Repository navigation
Releases: SecondedOracle/seconded-mcp-releases
Release list
SECONDED 0.4.4
SECONDED MCP 0.4.4
- Degen Check shows as available. The bundled product list now matches the live service. A quote or check still confirms current availability.
- Billing text is the same everywhere. Standard checks charge only when both models agree; a disagreement is signed and free. Degen Check costs $0.10 for a signed answer, including a disagreement.
- Clearer errors. Bad arguments to free tools return
invalid_inputwith no charge, before any wallet access. When the service is unavailable, agents now see the reason. - A failed payment no longer blocks the next check. Once nonpayment is independently certified on-chain, the client allows a new purchase.
proveandrecovernow have--helpand specific error reasons.
Assets are signed. Verify SHA-256SUMS with SHA-256SUMS.sig and the allowed_signers file in this repository before running a binary.
SECONDED 0.4.3
SECONDED MCP 0.4.3
- Degen Check improved: the client now verifies and recovers signed Degen answers, including stale historical results, on your machine.
- Clearer Token Check: the tool description now states its official-token identity and controls scope.
- 19 MCP tools. Existing checks keep their prices.
- Release catalogs and listings match the client's tool schemas.
Assets are signed. Verify SHA-256SUMS with SHA-256SUMS.sig and the allowed_signers file in this repository before running a binary.
SECONDED 0.4.2
SECONDED 0.4.2: hardening release
An audit-driven release. Existing checks, tools and prices are unchanged and there are no new products.
- Smoother wallet recovery after interrupted or delayed payments.
- Owner controls work on every platform, including machines without biometrics.
- More reliable installation, updated dependencies and stricter release checks.
- Plain-English explanations on every NOT VERIFIED answer, and clearer STOP labels for risky tokens.
- Address Screening's description now matches its coverage.
- Matching server improvements to payment handling are live alongside this release.
Verify your download
Every release asset is covered by SHA-256SUMS, signed with the SECONDED release key. Check the signature against
allowed_signers in this repository:
ssh-keygen -Y verify -f allowed_signers -I release@seconded -n seconded-release -s SHA-256SUMS.sig < SHA-256SUMS
sha256sum -c SHA-256SUMSSource, receipt verifier and documentation: https://github.com/SecondedOracle/seconded
We'd love your feedback: support@secondedoracle.xyz
SECONDED 0.4.1
SECONDED MCP client 0.4.1
The oracle for agents. Verify trades, tokens and messages before your agent acts.
SECONDED is the oracle for agents. Before your agent acts, it checks the real cost, the real contract and the real risk, read live and confirmed by two rival AIs, one from OpenAI and one from Anthropic. If they don't agree, you don't pay. Every answer comes with a signed receipt.
Release-only repository for seconded-mcp, the local stdio MCP client for SECONDED checks.
It holds no source code. Every file here was produced by ops/release/release.py stage from
the archived inputs of source commit b8cfd7d1375d4f3a65087410a4a600e081e715bc, with the selected release version,
public publisher identity and signatures. build-info.json records one SHA-256 for the complete
source/input archive and individual SHA-256 hashes for the fixed release templates; packaging
and staging use that snapshot. To reconstruct the full input set, recreate the archive from the
recorded source commit with ops/release/release.py and its INPUT_PATHS, or obtain the retained
private archive, then verify the archive digest and the template hashes.
Downloads
Assets are attached to the v0.4.1 release.
