MCP Observatory
4m ago Tracked 54,688 Last 4m ago 24h 2,484
github TypeScript analyzed 2d8ea96

Whatsonyourmind/oraclaw

github

Deterministic decision-intelligence MCP server for AI agents — 17 tools (bandits/LinUCB, HiGHS LP/MIP, PageRank, Monte Carlo, CMA-ES, conformal). Sub-25ms. Zero LLM cost. 11 free, no key. Listed on the MCP Registry & Glama.

maintainer
Whatsonyourmind
license
MIT
first seen
2026-06-16
last seen
2026-08-25
releases · 30d
0
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 14 tools
transport stdio · http verified reported listed in the official MCP registry counts 14 tools · 0 res · 0 prompts permission surface via code analysis

tools

  • analyze_decision_graph
  • analyze_graph
  • analyze_portfolio_risk
  • analyze_risk
  • detect_anomaly
  • optimize_bandit
  • optimize_cmaes
  • optimize_contextual
  • plan_pathfind
  • predict_forecast
  • score_calibration
  • score_convergence
  • solve_constraints
  • solve_schedule
skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 2d8ea96 · analyzer v33 · 4d ago

skills & prompt files 15

danger signals3

code evidence vv1.4.1 · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 437

filesystem 5

  • fs (weak) Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/api/src/services/oracle/certVerifier.cert.test.ts :11 import { readFileSync } from "node:fs";
  • fs (weak) Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/api/src/services/usageTracker.test.ts :2 import { promises as fs } from "fs";
  • fs Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/api/src/services/usageTracker.ts :16 import { promises as fs } from "fs";
  • fs (weak) Whatsonyourmind-oraclaw-2d8ea96/mission-control/scripts/create-wallet.ts :15 import * as fs from "fs";
  • fs Whatsonyourmind-oraclaw-2d8ea96/web/lib/blog.ts :1 import fs from "fs";

