chainlink-sentinel
Enables monitoring of Chainlink price feeds on the BNB Chain to detect oracle staleness, stablecoin depegs, and market anomalies.
Provides real-time cross-chain oracle monitoring, anomaly detection, and risk intelligence by reading data feeds across multiple EVM networks.
Enables monitoring of Chainlink price feeds on the Ethereum network to detect oracle staleness, stablecoin depegs, and market anomalies.
Enables monitoring of Chainlink price feeds on the Polygon network to detect oracle staleness, stablecoin depegs, and market anomalies.
Chainlink Sentinel
AI-powered cross-chain risk monitor using Chainlink Data Feeds. Reads on-chain oracle data across 6 EVM chains, detects anomalies in real-time, and generates actionable risk intelligence — all as MCP tools for AI agents.
What it does
Cross-chain oracle scanning: Reads 30+ Chainlink price feeds across Ethereum, Polygon, Arbitrum, Base, Avalanche, and BNB Chain
Anomaly detection: Identifies stale oracles, stablecoin depegs, cross-chain price deviations, and potential oracle attacks
Risk reports: Generates comprehensive risk assessments with severity scoring, chain health metrics, and recommendations
Zero config: No API keys needed. Uses Chainlink's on-chain data via public RPCs
Built with Chainlink
Chainlink Product | Usage |
Data Feeds | Primary data source — reads AggregatorV3Interface across all chains |
CRE | Cross-chain runtime for multi-chain oracle monitoring |
CCIP | Cross-chain message passing for alert propagation (planned) |
MCP Tools (6)
Tool | Description |
| Full cross-chain scan — all feeds, all chains, all anomalies |
| Scan a specific chain (ethereum, polygon, arbitrum, etc.) |
| Read a single Chainlink price feed |
| Monitor USDC/USDT/DAI pegs across all chains |
| Generate AI risk report with recommendations |
| Compare a price pair across chains (detect deviations) |
Quick Start
# Install
npm install
# Build
npm run build
# Run as MCP server
npm startUse with Claude Code
Add to ~/.claude/claude_desktop_config.json:
{
"mcpServers": {
"chainlink-sentinel": {
"command": "node",
"args": ["/path/to/chainlink-sentinel/dist/index.js"]
}
}
}Then ask Claude: "Run a cross-chain sentinel scan" or "Check stablecoin pegs"
Architecture
┌─────────────────────────────────────────────────────┐
│ AI Agent (Claude/Cursor) │
│ via MCP Protocol │
└─────────────────────┬───────────────────────────────┘
│
┌─────────────────────▼───────────────────────────────┐
│ Chainlink Sentinel MCP Server │
│ ┌──────────┐ ┌──────────────┐ ┌────────────────┐ │
│ │ Feed │ │ Anomaly │ │ Risk Analysis │ │
│ │ Reader │ │ Detector │ │ Engine │ │
│ └────┬─────┘ └──────────────┘ └────────────────┘ │
└───────┼─────────────────────────────────────────────┘
│
┌───────▼─────────────────────────────────────────────┐
│ Chainlink Data Feeds (On-Chain) │
│ ┌─────────┐ ┌─────────┐ ┌─────────┐ ┌──────────┐ │
│ │Ethereum │ │Polygon │ │Arbitrum │ │Base/Avax │ │
│ │9 feeds │ │5 feeds │ │4 feeds │ │/BNB │ │
│ └─────────┘ └─────────┘ └─────────┘ └──────────┘ │
└─────────────────────────────────────────────────────┘Anomaly Types
Type | Severity Logic | Description |
Stale Oracle | >1h major, >2h minor | Oracle hasn't updated within expected heartbeat |
Depeg | >0.5% warning, >5% critical | Stablecoin deviating from $1.00 peg |
Cross-chain Deviation | >2% medium, >10% critical | Same pair showing different prices on different chains |
Flash Crash | Price drop >20% in 1 round | Sudden price movement suggesting manipulation |
Feeds Supported (30+)
BTC/USD, ETH/USD, SOL/USD, LINK/USD, USDC/USD, USDT/USD, DAI/USD, AAVE/USD, UNI/USD, MATIC/USD, ARB/USD, AVAX/USD, BNB/USD — across 6 chains.
