BlackSwan Risk Intelligence

BlackSwan monitors crypto markets 24/7 and produces two risk assessments:

• Flare — Precursor detection from a 15-minute signal window. Use for immediate, alarm-bell risk checks. Before the news breaks.
• Core — State synthesis from a 60-minute signal window. Use for market context and risk assessment. As the news breaks.

When to use each tool

| Question | Tool |

|----------|------|

| "Is something happening right now?" | Flare |

| "What's the overall market risk environment?" | Core |

| "Should I be worried about sudden moves?" | Flare |

| "Give me a full risk briefing" | Both (Flare first, then Core) |

Base URL

https://mcp.blackswan.wtf

Endpoints

GET /api/flare

Returns the latest Flare precursor detection assessment.

curl -s https://mcp.blackswan.wtf/api/flare

Response fields:

| Field | Description |

|-------|-------------|

| agent | Always "flare" |

| data_age | Human-readable age of the data (e.g. "12 minutes ago") |

| status | "clear" or "alert" |

| severity | "none", "low", "medium", "high", or "critical" |

| checked_at | ISO 8601 timestamp of the assessment |

| assessment | Natural language risk assessment |

| signals | Array of detected signals, each with type, source, and detail |

GET /api/core

Returns the latest Core state synthesis assessment.

curl -s https://mcp.blackswan.wtf/api/core

Response fields:

| Field | Description |

|-------|-------------|

| agent | Always "core" |

| data_age | Human-readable age of the data (e.g. "1 hour ago") |

| timestamp | ISO 8601 timestamp of the assessment |

| environment | "stable", "elevated", "stressed", or "crisis" |

| assessment | Natural language risk assessment |

| key_factors | Array of strings describing the main risk factors |

| sources_used | Array of data source names used in the assessment |

| data_freshness | Description of how fresh the underlying data is |

Interpreting severity levels (Flare)

| Severity | Meaning |

|----------|---------|

| none | No precursors detected, markets quiet |

| low | Minor signals, worth noting but not actionable |

| medium | Notable signals, warrants attention |

| high | Strong precursors detected, elevated risk of sudden moves |

| critical | Extreme signals, immediate risk of major market event |

Interpreting environment levels (Core)

| Environment | Meaning |

|-------------|---------|

| stable | Normal market conditions, low systemic risk |

| elevated | Above-normal risk, some stress indicators present |

| stressed | Significant stress across multiple indicators |

| crisis | Severe market stress, active dislocation or contagion |

Error handling

| HTTP Status | Meaning |

|-------------|---------|

| 200 | Success, response contains full assessment |

| 502 | Agent output failed validation — format may have changed |

| 503 | No recent agent runs — system may be starting up |

| 500 | Unexpected server error |

On non-200 responses, the body is {"error": "..."} with a human-readable message.

Complete risk check pattern

To get a full picture, call both endpoints:

curl -s https://mcp.blackswan.wtf/api/flare
curl -s https://mcp.blackswan.wtf/api/core

Present Flare results first (immediate risks), then Core (broader context).