Anomaly Mcp

io.github.forgemeshlabsPublished by GitHub account forgemeshlabsv0.5.10Updated Nov 3, 2026

Real-time anomaly detection for blockchain, aviation, GitHub, mempool, and depeg signals.

The publisher's own server: Physician Review

VerifiedSTDIODesktop onlyFinanceDeveloper ToolsSecurity & Monitoring

Overview

Anomaly's local MCP server; no sign-in required; STDIO; 16 tools.

No AI overview yet: these facts come from the registry entry and the server itself.

Installation

In SourceWeft

  1. Open Anomaly Mcp in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

Anomaly Tracker MCP

[M8ven Verified]

[anomaly-mcp MCP server] [mcpservers.org]

Multi-domain sequence anomaly detection for AI agents. Detects unusual event patterns across blockchain markets, live airspace, and GitHub repositories using NASA-derived sequence mining. Returns a story label and anomaly score, not just a number.

This MCP server gives AI agents access to the ForgeMesh Anomaly Tracker API via 16 tools spanning blockchain, aviation, GitHub, and real-time market monitoring domains.

Thin client architecture:

Agent/MCP client -> this MCP server -> ForgeMesh Anomaly Tracker API

Hosted API: https://anomaly.forgemesh.io

Install

bash
npm install -g @forgemeshlabs/anomaly-mcp

Or run directly:

bash
npx -y @forgemeshlabs/anomaly-mcp

Claude Desktop

json
{  "mcpServers": {    "anomaly-tracker": {      "command": "npx",      "args": ["-y", "@forgemeshlabs/anomaly-mcp"],      "env": {        "ANOMALY_API_BASE": "https://anomaly.forgemesh.io"      }    }  }}

Tools

ToolDescriptionCost
health_checkAPI health and uptimeFree
anomaly_scanChain-wide sequence anomaly scan$0.05 USDC
token_scanBest-effort single-token transfer anomalies with source status$0.03 USDC
whale_alertsWhale movements, CEX flows, bridge activity$0.02 USDC
address_scanWallet transaction pattern anomalies$0.03 USDC
model_statusSequenceMiner model health per chain$0.01 USDC
nft_scanBest-effort NFT collection anomalies with source status$0.03 USDC
defi_scanDeFi protocol flow anomalies$0.03 USDC
squawk_alertsBest-effort live aviation emergency squawk codes with source status$0.02 USDC
flight_scanAirspace region anomaly analysis$0.03 USDC
trending_signalGitHub repos with anomalous star velocity$0.02 USDC
repo_scanDeep repo velocity/fork anomaly scan$0.03 USDC
github_watchRepo activity stream anomalies$0.03 USDC
claude_feature_watchAnthropic/Claude merged feature alerts$0.02 USDC
mempool_anomalyReal-time mempool anomaly score for 5-second polling$0.01 USDC
depeg_monitorReal-time stablecoin depeg detector for 1-minute polling$0.01 USDC

Blockchain Tools

anomaly_scan — Scan a blockchain for sequence anomalies across all monitored addresses.

  • chain: ethereum, base, or arbitrum (default: ethereum)
  • window: 1h, 4h, 24h, or 168h (default: 24h)
  • Returns: sequence_score (0-100), story (human label), novelty, peak_window, possible_failure_modes

token_scan — Best-effort anomaly scan for a single token's recent transfer patterns. Paid output includes source status and coverage notes so agents can distinguish "quiet token" from source coverage issues.

  • token (required): Contract address (0x...) or symbol — usdt, usdc, weth, wbtc, link, uni, aave, steth, pepe, dai, cbeth, arb
  • chain: ethereum, base, or arbitrum (default: ethereum)
  • window: 1h, 4h, 24h, or 168h (default: 24h)

whale_alerts — Recent whale movements from 12+ monitored addresses: Binance, Coinbase, Kraken, OKX, Bybit, major bridges, Tether, Circle.

  • chain: ethereum, base, or arbitrum (default: ethereum)
  • hours: 1-168 (default: 4)

address_scan — Scan any wallet address for anomalous transaction patterns.

  • address (required): Wallet address (0x...)
  • chain: ethereum, base, or arbitrum
  • window: 1h, 4h, 24h, or 168h

nft_scan — Best-effort anomaly scan for an NFT collection — sweep accumulation, wash trading, mint surges. Paid output includes source status and coverage notes.

  • token (required): ERC-721/ERC-1155 contract address

defi_scan — Anomaly scan for DeFi protocols — unusual flows through Uniswap, Aave, Curve, Compound.

