Eclipse Fathom MCP
DeFi, measured honestly: signed protocol registry, dual-source risk reads, and an allowance audit that flags the unlimited grants.
status: in-developmentclass: mcpDeFi Risk & Execution-Policy Infrastructure
Vendor: Cyan Eclipse Technologies
What it does
- Signed, versioned Protocol Registry (Uniswap/Aave/Compound/Lido across Ethereum/Arbitrum/Base): audit status as dated data with provenance, risk tiers, admin posture; addresses are never scraped live into trust and never copied from transaction history
- Position + Risk reads over a chain-transport seam: dual-source health and liquidation distance that render DIVERGENT instead of averaging when price sources disagree (bench-measured edge: 2.00% divergence still renders, 2.01% is DIVERGENT with headline fields null)
- Flagship allowance_audit: ERC-20 + Permit2 grants ranked by value at risk; unlimited grants flagged structurally; spenders Registry-resolved or labeled UNRESOLVED
- Address lookalike (poisoning) checks, depeg watch, and exposure by protocol/chain/risk tier
- D0 is reads only — no execution, draft, or signer tool exists; key-shaped input is a refused class (KEY_MATERIAL_REFUSED, incident-receipted, never echoed or stored); every output passes a lint banning advice language, yield promises, and safety claims
Tools
registry_list · registry_get · registry_verify · position_read · health_read · depeg_watch · allowance_audit · address_check · exposure_read · receipt_list
Platforms
- MCP over stdio (HTTP transport on roadmap)
Certification
Bench verdict: CERTIFIED(local)
Certified scope: CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 16 pass, 1 na of 17 checks (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/fathom.py. Run 1 PARTIAL card retained append-only (bench-suite defect); run 2 is the standing card. Non-failing bench observation: spender resolution in allowance_audit is chain-agnostic; chain-aware resolution recommended before D1 (queued as a bench note).
Not tested:
- Live RPC reads — D0 ships ONLY the fixture transport behind the chain_adapter seam; no live chain was queried, and no live transport exists in this package. The seam + transport contract is the deliverable; a live transport must be implemented and benched before any read is called live.
- Seed Registry facts (contract addresses, audit firms/dates) are marked [verify] per entry for the first human release review; the release signature attests this seed file, not a completed re-audit.
- Execution, drafts, simulation, and signing (spec D1+) — no such code path exists in D0.
- Non-EVM chains and perps/bridge/vault chapters (D3) — out of D0 scope.
Bench scorecard (evidence): https://eclipsebazaar.com/cards/eclipse-fathom-mcp-2026-10-25-2.json
Pricing
Free local v0.1; suite pricing TBD per spec
Install / verify
docker run -i ghcr.io/cyan-eclipse-technologies-llc/eclipse-fathom-mcp:latest
Verify any MCP server in your client configs against this catalog with bazaar check (Eclipse Bazaar MCP / CLI — see llms.txt).