BlackSwan Risk Intelligence
BlackSwan monitors crypto markets 24/7 and produces two risk assessments:
- Flare — Precursor detection from a 15-minute signal window. Use for immediate, alarm-bell risk checks. Before the news breaks.
- Core — State synthesis from a 60-minute signal window. Use for market context and risk assessment. As the news breaks.
When to use each tool
| Question |
Tool |
| "Is something happening right now?" |
Flare |
| "What's the overall market risk environment?" |
Core |
| "Should I be worried about sudden moves?" |
Flare |
| "Give me a full risk briefing" |
Both (Flare first, then Core) |
Base URL
https://mcp.blackswan.wtf
Endpoints
GET /api/flare
Returns the latest Flare precursor detection assessment.
curl -s https://mcp.blackswan.wtf/api/flare
Response fields:
| Field |
Description |
agent |
Always "flare" |
data_age |
Human-readable age of the data (e.g. "12 minutes ago") |
status |
"clear" or "alert" |
severity |
"none", "low", "medium", "high", or "critical" |
checked_at |
ISO 8601 timestamp of the assessment |
assessment |
Natural language risk assessment |
signals |
Array of detected signals, each with type, source, and detail |
GET /api/core
Returns the latest Core state synthesis assessment.
curl -s https://mcp.blackswan.wtf/api/core
Response fields:
| Field |
Description |
agent |
Always "core" |
data_age |
Human-readable age of the data (e.g. "1 hour ago") |
timestamp |
ISO 8601 timestamp of the assessment |
environment |
"stable", "elevated", "stressed", or "crisis" |
assessment |
Natural language risk assessment |
key_factors |
Array of strings describing the main risk factors |
sources_used |
Array of data source names used in the assessment |
data_freshness |
Description of how fresh the underlying data is |
Interpreting severity levels (Flare)
| Severity |
Meaning |
none |
No precursors detected, markets quiet |
low |
Minor signals, worth noting but not actionable |
medium |
Notable signals, warrants attention |
high |
Strong precursors detected, elevated risk of sudden moves |
critical |
Extreme signals, immediate risk of major market event |
Interpreting environment levels (Core)
| Environment |
Meaning |
stable |
Normal market conditions, low systemic risk |
elevated |
Above-normal risk, some stress indicators present |
stressed |
Significant stress across multiple indicators |
crisis |
Severe market stress, active dislocation or contagion |
Error handling
| HTTP Status |
Meaning |
200 |
Success, response contains full assessment |
502 |
Agent output failed validation — format may have changed |
503 |
No recent agent runs — system may be starting up |
500 |
Unexpected server error |
On non-200 responses, the body is {"error": "..."} with a human-readable message.
Complete risk check pattern
To get a full picture, call both endpoints:
curl -s https://mcp.blackswan.wtf/api/flare
curl -s https://mcp.blackswan.wtf/api/core
Present Flare results first (immediate risks), then Core (broader context).
1---2name: blackclaw3description: Real-time crypto risk intelligence; before and as things break. Two tools: Flare (15-min precursor detection, immediate alarms) and Core (60-min state synthesis, context assessment). Free access to the last analysis. No API key required. Upgrade to x402 for custom analysis.4---5
6# BlackSwan Risk Intelligence
7
8BlackSwan monitors crypto markets 24/7 and produces two risk assessments:
9
10- **Flare** — Precursor detection from a 15-minute signal window. Use for immediate, alarm-bell risk checks. Before the news breaks.
11- **Core** — State synthesis from a 60-minute signal window. Use for market context and risk assessment. As the news breaks.
12
13## When to use each tool
14
15| Question | Tool |
16|----------|------|
17| "Is something happening right now?" | Flare |
18| "What's the overall market risk environment?" | Core |
19| "Should I be worried about sudden moves?" | Flare |
20| "Give me a full risk briefing" | Both (Flare first, then Core) |
21
22## Base URL
23
24```
25https://mcp.blackswan.wtf
26```
27
28## Endpoints
29
30### GET /api/flare
31
32Returns the latest Flare precursor detection assessment.
33
34```bash
35curl -s https://mcp.blackswan.wtf/api/flare
36```
37
38**Response fields:**
39
40| Field | Description |
41|-------|-------------|
42| `agent` | Always `"flare"` |
43| `data_age` | Human-readable age of the data (e.g. "12 minutes ago") |
44| `status` | `"clear"` or `"alert"` |
45| `severity` | `"none"`, `"low"`, `"medium"`, `"high"`, or `"critical"` |
46| `checked_at` | ISO 8601 timestamp of the assessment |
47| `assessment` | Natural language risk assessment |
48| `signals` | Array of detected signals, each with `type`, `source`, and `detail` |
49
50### GET /api/core
51
52Returns the latest Core state synthesis assessment.
53
54```bash
55curl -s https://mcp.blackswan.wtf/api/core
56```
57
58**Response fields:**
59
60| Field | Description |
61|-------|-------------|
62| `agent` | Always `"core"` |
63| `data_age` | Human-readable age of the data (e.g. "1 hour ago") |
64| `timestamp` | ISO 8601 timestamp of the assessment |
65| `environment` | `"stable"`, `"elevated"`, `"stressed"`, or `"crisis"` |
66| `assessment` | Natural language risk assessment |
67| `key_factors` | Array of strings describing the main risk factors |
68| `sources_used` | Array of data source names used in the assessment |
69| `data_freshness` | Description of how fresh the underlying data is |
70
71## Interpreting severity levels (Flare)
72
73| Severity | Meaning |
74|----------|---------|
75| `none` | No precursors detected, markets quiet |
76| `low` | Minor signals, worth noting but not actionable |
77| `medium` | Notable signals, warrants attention |
78| `high` | Strong precursors detected, elevated risk of sudden moves |
79| `critical` | Extreme signals, immediate risk of major market event |
80
81## Interpreting environment levels (Core)
82
83| Environment | Meaning |
84|-------------|---------|
85| `stable` | Normal market conditions, low systemic risk |
86| `elevated` | Above-normal risk, some stress indicators present |
87| `stressed` | Significant stress across multiple indicators |
88| `crisis` | Severe market stress, active dislocation or contagion |
89
90## Error handling
91
92| HTTP Status | Meaning |
93|-------------|---------|
94| `200` | Success, response contains full assessment |
95| `502` | Agent output failed validation — format may have changed |
96| `503` | No recent agent runs — system may be starting up |
97| `500` | Unexpected server error |
98
99On non-200 responses, the body is `{"error": "..."}` with a human-readable message.
100
101## Complete risk check pattern
102
103To get a full picture, call both endpoints:
104
105```bash
106curl -s https://mcp.blackswan.wtf/api/flare
107curl -s https://mcp.blackswan.wtf/api/core
108```
109
110Present Flare results first (immediate risks), then Core (broader context).