network 47

  • net Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/api/src/services/oracle/aiContext.ts :409 const response = await fetch(
  • net Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/api/src/services/oracle/integrations/email.ts :503 const response = await fetch('https://oauth2.googleapis.com/token', {
  • net Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/api/src/services/oracle/integrations/github.ts :361 const response = await fetch(
  • net Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/api/src/services/oracle/integrations/jira.ts :662 const response = await fetch(`${this.authUrl}/oauth/token`, {
  • net Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/api/src/services/oracle/integrations/slack.ts :359 const response = await fetch(`${this.baseUrl}/oauth.v2.access`, {
  • net Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/api/src/services/oracle/multimodal/documentProcessor.ts :838 const response = await fetch(input.url);
  • net Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/api/src/services/oracle/multimodal/imageProcessor.ts :1100 const response = await fetch(input.url);
  • net Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/api/src/services/oracle/multimodal/urlProcessor.ts :410 const response = await fetch(url, {
  • net Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/api/src/services/oracle/webhooks.ts :393 const response = await fetch(webhook.url, {
  • net (weak) Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/api/tests/integrations/jira.test.ts :100 const response = await fetch(
  • net (weak) Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/api/tests/oracle/phase4.test.ts :229 const response = await fetch('https://oauth2.googleapis.com/token', {
  • net Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/mobile/MissionControlUITest.tsx :97 const response = await fetch('http://localhost:3001/health');
  • net Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/mobile/src/features/oracle/chat/OracleChat.tsx :161 const response = await fetch(`${API_BASE}/api/oracle/query`, {
  • net Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/mobile/src/features/oracle/export/ExportCenter.tsx :82 const response = await fetch(`${API_BASE}/api/oracle/export/estimate`, {
  • net Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/mobile/src/hooks/useEnvironment.ts :271 NetInfo.fetch().then((netInfoState: NetInfoState) => {
  • net Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/mobile/src/services/brandingLoader.ts :200 const response = await fetch(`${API_BASE}/oracle/whitelabel/config`, {
  • net Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/mobile/src/services/integrations/email.ts :308 const response = await fetch(config.tokenUrl, {
  • net Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/mobile/src/services/integrations/googleCalendar.ts :267 const response = await fetch(GOOGLE_CALENDAR_CONFIG.tokenUrl, {
  • net Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/mobile/src/services/integrations/notion.ts :293 const response = await fetch(NOTION_CONFIG.tokenUrl, {
  • net Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/mobile/src/services/integrations/slack.ts :292 const response = await fetch(SLACK_CONFIG.tokenUrl, {
  • net Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/mobile/src/services/integrations/todoist.ts :250 const response = await fetch(TODOIST_CONFIG.tokenUrl, {
  • net Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/mobile/src/services/integrations/webhooks.ts :390 const response = await fetch(webhook.url, {
  • net Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/mobile/src/services/offlineSync.ts :259 const netState = await NetInfo.fetch();
  • net Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/mobile/src/services/oracleBackgroundTask.ts :198 const response = await fetch(`${apiUrl}/api/oracle/observe/scan`, {
  • net Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/mobile/src/services/requestBatcher.ts :365 const response = await fetch(`${this.config.apiBaseUrl}/api/oracle/batch`, {
  • net Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/mobile/src/store/oracle/radarStore.ts :82 // const response = await fetch('/api/oracle/observe/scan', { method: 'POST' });
  • net Whatsonyourmind-oraclaw-2d8ea96/mission-control/packages/client-sdk/src/index.ts :33 const response = await fetch(url, {
  • net Whatsonyourmind-oraclaw-2d8ea96/mission-control/packages/mcp-server/src/index.npm.ts :35 const res = await fetch(`${API_URL}${endpoint}`, {
  • net Whatsonyourmind-oraclaw-2d8ea96/mission-control/packages/sdk/anomaly/src/index.ts :26 const res = await fetch(`${this.baseUrl}${path}`, {
  • net Whatsonyourmind-oraclaw-2d8ea96/mission-control/packages/sdk/bandit/src/index.ts :47 const res = await fetch(`${this.baseUrl}${path}`, {
  • net Whatsonyourmind-oraclaw-2d8ea96/mission-control/packages/sdk/bayesian/src/index.ts :65 const res = await fetch(`${this.baseUrl}${path}`, {
  • net Whatsonyourmind-oraclaw-2d8ea96/mission-control/packages/sdk/calibrate/src/index.ts :51 const res = await fetch(`${this.baseUrl}${path}`, {
  • net Whatsonyourmind-oraclaw-2d8ea96/mission-control/packages/sdk/cmaes/src/index.ts :27 const res = await fetch(`${this.baseUrl}${path}`, {
  • net Whatsonyourmind-oraclaw-2d8ea96/mission-control/packages/sdk/decide/src/index.ts :56 const res = await fetch(`${this.baseUrl}${path}`, {
  • net Whatsonyourmind-oraclaw-2d8ea96/mission-control/packages/sdk/ensemble/src/index.ts :63 const res = await fetch(`${this.baseUrl}${path}`, {
  • net Whatsonyourmind-oraclaw-2d8ea96/mission-control/packages/sdk/evolve/src/index.ts :66 const res = await fetch(`${this.baseUrl}${path}`, {
  • net Whatsonyourmind-oraclaw-2d8ea96/mission-control/packages/sdk/forecast/src/index.ts :24 const res = await fetch(`${this.baseUrl}${path}`, {
  • net Whatsonyourmind-oraclaw-2d8ea96/mission-control/packages/sdk/graph/src/index.ts :53 const res = await fetch(`${this.baseUrl}${path}`, {
  • net Whatsonyourmind-oraclaw-2d8ea96/mission-control/packages/sdk/pathfind/src/index.ts :93 const res = await fetch(`${this.baseUrl}${path}`, {
  • net Whatsonyourmind-oraclaw-2d8ea96/mission-control/packages/sdk/risk/src/index.ts :96 const res = await fetch(`${this.baseUrl}${path}`, {
  • net Whatsonyourmind-oraclaw-2d8ea96/mission-control/packages/sdk/simulate/src/index.ts :55 const res = await fetch(`${this.baseUrl}${path}`, {
  • net Whatsonyourmind-oraclaw-2d8ea96/mission-control/packages/sdk/solver/src/index.ts :67 const res = await fetch(`${this.baseUrl}${path}`, {
  • net Whatsonyourmind-oraclaw-2d8ea96/web/app/dashboard/page.tsx :42 const res = await fetch(`${API_URL}/api/billing/request-key`, {
  • net Whatsonyourmind-oraclaw-2d8ea96/web/app/demo/page.tsx :584 const response = await fetch(`${API_BASE}${sc.oraclawEndpoint}`, {
  • net Whatsonyourmind-oraclaw-2d8ea96/web/app/getting-started/page.tsx :67 {`const response = await fetch(
  • net Whatsonyourmind-oraclaw-2d8ea96/web/app/signup/page.tsx :28 const res = await fetch(`${API_URL}/api/v1/auth/signup`, {
  • net Whatsonyourmind-oraclaw-2d8ea96/web/components/TryItForm.tsx :59 const response = await fetch(`${API_BASE}${endpoint}`, {

