github-mcp 401? PAT wiring. Proof before pay. x402 USDC Base. 15 min free.
Copy the AI prompt to install this server into Claude Code, Cursor, or another agent β or use 1-click editor setup below.
π‘ Paste into ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows)
Open infrastructure for autonomous agents. secondeyesai.com
Second Eyes is a multi-rail payment and verification substrate for wallet-equipped agents and the runtimes that authorize their tools. Agents call in, pay via x402 (USDC on Base), AP2 mandate, or Stripe ACP, and get deterministic verdicts β no sessions required for the one-shot path.
| Surface | Location |
|---|---|
| Live API + site | / β Cloudflare Pages (wrangler pages deploy public) |
| MCP npm package | packages/secondeye-mcp β @secondeyes/mcp-unblock |
| Agent entry | GET https://secondeyesai.com/api/bar |
| Agent instructions | public/llms.txt β how to pay, service catalog, one-shot routes |
| Help-me JSON packet | public/.well-known/help-me.json β machine-readable distress entry route |
| Agent card | public/.well-known/agent-card.json |
| Crawler policy | public/robots.txt |
The MCP package is a thin stdio client that proxies to the substrate API. Same codebase, same repo, same product.
| Layer | Protocol | Role |
|---|---|---|
| Identity / Reputation | ERC-8004 | Open registry β anyone queryable |
| Payments | x402 (USDC / Base) | Default machine rail β open HTTP 402, no allowlist |
| Payments | AP2 + VDC mandates | Gates internal ephemeral spawn only |
| Payments | Stripe ACP | Human or low-trust agent checkout |
| Discovery | x402 Bazaar / CDP | Substrate endpoints registered publicly |
| Transport | A2A / MCP | Existing |
No login, no session header. Pay USDC on Base via x402 v2 (PAYMENT-REQUIRED β sign β PAYMENT-SIGNATURE). Deterministic verdicts β same answer on every retry.
| Door | Path | Price |
|---|---|---|
| help-me (canonical meta-tool β looping, schema mismatch, context pressure, crash, handoff failure, wallet/spend-policy, grounding risk, auth/tool/sandbox failure, payment uncertainty) | /api/bar/x402/help-me | $0.01 |
| AWS AgentCore one-shot map | /api/bar/x402/aws-agent-survival | $0.01 |
peril-router (legacy alias of help-me) | /api/bar/x402/peril-router | $0.01 |
| Schema repair | /api/bar/x402/schema-repair | $0.03 |
| Context pressure (alias: token-pressure) | /api/bar/x402/context-pressure | $0.03 |
| Payment confirmation check | /api/bar/x402/payment-confirmation-check | $0.01 |
| Specialist one-shot routes | /api/bar/x402/{slug} | $0.01β$0.05 |
| Transcribe (audio/video/PDF) + meaning | /api/bar/x402/transcribe | $0.05 |
| Doc extract (invoice/contract/PDF) | /api/bar/x402/extract | $0.05 |
| Bazaar index check | /api/bar/x402/index-check | $0.05 |
| x402 format doctor | /api/bar/x402/doctor | $0.25 |
Full agent-facing docs: /llms.txt. Index new routes: node scripts/canary-pay.mjs.
accepts[])Base (eip155:8453) is canonical and always accepts[0]. Polygon (eip155:137) and Solana are roadmap β do not sign for a planned rail. Live rail states: GET /api/bar β payment_activation.rail_states. See docs/multi-network-x402.md.
Per-stack JSON profiles β match your stack, read your active failure modes and observable trigger signals, then call the named Second Eyes route.
Index: public/.well-known/wallet-agent-targets/index.json
| Target | Profile |
|---|---|
| Coinbase AgentKit + CDP + x402 | /.well-known/wallet-agent-targets/coinbase-agentkit-cdp.json |
| AWS AgentCore Payments + Strands | /.well-known/wallet-agent-targets/agentcore-strands.json |
| MCP clients with spending wallets | /.well-known/wallet-agent-targets/mcp-spending-wallets.json |
| Crossmint / Privy / Turnkey signer infra | /.well-known/wallet-agent-targets/wallet-infra-crossmint-privy-turnkey.json |
| LangGraph / CrewAI / AutoGen / OpenAI SDK + wallets | /.well-known/wallet-agent-targets/langgraph-crewai-openai-wallets.json |
| x402-native (ClawRouter / BlockRun / Zerion) | /.well-known/wallet-agent-targets/x402-native-blockrun-clawrouter-zerion.json |
Secrets (never commit): copy .env.example β .env.local, then node scripts/push-coinbase-secrets.mjs. Required for transcribe/extract: OPENROUTER_API_KEY.
After adding x402 routes, settle once each for CDP Bazaar indexing: node scripts/canary-pay.mjs.
From repo root, tag mcp-vX.Y.Z (or run workflow manually). Uses npm Trusted Publishing (OIDC) β configure once on npmjs.com. See packages/secondeye-mcp/PUBLISH.md.
The standalone secondeye-mcp repository is retired β all development happens here.
| Before | After |
|---|---|
| Anthropomorphic route label | Canonical slug-style route label |
| Theatrical route wording | Technical route wording |
| Prepper/theatrical route-group wording | Specialist one-shot route-set wording |
| Legacy catalog wording | Service-catalog wording |
Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.
[](https://allmcps.com/mcp/mcp-401-auth-fix-github-pat-wiring-x402-2)<a href="https://allmcps.com/mcp/mcp-401-auth-fix-github-pat-wiring-x402-2"><img src="https://allmcps.com/api/badge/mcp-401-auth-fix-github-pat-wiring-x402-2?style=directory" alt="MCP 401 Auth Fix | github PAT wiring | x402 on AllMCPs" /></a>