Second Eyes Agent Workflow Services
Workflow diagnostics, capability routing, and x402 settlement for MCP-compatible agents.
Install
Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).
claude mcp add --transport http second-eyes-agent-workflow-services 'https://secondeyesai.com/api/bar'
{
"mcpServers": {
"second-eyes-agent-workflow-services": {
"type": "http",
"url": "https://secondeyesai.com/api/bar"
}
}
}
@secondeyes/mcp-unblockclaude mcp add second-eyes-agent-workflow-services -e 'SECOND_EYE_BASE_URL=https://secondeyesai.com' -e 'MCP_X402_WALLET_KEY=<MCP_X402_WALLET_KEY>' -e 'MCP_X402_MAX_SPEND_USD=0.50' -e 'MCP_X402_SESSION_MAX_USD=2.00' -e 'MCP_X402_ALLOW_SLUGS=<MCP_X402_ALLOW_SLUGS>' -- npx -y @secondeyes/mcp-unblock@1.2.7
{
"mcpServers": {
"second-eyes-agent-workflow-services": {
"command": "npx",
"args": [
"-y",
"@secondeyes/mcp-unblock@1.2.7"
],
"env": {
"SECOND_EYE_BASE_URL": "https://secondeyesai.com",
"MCP_X402_WALLET_KEY": "<MCP_X402_WALLET_KEY>",
"MCP_X402_MAX_SPEND_USD": "0.50",
"MCP_X402_SESSION_MAX_USD": "2.00",
"MCP_X402_ALLOW_SLUGS": "<MCP_X402_ALLOW_SLUGS>"
}
}
}
}
Environment variables
SECOND_EYE_BASE_URLSecond Eyes service base URLMCP_X402_WALLET_KEYEVM private key (0x…) for auto USDC payment on 402. SECURITY: MCP process can drain this wallet — use a dedicated low-balance payer.MCP_X402_MAX_SPEND_USDPer-call spending cap (default 0.50)MCP_X402_SESSION_MAX_USDProcess lifetime spending cap (default 2.00)MCP_X402_ALLOW_SLUGSComma-separated capability slugs allowed for compatibility auto-pay. Default (unset) or * enables every zero-argument capability priced at or below $0.05 USDC. Input-requiring transcription and extraction routes remain excluded unless explicitly selected. Spending caps remain authoritative.
Documentation
From the project's README on GitHub, refreshed weekly. Links open on GitHub.
Contents
Second Eyes
Open infrastructure for autonomous agents. secondeyesai.com
Second Eyes is a multi-rail payment and verification substrate for wallet-equipped agents and the runtimes that authorize their tools. Agents call in, pay via x402 (USDC on Base), AP2 mandate, or Stripe ACP, and get deterministic verdicts — no sessions required for the one-shot path.
| Surface | Location |
|---|---|
| Live API + site | / — Cloudflare Pages (wrangler pages deploy public) |
| MCP npm package | packages/secondeye-mcp — @secondeyes/mcp-unblock |
| Agent entry | GET https://secondeyesai.com/api/bar |
| Agent instructions | public/llms.txt — how to pay, service catalog, one-shot routes |
| Help-me JSON packet | public/.well-known/help-me.json — machine-readable distress entry route |
| Agent card | public/.well-known/agent-card.json |
| Crawler policy | public/robots.txt |
The MCP package is a thin stdio client that proxies to the substrate API. Same codebase, same repo, same product.
Protocol anchors
| Layer | Protocol | Role |
|---|---|---|
| Identity / Reputation | ERC-8004 | Open registry — anyone queryable |
| Payments | x402 (USDC / Base) | Default machine rail — open HTTP 402, no allowlist |
| Payments | AP2 + VDC mandates | Gates internal ephemeral spawn only |
| Payments | Stripe ACP | Human or low-trust agent checkout |
| Discovery | x402 Bazaar / CDP | Substrate endpoints registered publicly |
| Transport | A2A / MCP | Existing |
Session-less x402 doors (autonomous agents)
No login, no session header. Pay USDC on Base via x402 v2 (PAYMENT-REQUIRED → sign → PAYMENT-SIGNATURE). Deterministic verdicts — same answer on every retry.
