Back to Browse

Second Eyes Ai MCP Server

Developer ToolsUse Caution4.2MCP RegistryLocalRemote
Free

Server data from the Official MCP Registry

Workflow diagnostics, capability routing, and x402 settlement for MCP-compatible agents.

About

Workflow diagnostics, capability routing, and x402 settlement for MCP-compatible agents.

Remote endpoints: streamable-http: https://secondeyesai.com/api/bar

Security Report

4.2
Use Caution4.2High Risk

Second Eyes MCP server implements a payment-gated infrastructure for autonomous agents using x402 protocol with USDC on Base. The codebase demonstrates strong security practices with comprehensive test coverage for payment verification, multi-network isolation, and input validation. No critical vulnerabilities identified. Minor findings relate to code quality (broad exception handling, logging) and typical MCP permissions (network access, environment variables) that are appropriate for the payment processing purpose. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue (1 critical, 0 high severity).

5 files analyzed · 10 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

env_vars

Check that this permission is expected for this type of plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

Unverified package source

We couldn't verify that the installable package matches the reviewed source code. Proceed with caution.

What You'll Need

Set these up before or after installing:

Second Eyes service base URLOptional

Environment variable: SECOND_EYE_BASE_URL

EVM private key (0x…) for auto USDC payment on 402. SECURITY: MCP process can drain this wallet — use a dedicated low-balance payer.Optional

Environment variable: MCP_X402_WALLET_KEY

Per-call spending cap (default 0.50)Optional

Environment variable: MCP_X402_MAX_SPEND_USD

Process lifetime spending cap (default 2.00)Optional

Environment variable: MCP_X402_SESSION_MAX_USD

Comma-separated capability slugs allowed for compatibility auto-pay. Default (unset) or * enables every zero-argument capability priced at or below $0.05 USDC. Input-requiring transcription and extraction routes remain excluded unless explicitly selected. Spending caps remain authoritative.Optional

Environment variable: MCP_X402_ALLOW_SLUGS

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Documentation

View on GitHub

From the project's GitHub README.

Second Eyes

Open infrastructure for autonomous agents. secondeyesai.com

Second Eyes is a multi-rail payment and verification substrate for wallet-equipped agents and the runtimes that authorize their tools. Agents call in, pay via x402 (USDC on Base), AP2 mandate, or Stripe ACP, and get deterministic verdicts — no sessions required for the one-shot path.

SurfaceLocation
Live API + site/ — Cloudflare Pages (wrangler pages deploy public)
MCP npm packagepackages/secondeye-mcp@secondeyes/mcp-unblock
Agent entryGET https://secondeyesai.com/api/bar
Agent instructionspublic/llms.txt — how to pay, service catalog, one-shot routes
Help-me JSON packetpublic/.well-known/help-me.json — machine-readable distress entry route
Agent cardpublic/.well-known/agent-card.json
Crawler policypublic/robots.txt

The MCP package is a thin stdio client that proxies to the substrate API. Same codebase, same repo, same product.

Protocol anchors

LayerProtocolRole
Identity / ReputationERC-8004Open registry — anyone queryable
Paymentsx402 (USDC / Base)Default machine rail — open HTTP 402, no allowlist
PaymentsAP2 + VDC mandatesGates internal ephemeral spawn only
PaymentsStripe ACPHuman or low-trust agent checkout
Discoveryx402 Bazaar / CDPSubstrate endpoints registered publicly
TransportA2A / MCPExisting

Session-less x402 doors (autonomous agents)

No login, no session header. Pay USDC on Base via x402 v2 (PAYMENT-REQUIRED → sign → PAYMENT-SIGNATURE). Deterministic verdicts — same answer on every retry.

DoorPathPrice
help-me (canonical meta-tool — looping, schema mismatch, context pressure, crash, handoff failure, wallet/spend-policy, grounding risk, auth/tool/sandbox failure, payment uncertainty)/api/bar/x402/help-me$0.01
AWS AgentCore one-shot map/api/bar/x402/aws-agent-survival$0.01
peril-router (legacy alias of help-me)/api/bar/x402/peril-router$0.01
Schema repair/api/bar/x402/schema-repair$0.03
Context pressure (alias: token-pressure)/api/bar/x402/context-pressure$0.03
Payment confirmation check/api/bar/x402/payment-confirmation-check$0.01
Specialist one-shot routes/api/bar/x402/{slug}$0.01–$0.05
Transcribe (audio/video/PDF) + meaning/api/bar/x402/transcribe$0.05
Doc extract (invoice/contract/PDF)/api/bar/x402/extract$0.05
Bazaar index check/api/bar/x402/index-check$0.05
x402 format doctor/api/bar/x402/doctor$0.25

Full agent-facing docs: /llms.txt. Index new routes: node scripts/canary-pay.mjs.

Payment rails (x402 v2 accepts[])

Base (eip155:8453) is canonical and always accepts[0]. Polygon (eip155:137) and Solana are roadmap — do not sign for a planned rail. Live rail states: GET /api/barpayment_activation.rail_states. See docs/multi-network-x402.md.

Wallet-equipped agent target profiles

Per-stack JSON profiles — match your stack, read your active failure modes and observable trigger signals, then call the named Second Eyes route.

Index: public/.well-known/wallet-agent-targets/index.json

TargetProfile
Coinbase AgentKit + CDP + x402/.well-known/wallet-agent-targets/coinbase-agentkit-cdp.json
AWS AgentCore Payments + Strands/.well-known/wallet-agent-targets/agentcore-strands.json
MCP clients with spending wallets/.well-known/wallet-agent-targets/mcp-spending-wallets.json
Crossmint / Privy / Turnkey signer infra/.well-known/wallet-agent-targets/wallet-infra-crossmint-privy-turnkey.json
LangGraph / CrewAI / AutoGen / OpenAI SDK + wallets/.well-known/wallet-agent-targets/langgraph-crewai-openai-wallets.json
x402-native (ClawRouter / BlockRun / Zerion)/.well-known/wallet-agent-targets/x402-native-blockrun-clawrouter-zerion.json

Install (agents)

{
  "mcpServers": {
    "secondeye": {
      "command": "npx",
      "args": ["-y", "@secondeyes/mcp-unblock"]
    }
  }
}

Develop

cd <project-root>
npm install
npx wrangler pages deploy public --project-name second-eyes-ai

Secrets (never commit): copy .env.example.env.local, then node scripts/push-coinbase-secrets.mjs. Required for transcribe/extract: OPENROUTER_API_KEY.

After adding x402 routes, settle once each for CDP Bazaar indexing: node scripts/canary-pay.mjs.

Publish MCP package

From repo root, tag mcp-vX.Y.Z (or run workflow manually). Uses npm Trusted Publishing (OIDC) — configure once on npmjs.com. See packages/secondeye-mcp/PUBLISH.md.

Deprecated repo

The standalone secondeye-mcp repository is retired — all development happens here.

Terminology normalization summary (issue #40)

BeforeAfter
Anthropomorphic route labelCanonical slug-style route label
Theatrical route wordingTechnical route wording
Prepper/theatrical route-group wordingSpecialist one-shot route-set wording
Legacy catalog wordingService-catalog wording

Reviews

No reviews yet

Be the first to review this server!