  • protocol (required): Protocol name or 0x address

Aviation Tools

squawk_alerts — Best-effort live global sweep of aircraft squawking 7700 (emergency), 7600 (radio failure), or 7500 (hijack). Paid output includes source status, monitored scope, and coverage notes.

flight_scan — Sequence anomaly analysis for a named airspace region.

  • region: north_atlantic, europe, north_america, asia_pacific, middle_east, africa, or global

GitHub Tools

trending_signal — GitHub repos with anomalous star velocity — early signals before mainstream discovery.

  • days: 3, 7, 14, or 30 (default: 7)

repo_scan — Deep anomaly scan for a single repository — star velocity, fork ratio, overnight explosion signals.

  • repo (required): owner/repo format

github_watch — Watch a repo's activity stream for anomalous development patterns — commit bursts, force pushes, issue floods, merge rushes, bot takeovers.

  • repo (required): owner/repo format

claude_feature_watch — Watch Anthropic/Claude repos for recently merged features. Scans anthropic-sdk-python, anthropic-sdk-typescript, claude-code, courses, and anthropic-cookbook.

  • days: 1-30 (default: 7)

Real-Time Tools

mempool_anomaly — Real-time mempool anomaly score for gas spikes, MEV signals, pending whale swaps, contract deploy bursts, and priority fee wars.

  • chain: ethereum or base (default: ethereum)

depeg_monitor — Real-time stablecoin depeg detector for USDC, USDT, and DAI micro-deviations, stablecoin spreads, and volume spikes.

  • chain: ethereum, base, or arbitrum (default: ethereum)

Symbol Alphabets

Financial: WHALE_BUY, WHALE_SELL, CEX_INFLOW, CEX_OUTFLOW, BRIDGE_IN, BRIDGE_OUT, DEX_SWAP, DEX_LIQUIDITY_ADD, DEX_LIQUIDITY_REMOVE, STABLECOIN_MINT, STABLECOIN_REDEEM, STABLECOIN_BURN, TOKEN_MINT, TOKEN_BURN, FUNDING_SPIKE, LIQUIDATION

NFT: NFT_MINT, NFT_BURN, NFT_SALE, NFT_SWEEP, NFT_WASH_TRADE

Aviation: ENROUTE, SQUAWK_7700, SQUAWK_7600, SQUAWK_7500, RAPID_DESCENT, RAPID_CLIMB, HIGH_SPEED, NEAR_STALL

Creator: VIRAL_REPO, HOT_REPO, EMERGING_REPO, STEADY_REPO, QUIET_REPO, FORK_SURGE, BOOKMARK_ONLY, ISSUE_FLOOD, OVERNIGHT_STAR, RAPID_GROWTH

GitHub Watch: COMMIT_PUSH, COMMIT_BURST, FORCE_PUSH, ISSUE_OPEN, ISSUE_CLOSE, ISSUE_COMMENT, ISSUE_FLOOD, PR_OPEN, PR_MERGE, PR_CLOSE, PR_REVIEW, MERGE_RUSH, BRANCH_CREATE, BRANCH_DELETE, TAG_CREATE, RELEASE_PUBLISH, FORK_EVENT, STAR_EVENT, BOT_DOMINATED, SOLO_OPERATOR

Payment

Paid tools use x402 protocol. Agents pay per call in USDC on Base mainnet. No API key needed.

By default, paid endpoints return x402 challenge metadata (pricing, network, wallet) without settling. To settle payments, configure a wallet private key in your agent's x402 client.

Environment Variables

VariableDescriptionDefault
ANOMALY_API_BASEHosted API base URLhttps://anomaly.forgemesh.io

Links

License

MIT

Source: README.md at commit a24dfab

Tools

16

health_check

Check ForgeMesh Anomaly Tracker API health and uptime.

Takes no parameters.

anomaly_scan

Scan a blockchain for sequence anomalies — unusual patterns of whale movements, exchange flows, bridge activity, and stablecoin mints/burns. Returns a story label, anomaly score (0-100), novelty level, and the peak anomalous symbol window. Costs $0.05 USDC on Base mainnet.

Parameterschainwindow

token_scan

Best-effort anomaly scan for a single token — scores recent transfer patterns for unusual activity and returns source status plus coverage notes. Pass a contract address or well-known symbol. Costs $0.03 USDC on Base mainnet.

Parameterschaintokenrequiredwindow

whale_alerts

Get recent whale movements, CEX inflows/outflows, bridge activity, and stablecoin mints/burns from monitored addresses (Binance, Coinbase, Kraken, OKX, Bybit, major bridges, Tether, Circle). Costs $0.02 USDC on Base mainnet.