Base URL: https://github.com/SecondedOracle/seconded-mcp-releases/releases/download/v0.4.1/
| File | SHA-256 |
|---|---|
seconded-mcp_darwin_arm64 |
b10805aa816281907cc1ea24e2ce89a2c1237d959bce3571fdd731848cbc3a57 |
seconded-mcp_darwin_amd64 |
4459bd46829f82b8ad4db664099d11e806a509352928d875cbf37f729e0b87c2 |
seconded-mcp_linux_amd64 |
46b84613bb8e54db1f9510eb2eefbf3476053e7fb35b5b1b45048d2ff8d1b02a |
seconded-mcp_linux_arm64 |
e7fdb3b4c1dccd790af8aa2e84758bce840373a27c66204a00cfa7a7cd2dbe8f |
seconded-mcp_windows_amd64.exe |
714d8dbf3f0c71710fb5ad38534d069e39a3c54495f158268e6bf064925c50ec |
seconded-mcp_0.4.1.mcpb |
199bbbe6de0e4e79c9fbf701f413bfb06af9b3462fca79cfe1c647a3fe1c7806 |
build-info.json |
984e5dbdb321486d2c859944491fcdbc3f89e7dc1fbba4384ae1f76445021638 |
SHA-256SUMS lists the same hashes. SHA-256SUMS.sig is the publisher's SSH
signature over that file. Obtain the publisher key through SECONDED's independently
trusted release announcement channel and confirm its fingerprint there. Create your
own allowed_signers with release@seconded namespaces="seconded-release" ssh-ed25519 KEY_BLOB.
Never learn the trusted key from this download or a signer file delivered alongside it.
The signed manifest's version comment must match the release you selected.
ssh-keygen -Y verify -f allowed_signers -I release@seconded -n seconded-release \
-s SHA-256SUMS.sig < SHA-256SUMS
shasum -a 256 -c SHA-256SUMS # macOS
sha256sum -c SHA-256SUMS # Linux
Get-FileHash -Algorithm SHA256 .\seconded-mcp_windows_amd64.exe # WindowsThe .mcpb bundle hash differs from each binary hash. Normal agent-compatible setup verifies
signed binary checksums automatically; no hash is pasted. Keep SHA-256SUMS and
SHA-256SUMS.sig beside raw binaries. MCPB bundles carry signed sidecars in server/.
System OpenSSH ssh-keygen with -Y verify support is required at setup.
Install with one prompt
The same prompt is available in INSTALL_PROMPT.md.
This build has no Apple Developer ID signature or notarization. SSH-signed checksums
authenticate the release; they do not bypass native platform security prompts.
Pick your platform's binary URL and the signed checksum URLs above, then paste this into Claude Code,
Cursor, Codex or Hermes:
Install the SECONDED stdio MCP client for me.
Release binary URL for my OS/architecture: <RELEASE_BINARY_HTTPS_URL>
Signed checksums URL: https://github.com/SecondedOracle/seconded-mcp-releases/releases/download/v0.4.1/SHA-256SUMS
Signature URL: https://github.com/SecondedOracle/seconded-mcp-releases/releases/download/v0.4.1/SHA-256SUMS.sig
Independently trusted publisher SSH Ed25519 public key: <RELEASE_PUBLIC_KEY>
Version: 0.4.1
Host: <claude-desktop|claude-code|cursor|codex|gemini|generic> (use generic for Hermes)
Network I will pay on: base (Base mainnet) unless I name arc or robinhood. Use a testnet (base_sepolia, arc_testnet or robinhood_testnet) only if I ask for one.
Optional isolated profile: <ABSOLUTE_PRIVATE_PROFILE_DIRECTORY>
1. Confirm my OS and architecture and download that binary over HTTPS into a
new versioned directory owned by me. Never overwrite an installed binary.
Do not execute a downloaded installer script or pipe a download into a shell.
2. Download SHA-256SUMS and SHA-256SUMS.sig beside the binary. Verify the SSH
signature with the independently trusted publisher key, identity
release@seconded and namespace seconded-release; then compare the binary's
computed SHA-256 to its platform entry. Do this automatically, without asking
me to copy the digest. Stop on missing metadata, unresolved placeholders,
bad signatures or mismatches; do not execute unverified bytes. Never learn
the trusted key from the same unverified download. System OpenSSH ssh-keygen
with -Y verify support is required (including on Windows).
Use the publisher key supplied above from the independently
trusted announcement channel. Check the signed version comment matches my
selected release; a valid old signature alone does not prevent rollback.
This is an unsigned platform build: no Apple Developer ID or notarization.
