An agent can connect on its own if it already holds X_API_KEY, X_API_KEY.Remote endpoint behind a static API key or header. The registry never sees the value; the agent fills the placeholder.
Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0. The graph is what a clean install of this version resolves today; nothing was installed or run. How it is checked.
Endpoints
remote
auth
reachable
uptime 30d
p50
protocol
last ok
https://api.shingou.io/mcpstreamable-http
api_key ${X_API_KEY}
yes
100%
625 ms
2025-11-25
2026-10-20
package
registry
version
runtime
secrets
@shingou-io/mcp-stdio
npm
0.4.2
–
SHINGOU_API_KEY
Tools (4)
get_eventsread-only
Recent classified market events for a symbol. Kill-switch trio: hack_exploit, regulation, delisting — the reference integrations stand aside for 24h after one. Report the event headline and source link, not just a risk flag.
get_sentimentread-only
Latest news-sentiment signal per symbol (batch up to 50 in one call — one signal per asset per hour, so never poll faster than hourly). On the free plan, symbols outside BTC-USD/ETH-USD/SOL-USD are 24h delayed: check `timestamp` and disclose staleness.
get_sentiment_historyread-only
Point-in-time sentiment series for backtesting: `bucket` is the as-of time, no lookahead. `from`/`to` are clamped to your plan's history window and to its per-request span, then echoed back — check them rather than assuming. `reconstructed: true` buckets were rebuilt from archival news, not live-collected; disclose the mix in any backtest.
get_symbolsread-only
The supported symbol universe with each symbol's free-plan freshness. Static — costs no quota and needs no API key.