Parameterschainhours

address_scan

Scan any wallet address for anomalous transaction patterns. Classifies each transaction by checking counterparties against known CEX wallets, bridges, and stablecoin issuers. Costs $0.03 USDC on Base mainnet.

Parameterschainwindowaddressrequired

model_status

Get SequenceMiner model health and training stats per chain — training sequence count and last retrain time. Costs $0.01 USDC on Base mainnet.

Takes no parameters.

nft_scan

Best-effort anomaly scan for an NFT collection — detects sweep accumulation, wash trading patterns, and mint surges, then returns source status plus coverage notes. Pass a contract address. Costs $0.03 USDC on Base mainnet.

Parameterschaintokenrequiredwindow

defi_scan

Anomaly scan for a DeFi protocol — detects unusual flows through major lending and DEX contracts (Uniswap, Aave, Curve, Compound). Pass a protocol name or contract address. Returns a story label and anomaly score. Costs $0.03 USDC on Base mainnet.

Parameterschainwindowprotocolrequired

squawk_alerts

Best-effort live global sweep of active aviation emergency squawk codes via OpenSky Network. Returns aircraft currently squawking 7700, 7600, or 7500 with source status and coverage notes. Costs $0.02 USDC on Base mainnet.

Takes no parameters.

flight_scan

Sequence anomaly analysis for a named airspace region — detects unusual clustering of emergency squawks, rapid descents, or speed anomalies using the SequenceMiner engine. Costs $0.03 USDC on Base mainnet.

Parametersregion

repo_scan

Deep anomaly scan for a single GitHub repository — scores star velocity, fork ratio, overnight explosion signals, and issue flood patterns. Returns a story label (e.g. 'Breakout Signal', 'Viral Activity') and anomaly score. Costs $0.03 USDC on Base mainnet.

Parametersreporequired

github_watch

Watch a GitHub repo's activity stream for anomalous development patterns — commit bursts, force pushes, issue floods, merge rushes, bot takeovers. Returns a story label (e.g. 'History Rewrite', 'Merge Sprint', 'Bot Takeover') and anomaly score. Costs $0.03 USDC on Base mainnet.

Parametersreporequired

claude_feature_watch

Watch Anthropic/Claude repos for recently merged features — SDK changes, Claude Code updates, new capabilities. Scans anthropic-sdk-python, anthropic-sdk-typescript, claude-code, courses, and anthropic-cookbook. Costs $0.02 USDC on Base mainnet.

Parametersdays

mempool_anomaly

Real-time mempool anomaly score — detects gas spikes, MEV signals, pending whale swaps, contract deploy bursts, and priority fee wars. Designed for 5-second polling. Returns a story label (e.g. 'MEV Attack', 'Gas Surge', 'Priority Fee War') and anomaly score. Costs $0.01 USDC on Base mainnet.

Parameterschain

depeg_monitor

Real-time stablecoin depeg detector — monitors USDC, USDT, DAI prices for micro-deviations from $1.00 peg, spread between stables, and volume spikes. Catches depegs before they become crises. Designed for 1-minute polling. Returns a story label (e.g. 'Single Coin Drift', 'Multi-Stablecoin Crisis', 'Depeg Event') and anomaly score. Costs $0.01 USDC on Base mainnet.

Parameterschain

Version history

3
  1. v0.5.10LatestNov 3, 2026
  2. v0.5.9Oct 8, 2026
  3. v0.5.6Sep 16, 2026

Score

90% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts
  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

Other Anomaly integrations

Physician Review

health.anomalyOfficial publisher

Lets an assistant explain Anomaly Health's physician review service, check open appointment times, and book a paid virtual session with a US-licensed doctor.

Streamable HTTPWeb executable
Location & Lifestyle4 toolsOct 24, 2026

GenPark Sliding Window Rate Anomaly Detector

Published by GitHub account alphaparkinc

A local MCP server that detects anomalies and bursts in streaming data using sliding-window z-score and EWMA methods.

STDIODesktop only
Data & AnalyticsNot validated · the package type cannot run in the sandboxNov 4, 2026

Anomaly AI

Published by GitHub account anomaly-ai

Remote AI data analyst that lets an assistant query your Excel, CSV, GA4 or database data and get charts and dashboards back.

Streamable HTTPWeb executableAuth
Data & AnalyticsCredential requiredOct 24, 2026

Execute anomaly-detection-sentinel-mcp

Published by GitHub account Evozim

A remote MCP endpoint for anomaly-detection-sentinel-mcp, reached over SSE and paid per use through an x402 USDC settlement signature.

SSEWeb executable
FinanceNot indexed yetOct 24, 2026