Convergence Hackathon
Track: CRE & AI / Risk & Compliance
Why Chainlink Sentinel matters:
DeFi protocols need real-time oracle health monitoring
Cross-chain deviations signal arbitrage or attacks
Stablecoin depeg detection prevents cascading liquidations
AI agents can autonomously act on risk intelligence
Differentiation:
First MCP-native Chainlink monitoring tool
Works with any AI agent (Claude, Cursor, Windsurf)
Zero API keys — reads directly from on-chain Chainlink contracts
Cross-chain by default — not single-chain monitoring
License
MIT
Author
Elrom Eved El Elyon — @opencllaw
Available Tools
6 toolssentinel_chainB
Scan all Chainlink price feeds on a specific chain
| Name | Required | Description | Default |
|---|---|---|---|
| chain | Yes | Chain to scan (ethereum, polygon, arbitrum, base, avalanche, bnb) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. While 'Scan' implies a read operation, the description fails to specify what the scan checks for (stale prices? deviations? updates?), whether it returns raw data or analysis, or any rate limiting concerns.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Single sentence of nine words with clear subject-verb-object structure. No redundant phrases or unnecessary elaboration. Front-loaded with the action and target resource.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the simple input schema (single enum parameter) and lack of output schema, the description covers the basic operation but remains incomplete regarding the scan's output format, return structure, or what specific conditions it checks for on the price feeds.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100% (the 'chain' parameter includes description and enum values). The description implies the chain parameter scopes the scan but adds no additional semantic detail, syntax constraints, or usage examples beyond the schema itself.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Provides specific verb ('Scan'), resource ('Chainlink price feeds'), and scope ('on a specific chain'). However, it does not explicitly differentiate from sibling tools like sentinel_scan or sentinel_feed, leaving ambiguity about when to prefer this over tools with similar names.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Contains no guidance on when to use this tool versus alternatives (e.g., sentinel_feed for specific feeds or sentinel_scan for generic scanning). No prerequisites or conditions mentioned.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
sentinel_compareA
Compare a price pair across all available chains to detect cross-chain deviations
| Name | Required | Description | Default |
|---|---|---|---|
| pair | Yes | Price pair to compare (e.g., BTC/USD, ETH/USD) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, so description carries full disclosure burden. It adds valuable context about multi-chain scope and deviation detection purpose, but omits safety properties (read-only vs destructive), rate limits, or return value structure.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Single compact sentence with zero waste. Front-loaded with action verb, immediately communicates resource type, scope ('across all available chains'), and specific value proposition ('detect cross-chain deviations').
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Adequate for a single-parameter tool with complete schema coverage, but lacks output format specification. Mentions 'deviations' implying analytical output, but without output schema or annotations describing return structure, completeness is limited.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema has 100% coverage with clear description and examples for the 'pair' parameter. Description mentions 'price pair' but doesn't add syntax details, validation rules, or format constraints beyond what the schema already provides. Appropriate baseline score for high schema coverage.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description provides specific verb 'Compare', resource 'price pair', and distinctive scope 'across all available chains'. The deviation detection purpose clearly distinguishes it from siblings like sentinel_scan or sentinel_chain which likely perform different functions.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Implies usage scenario (detecting cross-chain deviations) but lacks explicit when-to-use guidance, prerequisites, or comparisons to alternatives like sentinel_feed which might provide raw price data instead of deviation analysis.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
sentinel_feedC
Read a single Chainlink price feed (e.g., BTC/USD on ethereum)
| Name | Required | Description | Default |
|---|---|---|---|
| chain | Yes | Chain name | |
| pair | Yes | Price pair (e.g., BTC/USD, ETH/USD, LINK/USD) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided. While 'Read' implies a safe, non-destructive operation, the description fails to disclose what data is returned (price, timestamp, decimals, roundId), network latency considerations, or error behavior when feeds don't exist.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Single sentence is front-loaded with the action verb. While efficient, it may be overly terse given the absence of annotations and output schema—lacks structural elements like 'Returns...' or 'Use when...' that would help agent selection.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Adequate for the simple 2-parameter input schema, but incomplete given no output schema exists. For a data retrieval tool, the description should specify what constitutes a Chainlink price feed response (current price, updatedAt, answeredInRound) to set agent expectations.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% with clear descriptions for both 'chain' and 'pair' parameters. The description provides a combined usage example (BTC/USD on ethereum) that illustrates the relationship between parameters, but adds minimal semantic value beyond what the schema already documents.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States specific verb ('Read') and resource ('Chainlink price feed'), with 'single' distinguishing it from sibling comparison/scan tools. However, lacks explicit differentiation from sentinel_chain or sentinel_stablecoins.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Contains only an inline example (BTC/USD on ethereum) with no explicit guidance on when to use this versus siblings like sentinel_compare or sentinel_scan. No prerequisites or error conditions mentioned.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
sentinel_risk_reportB
