MCP 401 Auth Fix | github PAT wiring | x402

Command

Environment

• SECOND_EYE_BASE_URL

  Second Eyes lounge base URL

• MCP_X402_WALLET_KEY

  EVM private key (0x…) for auto USDC payment on 402. SECURITY: MCP process can drain this wallet — use a dedicated low-balance payer.

• MCP_X402_MAX_SPEND_USD

  Per-call spending cap (default 0.50)

• MCP_X402_SESSION_MAX_USD

  Process lifetime spending cap (default 2.00)

• MCP_X402_ALLOW_SLUGS

  Comma-separated slugs allowed for auto-pay. Default (unset) or *: every zero-argument launch-priced survival/nano slug (each <= $0.05 USDC) auto-pays. transcribe-extract and doc-extract are excluded by default because they need a caller-supplied input the zero-arg tool cannot pass (call /api/bar/x402/transcribe and /api/bar/x402/extract directly); name them explicitly here to opt in. Set a comma list to RESTRICT. Safety is enforced by the per-call/session caps, not this list.