secrets 42

  • secrets Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/api/src/routes/billing/webhook.ts :50 const webhookSecret = process.env.STRIPE_WEBHOOK_SECRET;
  • secrets Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/api/src/routes/oracle/api-public.ts :296 const configured = process.env.ADMIN_KEY;
  • secrets Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/api/src/routes/oracle/batch.ts :96 const supabaseKey = process.env.SUPABASE_SERVICE_KEY!;
  • secrets Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/api/src/server.ts :76 const rootKey = process.env.UNKEY_ROOT_KEY;
  • secrets Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/api/src/services/auth/jwt.ts :20 const JWT_SECRET = process.env.JWT_SECRET || 'oracle-dev-secret-change-in-production';
  • secrets Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/api/src/services/billing/provision.ts :153 if (process.env.STRIPE_WEBHOOK_SECRET) {
  • secrets Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/api/src/services/billing/stripe.ts :29 const stripe = new Stripe(process.env.STRIPE_SECRET_KEY || 'sk_test_placeholder', {
  • secrets Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/api/src/services/gemini.ts :27 if (!process.env.GEMINI_API_KEY) {
  • secrets Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/api/src/services/oracle/infrastructure/redis.ts :439 password: process.env.REDIS_PASSWORD,
  • secrets Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/api/src/services/oracle/integrations/email.ts :1331 const clientSecret = process.env.GMAIL_CLIENT_SECRET || process.env.GOOGLE_CLIENT_SECRET || '';
  • secrets Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/api/src/services/oracle/integrations/github.ts :1091 const privateKey = (process.env.GITHUB_PRIVATE_KEY || '').replace(/\\n/g, '\n');
  • secrets Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/api/src/services/oracle/integrations/googleCalendar.ts :966 const clientSecret = process.env.GOOGLE_CLIENT_SECRET || '';
  • secrets Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/api/src/services/oracle/integrations/jira.ts :2218 const clientSecret = process.env.JIRA_CLIENT_SECRET || '';
  • secrets Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/api/src/services/oracle/integrations/slack.ts :1470 const botToken = process.env.SLACK_BOT_TOKEN || '';
  • secrets Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/api/src/services/supabase.ts :10 if (!process.env.SUPABASE_URL || !process.env.SUPABASE_ANON_KEY) {
  • secrets Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/api/src/services/unkey.ts :14 rootKey: process.env.UNKEY_ROOT_KEY!,
  • secrets (weak) Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/api/tests/integrations/googleCalendar.test.ts :737 process.env.GOOGLE_CLIENT_SECRET = 'env-client-secret';
  • secrets (weak) Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/api/tests/integrations/slack.test.ts :722 process.env.SLACK_BOT_TOKEN = 'xoxb-env-token';
  • secrets Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/mobile/src/services/integrations/email.ts :185 this.clientSecrets.set('gmail', process.env.GOOGLE_CLIENT_SECRET || '');
  • secrets Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/mobile/src/services/integrations/googleCalendar.ts :236 this.clientSecret = process.env.GOOGLE_CLIENT_SECRET || '';