| Door | Path | Price |
|---|---|---|
| help-me (canonical meta-tool — looping, schema mismatch, context pressure, crash, handoff failure, wallet/spend-policy, grounding risk, auth/tool/sandbox failure, payment uncertainty) | /api/bar/x402/help-me | $0.01 |
| AWS AgentCore one-shot map | /api/bar/x402/aws-agent-survival | $0.01 |
peril-router (legacy alias of help-me) | /api/bar/x402/peril-router | $0.01 |
| Schema repair | /api/bar/x402/schema-repair | $0.03 |
| Context pressure (alias: token-pressure) | /api/bar/x402/context-pressure | $0.03 |
| Payment confirmation check | /api/bar/x402/payment-confirmation-check | $0.01 |
| Specialist one-shot routes | /api/bar/x402/{slug} | $0.01–$0.05 |
| Transcribe (audio/video/PDF) + meaning | /api/bar/x402/transcribe | $0.05 |
| Doc extract (invoice/contract/PDF) | /api/bar/x402/extract | $0.05 |
| Bazaar index check | /api/bar/x402/index-check | $0.05 |
| x402 format doctor | /api/bar/x402/doctor | $0.25 |
Full agent-facing docs: /llms.txt. Index new routes: node scripts/canary-pay.mjs.
Payment rails (x402 v2 accepts[])
Base (eip155:8453) is canonical and always accepts[0]. Polygon (eip155:137) and Solana are roadmap — do not sign for a planned rail. Live rail states: GET /api/bar → payment_activation.rail_states. See docs/multi-network-x402.md.
Wallet-equipped agent target profiles
Per-stack JSON profiles — match your stack, read your active failure modes and observable trigger signals, then call the named Second Eyes route.
Index: public/.well-known/wallet-agent-targets/index.json
| Target | Profile |
|---|---|
| Coinbase AgentKit + CDP + x402 | /.well-known/wallet-agent-targets/coinbase-agentkit-cdp.json |
| AWS AgentCore Payments + Strands | /.well-known/wallet-agent-targets/agentcore-strands.json |
| MCP clients with spending wallets | /.well-known/wallet-agent-targets/mcp-spending-wallets.json |
| Crossmint / Privy / Turnkey signer infra | /.well-known/wallet-agent-targets/wallet-infra-crossmint-privy-turnkey.json |
| LangGraph / CrewAI / AutoGen / OpenAI SDK + wallets | /.well-known/wallet-agent-targets/langgraph-crewai-openai-wallets.json |
| x402-native (ClawRouter / BlockRun / Zerion) | /.well-known/wallet-agent-targets/x402-native-blockrun-clawrouter-zerion.json |
Install (agents)
{
"mcpServers": {
"secondeye": {
"command": "npx",
"args": ["-y", "@secondeyes/mcp-unblock"]
}
}
}
Develop
cd <project-root>
npm install
npx wrangler pages deploy public --project-name second-eyes-ai
Secrets (never commit): copy .env.example → .env.local, then node scripts/push-coinbase-secrets.mjs. Required for transcribe/extract: OPENROUTER_API_KEY.
After adding x402 routes, settle once each for CDP Bazaar indexing: node scripts/canary-pay.mjs.
Publish MCP package
From repo root, tag mcp-vX.Y.Z (or run workflow manually). Uses npm Trusted Publishing (OIDC) — configure once on npmjs.com. See packages/secondeye-mcp/PUBLISH.md.
Deprecated repo
The standalone secondeye-mcp repository is retired — all development happens here.
Terminology normalization summary (issue #40)
| Before | After |
|---|---|
| Anthropomorphic route label | Canonical slug-style route label |
| Theatrical route wording | Technical route wording |
| Prepper/theatrical route-group wording | Specialist one-shot route-set wording |
| Legacy catalog wording | Service-catalog wording |
Frequently asked questions
What is Second Eyes Agent Workflow Services?
Workflow diagnostics, capability routing, and x402 settlement for MCP-compatible agents.
How do I install Second Eyes Agent Workflow Services?
It runs as a remote server. In Claude Code: claude mcp add --transport http second-eyes-agent-workflow-services 'https://secondeyesai.com/api/bar'. For other clients, paste the JSON configuration from this page into their MCP settings.
Does Second Eyes Agent Workflow Services need an API key?
Its registry entry lists no required key or secret. Some features may still need an account with the service it connects to.
Is Second Eyes Agent Workflow Services open source?
Its code is public on GitHub, but the repository does not declare a standard license.
Who maintains Second Eyes Agent Workflow Services?
It is published by This-Is-Hellgate. AI.tn lists it but does not maintain or endorse it.
From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.