If macOS blocks it, stop for the owner to review the release and Privacy &
Security approval; never remove quarantine or disable Gatekeeper.
3. Make the verified binary executable where needed. Add this MCP to my user-level
host settings using host-snippet --host <host> from its absolute path.
For an isolated profile, prefix every command with
--profile <ABSOLUTE_PRIVATE_PROFILE_DIRECTORY> before its command name.
Omit the optional profile when not requested; never pass a placeholder.
Preserve existing host settings and use the emitted host-specific configuration.
For Claude Code, run the printed claude mcp add --scope user seconded -- ...
command; do not edit ~/.claude.json. MCPB users use the bundle manifest without
also adding a duplicate raw-binary snippet.
4. Run setup --host <host> yourself with the same verified binary and profile.
Default setup is non-interactive and needs no terminal, yes or OS password.
New defaults: $2.50 max per check, $25 a day; chat can only tighten or freeze.
Hourly and outstanding limits are unset; value gate is off. Dedupe, loop brake
and alerts stay on, with 30 signed checks per rolling 60 seconds.
It prefers the OS credential store and verifies signed release metadata automatically.
If a wallet already exists, report its stored policy; setup never changes it.
After installation, change limits or safety switches when I ask in ordinary
language, using seconded_get_limits and seconded_set_limits. For example,
"set my daily limit to $20" means daily_usd=20; "remove my hourly limit"
means hourly_usd=null. "Turn on the value gate" means value_gate=true.
With it off, max_price_usd is optional and the per-check limit still applies.
Chat can always tighten limits, freeze payments, or enable safety switches.
Chat may only TIGHTEN limits, FREEZE payments and enable safety switches.
Raising any limit, removing a limit, unfreezing, weakening safety switches,
and switching wallets are terminal-only owner actions, even below $25/day.
The agent must show the owner the exact command returned by the release,
including its actual profile and patch, and must never run it or enter the
wallet-bound confirmation. Ask the owner to run the command in their terminal.
New wallets default to $25/day; chat cannot loosen that policy.
On upgrade, a legacy nil or above-$25/day policy freezes pending owner review.
Keep the wallet, history and existing switches; report the migration notice.
Report each policy-change notice with its old and new values and time.
Changes are also recorded locally in policy-audit.json, without private keys.
The $2.50 compiled maximum per authorization always applies, including when
a per-check policy limit is higher or removed.
If the OS key store is unavailable, setup automatically uses private wallet.key.
Report its location and ask me to back it up; SECONDED does not encrypt the file.
Do not ask me for a password or seed, or automate owner authentication.
Restart the host after adding the MCP: fully quit Claude Desktop (including
its tray/menu-bar process) or Cursor and reopen; restart Claude Code, Codex
or Hermes sessions. If the host starts before setup, its first tool call can
create the safe wallet and return the funding address without running a check.
5. Run self-check on the same binary and profile. Verify fingerprint_matches and
live_api_configured, then return the public wallet address and the dedicated-wallet notice below.
Setup creates its own wallet; recovery can select a detected earlier SECONDED wallet. Do not initiate
a paid check or fund the wallet.
If li...
Contributors
Assets 11
SECONDED 0.4.0
SECONDED MCP client 0.4.0
The oracle for agents. Verify trades, tokens and messages before your agent acts.
SECONDED is the oracle for agents. Before your agent acts, it checks the real cost, the real contract and the real risk, read live and confirmed by two rival AIs, one from OpenAI and one from Anthropic. If they don't agree, you don't pay. Every answer comes with a signed receipt.
Release-only repository for seconded-mcp, the local stdio MCP client for SECONDED checks.
It holds no source code. Every file here was produced by ops/release/release.py stage from
the archived inputs of source commit d163e143dba442df852f452a0ce32612da6684ad, with the selected release version,
public publisher identity and signatures. build-info.json records one SHA-256 for the complete
source/input archive and individual SHA-256 hashes for the fixed release templates; packaging
and staging use that snapshot. To reconstruct the full input set, recreate the archive from the
recorded source commit with ops/release/release.py and its INPUT_PATHS, or obtain the retained
private archive, then verify the archive digest and the template hashes.