  • secrets Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/mobile/src/services/integrations/notion.ts :219 this.clientSecret = process.env.NOTION_CLIENT_SECRET || '';
  • secrets Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/mobile/src/services/integrations/slack.ts :219 this.clientSecret = process.env.SLACK_CLIENT_SECRET || '';
  • secrets Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/mobile/src/services/integrations/todoist.ts :182 this.clientSecret = process.env.TODOIST_CLIENT_SECRET || '';
  • secrets Whatsonyourmind-oraclaw-2d8ea96/mission-control/packages/mcp-server/src/index.npm.ts :24 const API_KEY = process.env.ORACLAW_API_KEY || "";
  • secrets Whatsonyourmind-oraclaw-2d8ea96/mission-control/packages/sdk/anomaly/src/index.ts :21 this.apiKey = config.apiKey ?? process.env.ORACLAW_API_KEY ?? "";
  • secrets Whatsonyourmind-oraclaw-2d8ea96/mission-control/packages/sdk/bandit/src/index.ts :42 this.apiKey = config.apiKey ?? process.env.ORACLAW_API_KEY ?? "";
  • secrets Whatsonyourmind-oraclaw-2d8ea96/mission-control/packages/sdk/bayesian/src/index.ts :60 this.apiKey = config.apiKey ?? process.env.ORACLAW_API_KEY ?? "";
  • secrets Whatsonyourmind-oraclaw-2d8ea96/mission-control/packages/sdk/calibrate/src/index.ts :46 this.apiKey = config.apiKey ?? process.env.ORACLAW_API_KEY ?? "";
  • secrets Whatsonyourmind-oraclaw-2d8ea96/mission-control/packages/sdk/cmaes/src/index.ts :22 this.apiKey = config.apiKey ?? process.env.ORACLAW_API_KEY ?? "";
  • secrets Whatsonyourmind-oraclaw-2d8ea96/mission-control/packages/sdk/decide/src/index.ts :51 this.apiKey = config.apiKey ?? process.env.ORACLAW_API_KEY ?? "";
  • secrets Whatsonyourmind-oraclaw-2d8ea96/mission-control/packages/sdk/ensemble/src/index.ts :58 this.apiKey = config.apiKey ?? process.env.ORACLAW_API_KEY ?? "";
  • secrets Whatsonyourmind-oraclaw-2d8ea96/mission-control/packages/sdk/evolve/src/index.ts :61 this.apiKey = config.apiKey ?? process.env.ORACLAW_API_KEY ?? "";
  • secrets Whatsonyourmind-oraclaw-2d8ea96/mission-control/packages/sdk/forecast/src/index.ts :19 this.apiKey = config.apiKey ?? process.env.ORACLAW_API_KEY ?? "";
  • secrets Whatsonyourmind-oraclaw-2d8ea96/mission-control/packages/sdk/graph/src/index.ts :48 this.apiKey = config.apiKey ?? process.env.ORACLAW_API_KEY ?? "";
  • secrets Whatsonyourmind-oraclaw-2d8ea96/mission-control/packages/sdk/pathfind/src/index.ts :88 this.apiKey = config.apiKey ?? process.env.ORACLAW_API_KEY ?? "";
  • secrets Whatsonyourmind-oraclaw-2d8ea96/mission-control/packages/sdk/risk/src/index.ts :91 this.apiKey = config.apiKey ?? process.env.ORACLAW_API_KEY ?? "";
  • secrets Whatsonyourmind-oraclaw-2d8ea96/mission-control/packages/sdk/simulate/src/index.ts :50 this.apiKey = config.apiKey ?? process.env.ORACLAW_API_KEY ?? "";
  • secrets Whatsonyourmind-oraclaw-2d8ea96/mission-control/packages/sdk/solver/src/index.ts :62 this.apiKey = config.apiKey ?? process.env.ORACLAW_API_KEY ?? "";
  • secrets (weak) Whatsonyourmind-oraclaw-2d8ea96/mission-control/scripts/create-beta-key.ts :26 const rootKey = process.env.UNKEY_ROOT_KEY;
  • secrets (weak) Whatsonyourmind-oraclaw-2d8ea96/mission-control/scripts/verify-phase4.ts :46 const SUPABASE_KEY = process.env.SUPABASE_SERVICE_KEY || '';
  • secrets (weak) Whatsonyourmind-oraclaw-2d8ea96/scripts/setup-stripe.ts :16 const STRIPE_SECRET_KEY = process.env.STRIPE_SECRET_KEY;
  • secrets (weak) Whatsonyourmind-oraclaw-2d8ea96/scripts/setup-unkey.ts :16 const UNKEY_ROOT_KEY = process.env.UNKEY_ROOT_KEY;

