
Security News
GitHub Actions Adds cache-mode to Limit Cache Poisoning Risk
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.
@edgedepth/research-mcp
Advanced tools
Search recorded crypto and TradFi microstructure through the EdgeDepth Research API as deterministic MCP tools.
@edgedepth/research-mcp is the official, research-only Model Context Protocol server for EdgeDepth, a market microstructure search engine over recorded Binance USDT-M crypto and TradFi perpetuals. Use it from ChatGPT, Claude, Cursor, Codex, or any MCP client to find every verified occurrence of a market condition, inspect forward outcomes across the complete matched set, read an unconditional same-scope reference, and open replay-linked evidence.
Every result includes counts with denominators and a reproducibility key. Same key, same bytes.
Website · Search the market · REST API documentation · MCP setup guide · Learning hub
The package exposes one tool core through two transports:
https://mcp.edgedepth.com/mcp over Streamable HTTP and authorize once in your browser. No API key to copy.npx -y @edgedepth/research-mcp with an EdgeDepth API key.In Settings > Connectors > Add custom connector, enter:
https://mcp.edgedepth.com/mcp
Complete the EdgeDepth browser authorization prompt.
~/.cursor/mcp.json){
"mcpServers": {
"edgedepth-research": {
"url": "https://mcp.edgedepth.com/mcp"
}
}
}
~/.codex/config.toml)[mcp_servers.edgedepth]
url = "https://mcp.edgedepth.com/mcp"
Then run:
codex mcp login edgedepth
Remove any old bearer_token_env_var line before using browser OAuth.
Create a key on the EdgeDepth Developer page, then add:
{
"mcpServers": {
"edgedepth-research": {
"command": "npx",
"args": ["-y", "@edgedepth/research-mcp"],
"env": {
"EDGEDEPTH_API_KEY": "edk_live_YOUR_KEY"
}
}
}
}
Local stdio requires Node.js 20 or newer. Use the research:read key scope for recorded-data tools and add research:interpret only when you need the free interpret_prose proposal step.
list_features first. It is the live, closed grammar and prevents invented fields.list_instruments to check the manifest-derived universe, coverage, and provenance.interpret_prose. It returns a proposed document and never executes it.run_scan.outcomes_summary, which covers all occurrences. Page rows are examples, never the denominator.next_page only with a cursor returned by the API.Example instruction for an MCP client:
Call list_features first, then list_instruments for btcusdt and ethusdt.
Propose an exact query for elevated VPIN and one-sided taker flow over the last
seven complete UTC days. Show me the proposed document before running it.
Report counts with denominators, summarize outcomes over all occurrences, and
include the full reproducibility key.
| Tool | What it does |
|---|---|
list_features | Returns the closed grammar registry: feature ids, types, ranges, operators, windows, sequence rules, limits, and error codes. |
list_instruments | Returns the research universe and coverage. The default is a compact summary; use symbols: [...] for selected full records or full: true for the verbatim canonical universe. |
interpret_prose | Turns prose into a proposed query document. It does not execute the query. Optional time_zone accepts an IANA time zone for calendar planning. |
run_scan | Executes a research_query.v2 document and returns canonical result bytes with counts, denominators, outcomes, the unconditional same-scope reference, and the reproducibility key. |
next_page | Continues a prior scan with its opaque cursor. Never construct cursors manually. |
snapshot_at | Reads registry feature values, window aggregates, and fired rules as of a recorded moment. |
base_rate | Counts matches and eligible buckets for one clause over a window. |
commonality | Finds the deterministic intersection across multiple moments with selection-bias caveats included. |
get_report | Retrieves a published report by its 8-character canonical hash. |
run_cohort | Compares what followed every match with what followed every other eligible predicate-false bucket. |
run_stratified | Partitions one matched population at its existing anchors into split-true, split-false, and split-absent outcome summaries. |
No tool can trade, change market state, publish, or modify account data. run_scan, run_cohort, and run_stratified are annotated as metered computations because a fresh call can irreversibly consume an allowance unit. The other recorded-data tools are closed-world reads. interpret_prose is a free read that uses the configured external language interpreter.
422 {"errors":[{"code":"...","message":"..."}]}.{"error","code"} envelope.UNSUPPORTED_FEATURE or OUTCOME_IN_PREDICATE, call list_features, repair the document, and retry.interpret_prose may use a time zone to plan dates, but run_scan, run_cohort, and base_rate never reinterpret calendar language.304 Not Modified revalidations are free. list_instruments ETags are scoped to the requested summary, symbol projection, or full representation.402 RESEARCH_ALLOWANCE_EXHAUSTED metadata without a checkout link.The MCP server is a thin, deterministic interface to the public EdgeDepth Research API:
The default REST base used by the stdio package is https://app.edgedepth.com/api/v1/research.
| Variable | Default | Purpose |
|---|---|---|
EDGEDEPTH_API_KEY | None | Required for stdio tool calls. |
EDGEDEPTH_API_BASE | https://app.edgedepth.com/api/v1/research | Optional REST API base override. |
| Variable | Default | Purpose |
|---|---|---|
EDGEDEPTH_OAUTH_EXCHANGE_URL | http://127.0.0.1:3002/api/mcp/oauth/exchange | OAuth access-token exchange endpoint. |
MCP_INTERNAL_SECRET | None | Required internal assertion secret; must match the web app. |
PORT | 3003 | HTTP listen port. |
HOST | 127.0.0.1 | HTTP listen host. |
The hosted server uses browser OAuth. It validates opaque access tokens, exchanges them for separate short-lived internal assertions, and never passes the OAuth access token to the REST API. The MCP server is stateless and stores no user credentials.
Compatible clients rotate refresh tokens silently while the connection remains active. Review or revoke access at EdgeDepth Connected Apps.
API keys remain available for scripts, local stdio, and MCP clients without browser OAuth. Treat an edk_live_... key as a secret and never commit it to source control.
npm install
npm run build
npm test
npm run typecheck
TypeScript builds to dist/. Example nginx locations, systemd hardening, and operator environment values live under deploy/. Production deployment and npm publishing remain operator actions.
MIT
FAQs
Search recorded crypto and TradFi microstructure through the EdgeDepth Research API as deterministic MCP tools.
The npm package @edgedepth/research-mcp receives a total of 481 weekly downloads. As such, @edgedepth/research-mcp popularity was classified as not popular.
We found that @edgedepth/research-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.

Company News
Allow myself to introduce... myself.

Research
/Security News
A Twitch browser extension on Chrome and Firefox forwards users’ live OAuth session tokens through proxies controlled by a Russian bot service.