Downloads
Assets are attached to the v0.4.0 release.
Base URL: https://github.com/SecondedOracle/seconded-mcp-releases/releases/download/v0.4.0/
| File | SHA-256 |
|---|---|
seconded-mcp_darwin_arm64 |
eb6d3a843537e80dac9b8be9f730ee977ac4894797711ab8a07f3cd0adaa2ca3 |
seconded-mcp_darwin_amd64 |
59203b26e3519f7880f17d3cdf288a12e82a041e33c15d21369daffce2f55e93 |
seconded-mcp_linux_amd64 |
8d9fe1fda1e67eb663d8efe8880821d0b1245b37d68d40c0f21b1154ae6ed738 |
seconded-mcp_linux_arm64 |
8b0a7e87d5941264e8808933db79b7d74d7222d46454bc5826a28e08fa85f253 |
seconded-mcp_windows_amd64.exe |
e1275f3bc15603ce5b3e21ae17a8abfd391babc90ab354780cfa1d39152e3c8f |
seconded-mcp_0.4.0.mcpb |
2ec637f5a1a39e899f830ba8c9867403d6cd558413a57f931162d1cfb9e2b839 |
build-info.json |
ab4e2a817b85e706b7ad42fa53074dd983289f673dce100f376f2cf771860cb1 |
SHA-256SUMS lists the same hashes. SHA-256SUMS.sig is the publisher's SSH
signature over that file. Obtain the publisher key through SECONDED's independently
trusted release announcement channel and confirm its fingerprint there. Create your
own allowed_signers with release@seconded namespaces="seconded-release" ssh-ed25519 KEY_BLOB.
Never learn the trusted key from this download or a signer file delivered alongside it.
The signed manifest's version comment must match the release you selected.
ssh-keygen -Y verify -f allowed_signers -I release@seconded -n seconded-release \
-s SHA-256SUMS.sig < SHA-256SUMS
shasum -a 256 -c SHA-256SUMS # macOS
sha256sum -c SHA-256SUMS # Linux
Get-FileHash -Algorithm SHA256 .\seconded-mcp_windows_amd64.exe # WindowsThe .mcpb bundle hash differs from each binary hash. Normal agent-compatible setup verifies
signed binary checksums automatically; no hash is pasted. Keep SHA-256SUMS and
SHA-256SUMS.sig beside raw binaries. MCPB bundles carry signed sidecars in server/.
System OpenSSH ssh-keygen with -Y verify support is required at setup.
Install with one prompt
The same prompt is available in INSTALL_PROMPT.md.
This build has no Apple Developer ID signature or notarization. SSH-signed checksums
authenticate the release; they do not bypass native platform security prompts.
Pick your platform's binary URL and the signed checksum URLs above, then paste this into Claude Code,
Cursor, Codex or Hermes:
Install the SECONDED stdio MCP client for me.
Release binary URL for my OS/architecture: <RELEASE_BINARY_HTTPS_URL>
Signed checksums URL: https://github.com/SecondedOracle/seconded-mcp-releases/releases/download/v0.4.0/SHA-256SUMS
Signature URL: https://github.com/SecondedOracle/seconded-mcp-releases/releases/download/v0.4.0/SHA-256SUMS.sig
Independently trusted publisher SSH Ed25519 public key: <RELEASE_PUBLIC_KEY>
Version: 0.4.0
Host: <claude-desktop|claude-code|cursor|codex|gemini|generic> (use generic for Hermes)
Network I will pay on: base (Base mainnet) unless I name arc or robinhood. Use a testnet (base_sepolia, arc_testnet or robinhood_testnet) only if I ask for one.
Optional isolated profile: <ABSOLUTE_PRIVATE_PROFILE_DIRECTORY>
1. Confirm my OS and architecture and download that binary over HTTPS into a
new versioned directory owned by me. Never overwrite an installed binary.
