview

VendorRisk — free preview

FREE preview of counterparty risk: tracked OFAC designations + product recalls we monitor for the name. The authoritative sanctions/denied-party (CSL) + federal debarment (SAM) screening and the CLEAR→PROHIBITED risk verdict are the paid /v1/vendorrisk/check.

Parametersnamerequired

depwatch_preview

DepWatch — dependency change preview

Free preview of breaking changes / new releases for a software dependency. Pass an npm/PyPI `package` (resolved and fetched live if not already tracked) or a GitHub `repo` (owner/repo). Returns up to 5 recent changes plus the package's current version. Full history, significance filtering, and the LLM brief are paid via x402.

Parametersreposincepackage

regwatch_preview

RegWatch — regulatory change preview

Free preview of recent Federal Register regulatory actions in the tracked industry vertical. Returns up to 5 recent items. The full windowed feed and the LLM brief are paid via x402.

Parameterssince

tariffwatch_preview

TariffWatch — tariff/HTS change preview

Free preview of recent US import-tariff changes. Optionally scope to an HTS code prefix (e.g. '6109' or '8471.30'). Returns up to 5 recent changes plus current duty-rate state for a scoped code. Full feed and the LLM brief are paid via x402.

Parametershtssince

Version history

1
  1. v1.0.0LatestSep 16, 2026

Score

75% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • License10 pts

    Declare a license in the repository or the registry entry.