Generate a comprehensive AI risk report with cross-chain health, anomaly analysis, and recommendations.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, so description carries full burden. Mentions 'cross-chain' scope but fails to disclose critical behavioral traits: whether this is expensive/computationally heavy, synchronous vs async, cached vs real-time computation, or if it requires prior data collection. 'AI risk' is vague regarding whether it analyzes AI models or uses AI to analyze risk.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Single efficient sentence (12 words) with front-loaded action verb. Zero redundancy or filler. Each phrase adds specific value ('comprehensive', 'cross-chain', 'anomaly analysis') without waste.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a complex analytical tool implied by 'AI' and 'cross-chain', the description is minimally adequate given zero parameters and no output schema. However, lacks detail on return format, data freshness, or what 'AI risk' specifically encompasses in this domain. Adequate but with clear gaps for a sophisticated reporting tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Zero parameters present, meeting the baseline score of 4 per rubric. Schema is empty object with 100% coverage trivially satisfied. No parameters require semantic clarification beyond what the schema provides.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Clear specific verb ('Generate') and resource ('AI risk report') with detailed components listed (cross-chain health, anomaly analysis, recommendations). Distinguishes from siblings like sentinel_scan or sentinel_chain by emphasizing comprehensive reporting and AI-specific risk analysis, though could explicitly contrast with alternatives.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides no guidance on when to use this tool versus siblings like sentinel_scan or sentinel_chain, nor any prerequisites (e.g., whether specific chains must be monitored first). Purely descriptive of functionality without contextual selection criteria.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
sentinel_scanA
Run a full cross-chain Chainlink oracle scan across 6+ EVM chains. Returns all feed prices, staleness, and detected anomalies.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, description carries full disclosure burden. It adequately discloses return values (feed prices, staleness, anomalies) and geographic scope (6+ chains), but omits operational traits like execution duration, rate limits, authentication requirements, or whether results are cached vs real-time.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two tightly constructed sentences with zero waste. First sentence establishes action and scope; second discloses return values. Information density is high with no filler words or redundant phrasing.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Compensates well for missing output schema by detailing return data types (prices, staleness flags, anomalies). However, lacks specifics on the '6+' chain identities, response format structure, or pagination behavior for what is likely a large data set.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Zero parameters present, establishing baseline score of 4. Description correctly implies no configuration needed for the cross-chain scope, though it could explicitly confirm 'no parameters required' for absolute clarity.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description uses specific verb 'scan' with clear resource 'Chainlink oracle' and scope 'across 6+ EVM chains'. The term 'full cross-chain' effectively distinguishes this from siblings like sentinel_chain (likely single chain) and sentinel_feed (likely specific feed).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides implied usage through 'full' suggesting comprehensive analysis, but lacks explicit guidance on when to use vs alternatives like sentinel_feed for targeted checks or sentinel_compare for differential analysis. No exclusion criteria or prerequisites mentioned.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
sentinel_stablecoinsA
Monitor stablecoin pegs (USDC, USDT, DAI) across all chains. Detects depegs and deviations.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries full burden. It discloses scope ('across all chains') and detection targets ('depegs and deviations'), but omits whether this triggers alerts, requires subscriptions, returns current state vs historical data, or has side effects.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two efficient sentences with zero waste. First sentence establishes scope and coverage, second specifies detection behavior. Well front-loaded and appropriately sized.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
No output schema exists, and the description omits what the monitoring returns (current prices? deviation percentages? alerts?). For a zero-parameter monitoring tool, the description suffices for selection but leaves operational gaps regarding return values.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Zero parameters present, establishing baseline 4. The description implicitly confirms no filtering parameters are needed (covers 'all chains'), matching the empty schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Clear specific verb ('Monitor') and resource ('stablecoin pegs USDC/USDT/DAI across all chains'). However, it does not explicitly differentiate from sibling tools like sentinel_scan or sentinel_chain despite their similar naming patterns, leaving potential ambiguity about overlap.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Usage is implied by the specificity of the resource (stablecoins vs general monitoring), but there is no explicit guidance on when to prefer this over sentinel_scan, sentinel_compare, or other siblings, nor any prerequisites stated.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
6 tool updates
v1.0.0- First observed
sentinel_chain - First observed
sentinel_compare - First observed
sentinel_feed - First observed
sentinel_risk_report - First observed
sentinel_scan - First observed
sentinel_stablecoins
TDQS
Most tools have distinct purposes, but sentinel_chain and sentinel_scan could cause confusion as both involve scanning across chains. sentinel_chain scans all feeds on a specific chain, while sentinel_scan does a full cross-chain scan across multiple chains, but the naming overlap may lead to misselection without careful reading of descriptions.
All tools follow a consistent 'sentinel_' prefix with descriptive suffixes, using snake_case uniformly. The naming pattern is predictable and clear, making it easy for agents to understand the tool set's structure and purpose.
With 6 tools, this server is well-scoped for monitoring Chainlink oracles and stablecoins. Each tool serves a specific function in the domain, from single-feed reads to cross-chain analysis, without being overly sparse or bloated.
The tool set covers key aspects of Chainlink oracle monitoring, including single feeds, cross-chain comparisons, risk reporting, and stablecoin tracking. A minor gap exists in lacking tools for historical data analysis or alert configuration, but core monitoring workflows are well-supported.
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Connectors
Chainlink tools over MCP: CCIP cross-chain, data feeds, data streams, VRF, proof of reserve.
Chainlink MCP: CCIP, CCT pools, Data Feeds, Data Streams, VRF v2.5, PoR, Automation, Functions.
Ethereum tools over MCP: Chainlink feeds, ENS, ERC-8004 agents, EAS attestations, transactions.
Ethereum MCP: Chainlink feeds, gas, ERC-20, ENS, ABI, contract calls, ERC-8004, EAS.
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/ElromEvedElElyon/chainlink-sentinel'
If you have feedback or need assistance with the MCP directory API, please join our Discord server