Do not execute a downloaded installer script or pipe a download into a shell.
2. Download SHA-256SUMS and SHA-256SUMS.sig beside the binary. Verify the SSH
signature with the independently trusted publisher key, identity
release@seconded and namespace seconded-release; then compare the binary's
computed SHA-256 to its platform entry. Do this automatically, without asking
me to copy the digest. Stop on missing metadata, unresolved placeholders,
bad signatures or mismatches; do not execute unverified bytes. Never learn
the trusted key from the same unverified download. System OpenSSH ssh-keygen
with -Y verify support is required (including on Windows).
Use the publisher key supplied above from the independently
trusted announcement channel. Check the signed version comment matches my
selected release; a valid old signature alone does not prevent rollback.
This is an unsigned platform build: no Apple Developer ID or notarization.
If macOS blocks it, stop for the owner to review the release and Privacy &
Security approval; never remove quarantine or disable Gatekeeper.
3. Make the verified binary executable where needed. Add this MCP to my user-level
host settings using host-snippet --host <host> from its absolute path.
For an isolated profile, prefix every command with
--profile <ABSOLUTE_PRIVATE_PROFILE_DIRECTORY> before its command name.
Omit the optional profile when not requested; never pass a placeholder.
Preserve existing host settings and use the emitted host-specific configuration.
For Claude Code, run the printed claude mcp add --scope user seconded -- ...
command; do not edit ~/.claude.json. MCPB users use the bundle manifest without
also adding a duplicate raw-binary snippet.
4. Run setup --host <host> yourself with the same verified binary and profile.
Default setup is non-interactive and needs no terminal, yes or OS password.
New defaults: $2.50 max per check, $25 a day; chat can only tighten or freeze.
Hourly and outstanding limits are unset; value gate is off. Dedupe, loop brake
and alerts stay on, with 30 signed checks per rolling 60 seconds.
It prefers the OS credential store and verifies signed release metadata automatically.
If a wallet already exists, report its stored policy; setup never changes it.
After installation, change limits or safety switches when I ask in ordinary
language, using seconded_get_limits and seconded_set_limits. For example,
"set my daily limit to $20" means daily_usd=20; "remove my hourly limit"
means hourly_usd=null. "Turn on the value gate" means value_gate=true.
With it off, max_price_usd is optional and the per-check limit still applies.
Chat can always tighten limits, freeze payments, or enable safety switches.
Chat may only TIGHTEN limits, FREEZE payments and enable safety switches.
Raising any limit, removing a limit, unfreezing, weakening safety switches,
and switching wallets are terminal-only owner actions, even below $25/day.
The agent must show the owner the exact command returned by the release,
including its actual profile and patch, and must never run it or enter the
wallet-bound confirmation. Ask the owner to run the command in their terminal.
New wallets default to $25/day; chat cannot loosen that policy.
On upgrade, a legacy nil or above-$25/day policy freezes pending owner review.
Keep the wallet, history and existing switches; report the migration notice.
Report each policy-change notice with its old and new values and time.
Changes are also recorded locally in policy-audit.json, without private keys.
The $2.50 compiled maximum per authorization always applies, including when
a per-check policy limit is higher or removed.
If the OS key store is unavailable, setup automatically uses private wallet.key.
Report its location and ask me to back it up; SECONDED does not encrypt the file.
Do not ask me for a password or seed, or automate owner authentication.
Restart the host after adding the MCP: fully quit Claude Desktop (including
its tray/menu-bar process) or Cursor and reopen; restart Claude Code, Codex
or Hermes sessions. If the host starts before setup, its first tool call can
create the safe wallet and return the funding address without running a check.
5. Run self-check on the same binary and profile. Verify fingerprint_matches and
live_api_configured, then return the public wallet address and the dedicated-wallet notice below.
Setup creates its own wallet; recovery can select a detected earlier SECONDED wallet. Do not initiate
a paid check or fund the wallet.
If li...
