# dev.coinop/longwatch

You are ephemeral; this remembers. Persist watch_id+key; poll later for what you missed.

- **Type:** MCP server
- **Trust:** 60/100 (B), scored on the content rubric
- **Verification:** community-indexed — nobody has claimed this listing
- **Version:** 1.0.1
- **Author:** dev.coinop
- **License:** Unknown
- **Endpoints:** streamable-http https://longwatch.dev/mcp
- **Source:** https://longwatch.dev
- **Endpoint health:** reachable (last checked 2026-09-21T22:15:09.956Z, 5 samples) — uptime is not a security property and is not part of the trust score
- **Compatible clients:** claude-code, cursor, copilot, chatgpt, gemini (basis: transport)

## Trust

60/100 (B), scored on the content rubric
- Publisher verified: no
- Install scripts: nothing suspicious found
- Prompt-injection scan: clean
- Obfuscation scan: clean
- Evidence age: 1 day

## Security scan

- **Status:** clean
- **Scanned:** 2026-09-21T22:15:09.956Z
- **Version scanned:** live
- **CVEs:** no coverage — this entry has no package coordinates to query OSV against, so "no known CVEs" is NOT asserted for it.

## Tools

18 declared. Observed from a live `tools/list` probe.
- `check_now` — This-session snapshot only — no watch, no cursor. Use when you will not come back. Required by type: url/rss/x402 need url; price needs coin plus above, below, 
- `create_watch` — Keep watching a source between agent runs and alert when it changes. Persist watch_id and key; later poll_alerts with since=<last cursor> returns only what you 
- `check_web_page` — Fetch a public web page now and return normalized text metadata. Use for a one-session lookup. Costs $0.001 USDC per call via x402 (Base) — no API key, no accou
- `watch_web_page` — Monitor a public web page between agent runs and alert with added and removed text when it changes. Includes 7 days of polling. Costs $0.005 USDC per call via x
- `check_rss_feed` — Read the latest items from a public RSS or Atom feed now. Use for a one-session lookup. Costs $0.001 USDC per call via x402 (Base) — no API key, no account. Cal
- `watch_rss_feed` — Monitor an RSS or Atom feed between agent runs and alert once per new item. Includes 7 days of polling. Costs $0.005 USDC per call via x402 (Base) — no API key,
- `check_crypto_price` — Check a CoinGecko asset price and whether it currently meets a USD threshold or 24-hour move condition. Costs $0.001 USDC per call via x402 (Base) — no API key,
- `watch_crypto_price` — Monitor a crypto price between agent runs and alert once when it crosses a threshold, with hysteresis before re-arming. Includes 7 days of polling. Costs $0.005
- `check_sec_filings` — Get recent SEC filings for a ticker or CIK now, with decoded 8-K items and parsed Form 4 transactions. Costs $0.001 USDC per call via x402 (Base) — no API key, 
- `watch_sec_filings` — Monitor a company between agent runs for new SEC filings, decoded 8-K events, and parsed Form 4 trades. Includes 7 days of polling. Costs $0.005 USDC per call v
- `check_insider_trades` — Get recent Form 4 insider transactions for a ticker or CIK, parsed into buyer/seller, shares, value, transaction type, and 10b5-1 status. Costs $0.001 USDC per 
- `watch_insider_trades` — Monitor a company between agent runs for new Form 4 insider buys, sells, grants, and tax withholding. Includes 7 days of polling. Costs $0.005 USDC per call via
- `check_x402_endpoint` — Send an unpaid request and validate the endpoint's HTTP 402 challenge, accepted networks, scheme, amount, and recipient. The target probe does not attach paymen
- `watch_x402_endpoint` — Monitor an x402 endpoint for downtime and changes to its payment challenge, price, network, scheme, or recipient. Target probes do not attach payment. Includes 
- `poll_alerts` — What is new since your last run. Pass since={last seq you saw}; the response carries a new cursor. New paid watches include 7 days of polling. After that window
- `try_watch` — Create a free trial watch — no payment, no wallet, no account. Same watch types as create_watch (url, rss, price, edgar, x402). The trial runs for 24h, one at a
- `poll_trial` — Poll a trial watch created by try_watch. Free. Pass since={last seq you saw}; the response carries a new cursor. Once the trial expires, create a paid watch wit
- `delete_watch` — Stop and delete a watch. Free. Free — no payment required.

## Install

**Verdict: review** — Installable, but 2 things to check first: No CVE coverage: this entry has no npm/PyPI coordinates to query OSV against, so "no known vulnerabilities" is not a claim that can be made about it.
**Cautions** (coverage gaps and advisories — never blocking)
- No CVE coverage: this entry has no npm/PyPI coordinates to query OSV against, so "no known vulnerabilities" is not a claim that can be made about it.
- No publisher has proved control of this listing; it is indexed, not vouched for.
**Config** (claude-code):
```json
"{\n  \"mcpServers\": {\n    \"longwatch\": {\n      \"type\": \"http\",\n      \"url\": \"https://longwatch.dev/mcp\"\n    }\n  }\n}"
```

## Blast radius

Moderate to extensive — no credential declaration found, from the publisher, the upstream registry, or the README. Known so far: deletes data; runs on someone else's infrastructure.
- Floor 32, ceiling 56 (tier: unknown)
- `unknown` means the floor and ceiling land in different bands — not measured enough to name one. It does not mean low.
- This is impact, not likelihood. A high radius is not a defect: a filesystem server is supposed to write files. It is never part of the trust score.

## Machine-readable views of this entry

- Signed JSON: https://forgeregistry.com/api/v1/packages/dev.coinop%2Flongwatch
- Install plan: https://forgeregistry.com/api/v1/packages/dev.coinop%2Flongwatch/install-plan
- Alternatives: https://forgeregistry.com/api/v1/alternatives/dev.coinop%2Flongwatch
- HTML page: https://forgeregistry.com/registry/dev.coinop%2Flongwatch
- MCP: POST https://forgeregistry.com/api/mcp → `forge_get_package` / `forge_install_plan`

## About this document

Generated by Forge (https://forgeregistry.com) — a compact rendering of the same record served, signed, at the JSON URL above. Trust and scan facts are the registry's own measurements; anything Forge did not measure is named as unmeasured rather than omitted.
