Server data from the Official MCP Registry
Workflow diagnostics, capability routing, and x402 settlement for MCP-compatible agents.
Workflow diagnostics, capability routing, and x402 settlement for MCP-compatible agents.
Remote endpoints: streamable-http: https://secondeyesai.com/api/bar
Second Eyes MCP server implements a payment-gated infrastructure for autonomous agents using x402 protocol with USDC on Base. The codebase demonstrates strong security practices with comprehensive test coverage for payment verification, multi-network isolation, and input validation. No critical vulnerabilities identified. Minor findings relate to code quality (broad exception handling, logging) and typical MCP permissions (network access, environment variables) that are appropriate for the payment processing purpose. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue (1 critical, 0 high severity).
5 files analyzed · 10 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
This plugin requests these system permissions. Most are normal for its category.
Unverified package source
We couldn't verify that the installable package matches the reviewed source code. Proceed with caution.
Set these up before or after installing:
Environment variable: SECOND_EYE_BASE_URL
Environment variable: MCP_X402_WALLET_KEY
Environment variable: MCP_X402_MAX_SPEND_USD
Environment variable: MCP_X402_SESSION_MAX_USD
Environment variable: MCP_X402_ALLOW_SLUGS
Available as Local & Remote
This plugin can run on your machine or connect to a hosted endpoint. during install.
From the project's GitHub README.
Open infrastructure for autonomous agents. secondeyesai.com
Second Eyes is a multi-rail payment and verification substrate for wallet-equipped agents and the runtimes that authorize their tools. Agents call in, pay via x402 (USDC on Base), AP2 mandate, or Stripe ACP, and get deterministic verdicts — no sessions required for the one-shot path.
| Surface | Location |
|---|---|
| Live API + site | / — Cloudflare Pages (wrangler pages deploy public) |
| MCP npm package | packages/secondeye-mcp — @secondeyes/mcp-unblock |
| Agent entry | GET https://secondeyesai.com/api/bar |
| Agent instructions | public/llms.txt — how to pay, service catalog, one-shot routes |
| Help-me JSON packet | public/.well-known/help-me.json — machine-readable distress entry route |
| Agent card | public/.well-known/agent-card.json |
| Crawler policy | public/robots.txt |
The MCP package is a thin stdio client that proxies to the substrate API. Same codebase, same repo, same product.
| Layer | Protocol | Role |
|---|---|---|
| Identity / Reputation | ERC-8004 | Open registry — anyone queryable |
| Payments | x402 (USDC / Base) | Default machine rail — open HTTP 402, no allowlist |
| Payments | AP2 + VDC mandates | Gates internal ephemeral spawn only |
| Payments | Stripe ACP | Human or low-trust agent checkout |
| Discovery | x402 Bazaar / CDP | Substrate endpoints registered publicly |
| Transport | A2A / MCP | Existing |
No login, no session header. Pay USDC on Base via x402 v2 (PAYMENT-REQUIRED → sign → PAYMENT-SIGNATURE). Deterministic verdicts — same answer on every retry.
| Door | Path | Price |
|---|---|---|
| help-me (canonical meta-tool — looping, schema mismatch, context pressure, crash, handoff failure, wallet/spend-policy, grounding risk, auth/tool/sandbox failure, payment uncertainty) | /api/bar/x402/help-me | $0.01 |
| AWS AgentCore one-shot map | /api/bar/x402/aws-agent-survival | $0.01 |
peril-router (legacy alias of help-me) | /api/bar/x402/peril-router | $0.01 |
| Schema repair | /api/bar/x402/schema-repair | $0.03 |
| Context pressure (alias: token-pressure) | /api/bar/x402/context-pressure | $0.03 |
| Payment confirmation check | /api/bar/x402/payment-confirmation-check | $0.01 |
| Specialist one-shot routes | /api/bar/x402/{slug} | $0.01–$0.05 |
| Transcribe (audio/video/PDF) + meaning | /api/bar/x402/transcribe | $0.05 |
| Doc extract (invoice/contract/PDF) | /api/bar/x402/extract | $0.05 |
| Bazaar index check | /api/bar/x402/index-check | $0.05 |
| x402 format doctor | /api/bar/x402/doctor | $0.25 |
Full agent-facing docs: /llms.txt. Index new routes: node scripts/canary-pay.mjs.
accepts[])Base (eip155:8453) is canonical and always accepts[0]. Polygon (eip155:137) and Solana are roadmap — do not sign for a planned rail. Live rail states: GET /api/bar → payment_activation.rail_states. See docs/multi-network-x402.md.
Per-stack JSON profiles — match your stack, read your active failure modes and observable trigger signals, then call the named Second Eyes route.
Index: public/.well-known/wallet-agent-targets/index.json
| Target | Profile |
|---|---|
| Coinbase AgentKit + CDP + x402 | /.well-known/wallet-agent-targets/coinbase-agentkit-cdp.json |
| AWS AgentCore Payments + Strands | /.well-known/wallet-agent-targets/agentcore-strands.json |
| MCP clients with spending wallets | /.well-known/wallet-agent-targets/mcp-spending-wallets.json |
| Crossmint / Privy / Turnkey signer infra | /.well-known/wallet-agent-targets/wallet-infra-crossmint-privy-turnkey.json |
| LangGraph / CrewAI / AutoGen / OpenAI SDK + wallets | /.well-known/wallet-agent-targets/langgraph-crewai-openai-wallets.json |
| x402-native (ClawRouter / BlockRun / Zerion) | /.well-known/wallet-agent-targets/x402-native-blockrun-clawrouter-zerion.json |
{
"mcpServers": {
"secondeye": {
"command": "npx",
"args": ["-y", "@secondeyes/mcp-unblock"]
}
}
}
cd <project-root>
npm install
npx wrangler pages deploy public --project-name second-eyes-ai
Secrets (never commit): copy .env.example → .env.local, then node scripts/push-coinbase-secrets.mjs. Required for transcribe/extract: OPENROUTER_API_KEY.
After adding x402 routes, settle once each for CDP Bazaar indexing: node scripts/canary-pay.mjs.
From repo root, tag mcp-vX.Y.Z (or run workflow manually). Uses npm Trusted Publishing (OIDC) — configure once on npmjs.com. See packages/secondeye-mcp/PUBLISH.md.
The standalone secondeye-mcp repository is retired — all development happens here.
| Before | After |
|---|---|
| Anthropomorphic route label | Canonical slug-style route label |
| Theatrical route wording | Technical route wording |
| Prepper/theatrical route-group wording | Specialist one-shot route-set wording |
| Legacy catalog wording | Service-catalog wording |
Be the first to review this server!
by Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
by Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
by mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.
by Microsoft · Content & Media
Convert files (PDF, Word, Excel, images, audio) to Markdown for LLM consumption
by mcp-marketplace · Developer Tools
Search and install MCP servers from inside your AI client.
by mcp-marketplace · Finance
Free stock data and market news for any MCP-compatible AI assistant.