Contributors
Assets 11
SECONDED 0.3.3
SECONDED MCP client 0.3.3
The oracle for agents. Verify trades, tokens and messages before your agent acts.
SECONDED is the oracle for agents. Before your agent acts, it checks the real cost, the real contract and the real risk, read live and confirmed by two rival AIs, one from OpenAI and one from Anthropic. If they don't agree, you don't pay. Every answer comes with a signed receipt.
Release-only repository for seconded-mcp, the local stdio MCP client for SECONDED checks.
It holds no source code. Every file here was produced by ops/release/release.py stage from
the archived inputs of source commit 48f5e64d204f5063efc81f4c54a7965043d8ba62, with the selected release version,
public publisher identity and signatures. build-info.json records one SHA-256 for the complete
source/input archive and individual SHA-256 hashes for the fixed release templates; packaging
and staging use that snapshot. To reconstruct the full input set, recreate the archive from the
recorded source commit with ops/release/release.py and its INPUT_PATHS, or obtain the retained
private archive, then verify the archive digest and the template hashes.
Downloads
Assets are attached to the v0.3.3 release.
Base URL: https://github.com/SecondedOracle/seconded-mcp-releases/releases/download/v0.3.3/
| File | SHA-256 |
|---|---|
seconded-mcp_darwin_arm64 |
13b6a315592ebe5d24380f6ab544be8b2d9f925f0341b1623ddc1ec161f045cb |
seconded-mcp_darwin_amd64 |
1c7471b2386a5454f55fa988492a136e41a3cef6d3d559a17b28b5277a75959d |
seconded-mcp_linux_amd64 |
e0a85c76d146f4cf64d3046c14bc5cf3f677f90ff0013332e9f33a49d3fb1e3d |
seconded-mcp_linux_arm64 |
6dbc01d65ede047a77345c1d30293ad57d25d26b3894ea1fe9ae84414d70dead |
seconded-mcp_windows_amd64.exe |
3b079d4ff7a669eba2197704cc51d25f03177e64dc8908ee4d25131d2d8c0175 |
seconded-mcp_0.3.3.mcpb |
1ee66e01c210da890fa5d621de7e207b1e884833d1f099ddff11c185624c5c52 |
build-info.json |
442f6d320537f244fd2c14d7df0263a7769e44170db9796024e84e95ef9a246e |
SHA-256SUMS lists the same hashes. SHA-256SUMS.sig is the publisher's SSH
signature over that file. Obtain the publisher key through SECONDED's independently
trusted release announcement channel and confirm its fingerprint there. Create your
own allowed_signers with release@seconded namespaces="seconded-release" ssh-ed25519 KEY_BLOB.
Never learn the trusted key from this download or a signer file delivered alongside it.
The signed manifest's version comment must match the release you selected.
ssh-keygen -Y verify -f allowed_signers -I release@seconded -n seconded-release \
-s SHA-256SUMS.sig < SHA-256SUMS
shasum -a 256 -c SHA-256SUMS # macOS
sha256sum -c SHA-256SUMS # Linux
Get-FileHash -Algorithm SHA256 .\seconded-mcp_windows_amd64.exe # WindowsThe .mcpb bundle hash differs from each binary hash. Normal agent-compatible setup verifies
signed binary checksums automatically; no hash is pasted. Keep SHA-256SUMS and
SHA-256SUMS.sig beside raw binaries. MCPB bundles carry signed sidecars in server/.
System OpenSSH ssh-keygen with -Y verify support is required at setup.
Install with one prompt
The same prompt is available in INSTALL_PROMPT.md.
This build has no Apple Developer ID signature or notarization. SSH-signed checksums
authenticate the release; they do not bypass native platform security prompts.
Pick your platform's binary URL and the signed checksum URLs above, then paste this into Claude Code,
Cursor, Codex or Hermes:
Install the SECONDED stdio MCP client for me.