tool registrations 19

  • optimize_bandit Whatsonyourmind-oraclaw-2d8ea96/mission-control/packages/mcp-server/src/index.npm.ts :101
  • optimize_contextual Whatsonyourmind-oraclaw-2d8ea96/mission-control/packages/mcp-server/src/index.npm.ts :161
  • optimize_cmaes Whatsonyourmind-oraclaw-2d8ea96/mission-control/packages/mcp-server/src/index.npm.ts :223
  • solve_constraints Whatsonyourmind-oraclaw-2d8ea96/mission-control/packages/mcp-server/src/index.npm.ts :267
  • solve_schedule Whatsonyourmind-oraclaw-2d8ea96/mission-control/packages/mcp-server/src/index.npm.ts :376
  • analyze_graph Whatsonyourmind-oraclaw-2d8ea96/mission-control/packages/mcp-server/src/index.npm.ts :456
  • analyze_risk Whatsonyourmind-oraclaw-2d8ea96/mission-control/packages/mcp-server/src/index.npm.ts :531
  • optimize_bandit Whatsonyourmind-oraclaw-2d8ea96/mission-control/packages/mcp-server/src/index.ts :83
  • optimize_contextual Whatsonyourmind-oraclaw-2d8ea96/mission-control/packages/mcp-server/src/index.ts :113
  • solve_constraints Whatsonyourmind-oraclaw-2d8ea96/mission-control/packages/mcp-server/src/index.ts :152
  • solve_schedule Whatsonyourmind-oraclaw-2d8ea96/mission-control/packages/mcp-server/src/index.ts :195
  • analyze_decision_graph Whatsonyourmind-oraclaw-2d8ea96/mission-control/packages/mcp-server/src/index.ts :233
  • score_convergence Whatsonyourmind-oraclaw-2d8ea96/mission-control/packages/mcp-server/src/index.ts :275
  • score_calibration Whatsonyourmind-oraclaw-2d8ea96/mission-control/packages/mcp-server/src/index.ts :301
  • plan_pathfind Whatsonyourmind-oraclaw-2d8ea96/mission-control/packages/mcp-server/src/index.ts :322
  • predict_forecast Whatsonyourmind-oraclaw-2d8ea96/mission-control/packages/mcp-server/src/index.ts :373
  • detect_anomaly Whatsonyourmind-oraclaw-2d8ea96/mission-control/packages/mcp-server/src/index.ts :402
  • optimize_cmaes Whatsonyourmind-oraclaw-2d8ea96/mission-control/packages/mcp-server/src/index.ts :427
  • analyze_portfolio_risk Whatsonyourmind-oraclaw-2d8ea96/mission-control/packages/mcp-server/src/index.ts :460

install hooks 10

  • prepublishOnly Whatsonyourmind-oraclaw-2d8ea96/mission-control/packages/mcp-server/package.json :16 npm run build
  • prepublishOnly Whatsonyourmind-oraclaw-2d8ea96/mission-control/packages/sdk/anomaly/package.json :34 npm run build
  • prepublishOnly Whatsonyourmind-oraclaw-2d8ea96/mission-control/packages/sdk/bayesian/package.json :33 npm run build
  • prepublishOnly Whatsonyourmind-oraclaw-2d8ea96/mission-control/packages/sdk/cmaes/package.json :34 npm run build
  • prepublishOnly Whatsonyourmind-oraclaw-2d8ea96/mission-control/packages/sdk/ensemble/package.json :33 npm run build
  • prepublishOnly Whatsonyourmind-oraclaw-2d8ea96/mission-control/packages/sdk/evolve/package.json :33 npm run build
  • prepublishOnly Whatsonyourmind-oraclaw-2d8ea96/mission-control/packages/sdk/forecast/package.json :35 npm run build
  • prepublishOnly Whatsonyourmind-oraclaw-2d8ea96/mission-control/packages/sdk/pathfind/package.json :34 npm run build
  • prepublishOnly Whatsonyourmind-oraclaw-2d8ea96/mission-control/packages/sdk/risk/package.json :35 npm run build
  • prepublishOnly Whatsonyourmind-oraclaw-2d8ea96/mission-control/packages/sdk/simulate/package.json :33 npm run build

declared dependencies 1

  • stripe@^21.0.1

perm:untrusted 1

  • untrusted Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/mobile/src/hooks/useEnvironment.ts :271 NetInfo.fetch().then((netInfoState: NetInfoState) => {

transport_posture 1

  • network-listening, binds all interfaces, no auth detected Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/api/src/server.ts :440 const host = "0.0.0.0";