Release binary URL for my OS/architecture: <RELEASE_BINARY_HTTPS_URL>
Signed checksums URL: https://github.com/SecondedOracle/seconded-mcp-releases/releases/download/v0.3.3/SHA-256SUMS
Signature URL: https://github.com/SecondedOracle/seconded-mcp-releases/releases/download/v0.3.3/SHA-256SUMS.sig
Independently trusted publisher SSH Ed25519 public key: <RELEASE_PUBLIC_KEY>
Version: 0.3.3
Host: <claude-desktop|claude-code|cursor|codex|generic> (use generic for Hermes)
Network I will pay on: base (Base mainnet) unless I name arc or robinhood. Use a testnet (base_sepolia, arc_testnet or robinhood_testnet) only if I ask for one.
Optional isolated profile: <ABSOLUTE_PRIVATE_PROFILE_DIRECTORY>
1. Confirm my OS and architecture and download that binary over HTTPS into a
new versioned directory owned by me. Never overwrite an installed binary.
Do not execute a downloaded installer script or pipe a download into a shell.
2. Download SHA-256SUMS and SHA-256SUMS.sig beside the binary. Verify the SSH
signature with the independently trusted publisher key, identity
release@seconded and namespace seconded-release; then compare the binary's
computed SHA-256 to its platform entry. Do this automatically, without asking
me to copy the digest. Stop on missing metadata, unresolved placeholders,
bad signatures or mismatches; do not execute unverified bytes. Never learn
the trusted key from the same unverified download. System OpenSSH ssh-keygen
with -Y verify support is required (including on Windows).
Use the publisher key supplied above from the independently
trusted announcement channel. Check the signed version comment matches my
selected release; a valid old signature alone does not prevent rollback.
This is an unsigned platform build: no Apple Developer ID or notarization.
If macOS blocks it, stop for the owner to review the release and Privacy &
Security approval; never remove quarantine or disable Gatekeeper.
3. Make the verified binary executable where needed. Add this MCP to my user-level
host settings using host-snippet --host <host> from its absolute path.
For an isolated profile, prefix every command with
--profile <ABSOLUTE_PRIVATE_PROFILE_DIRECTORY> before its command name.
Omit the optional profile when not requested; never pass a placeholder.
Preserve existing host settings and use the emitted host-specific configuration.
For Claude Code, run the printed claude mcp add --scope user seconded -- ...
command; do not edit ~/.claude.json. MCPB users use the bundle manifest without
also adding a duplicate raw-binary snippet.
4. Run setup --host <host> yourself with the same verified binary and profile.
Default setup is non-interactive and needs no terminal, yes or OS password.
New defaults: $2.50 max per check, $25 a day; chat can only tighten or freeze.
Hourly and outstanding limits are unset; value gate is off. Dedupe, loop brake
and alerts stay on, with 30 signed checks per rolling 60 seconds.
It prefers the OS credential store and verifies signed release metadata automatically.
If a wallet already exists, report its stored policy; setup never changes it.
After installation, change limits or safety switches when I ask in ordinary
language, using seconded_get_limits and seconded_set_limits. For example,
"set my daily limit to $20" means daily_usd=20; "remove my hourly limit"
means hourly_usd=null. "Turn on the value gate" means value_gate=true.
With it off, max_price_usd is optional and the per-check limit still applies.
Chat can always tighten limits, freeze payments, or enable safety switches.
Chat may only TIGHTEN limits, FREEZE payments and enable safety switches.
Raising any limit, removing a limit, unfreezing, weakening safety switches,
and switching wallets are terminal-only owner actions, even below $25/day.
The agent must show the owner the exact command returned by the release,
including its actual profile and patch, and must never run it or enter the
wallet-bound confirmation. Ask the owner to run the command in their terminal.
New wallets default to $25/day; chat cannot loosen that policy.
On upgrade, a legacy nil or above-$25/day policy freezes pending owner review.
Keep the wallet, history and existing switches; report the migration notice.
Report each policy-change notice with its old and new values and time.
Changes are also recorded locally in policy-audit.json, without private keys.
The $2.50 compiled maximum per authorization always applies, including when
a per-check policy limit is higher or removed.
If the OS key store is unavailable, setup automatically uses private wallet.key.
Report its location and ask me to back it up; SECONDED does not encrypt the file.
Do not ask me for a password or seed, or automate owner authentication.
Restart the host after adding the MCP: fully quit Claude Desktop (including
its tray/menu-bar process) or Cursor and reopen; restart Claude Code, Codex
or Hermes sessions. If the host starts before setup, its first tool call can
create the safe wallet and return the funding address without running a check.
5. Run self-check on the same binary and profile. Verify fingerprint_matches and
live_api_configured, then return the public wallet address and the dedicated-wallet notice below.
Setup creates its own wallet; recovery can select a detected earlier SECONDED wallet. Do not initiate
a paid check or fund the wallet.
If live_api_...
Contributors
Assets 11
SECONDED 0.3.2
SECONDED MCP client 0.3.2
The oracle for agents. Verify trades, tokens and messages before your agent acts.
SECONDED is the oracle for agents. Before your agent acts, it checks the real cost, the real contract and the real risk, read live and confirmed by two rival AIs, one from OpenAI and one from Anthropic. If they don't agree, you don't pay. Every answer comes with a signed receipt.
Release-only repository for seconded-mcp, the local stdio MCP client for SECONDED checks.
It holds no source code. Every file here was produced by ops/release/release.py stage from
the archived inputs of source commit dd025067bbe30f102d79742cfd7f44c7337c0047, with the selected release version,
public publisher identity and signatures. build-info.json records one SHA-256 for the complete
source/input archive and individual SHA-256 hashes for the fixed release templates; packaging
and staging use that snapshot. To reconstruct the full input set, recreate the archive from the
recorded source commit with ops/release/release.py and its INPUT_PATHS, or obtain the retained
private archive, then verify the archive digest and the template hashes.
Downloads
Assets are attached to the v0.3.2 release.
Base URL: https://github.com/SecondedOracle/seconded-mcp-releases/releases/download/v0.3.2/
| File | SHA-256 |
|---|---|
seconded-mcp_darwin_arm64 |
0e1d18c4812814c5d94f2152cdd934823bf1e71567f8bb4506721a00d04ef6cc |
seconded-mcp_darwin_amd64 |
e78a4a4959a7664605e0a0b876c2bc9f0e7c470bf2a6af08d43296f227d8e9ba |
seconded-mcp_linux_amd64 |
fe0f810d32200d83daf0356226b5e4472fb2ef05b5664a9f2c985775bf1f7b5a |
seconded-mcp_linux_arm64 |
61677bff512d66f24c527084fa6586de44e132e9e81c915ab31c57d75d465618 |
seconded-mcp_windows_amd64.exe |
63fdd69a4919f9495f5e3efd9952583c1571107f70501939f377c1e6a5f504a4 |
seconded-mcp_0.3.2.mcpb |
ca722fde6f1c495e631a86e0131d53a5427feb84f07168954f16790471ad4e7f |
build-info.json |
88b61e8821b92709eeb19fb5f6b726fa95837c33b1ab7f3ad96f07622c719f30 |
SHA-256SUMS lists the same hashes. SHA-256SUMS.sig is the publisher's SSH
signature over that file. Obtain the publisher key through SECONDED's independently
trusted release announcement channel and confirm its fingerprint there. Create your
own allowed_signers with release@seconded namespaces="seconded-release" ssh-ed25519 KEY_BLOB.
Never learn the trusted key from this download or a signer file delivered alongside it.
The signed manifest's version comment must match the release you selected.
ssh-keygen -Y verify -f allowed_signers -I release@seconded -n seconded-release \
-s SHA-256SUMS.sig < SHA-256SUMS
shasum -a 256 -c SHA-256SUMS # macOS
sha256sum -c SHA-256SUMS # Linux
Get-FileHash -Algorithm SHA256 .\seconded-mcp_windows_amd64.exe # WindowsThe .mcpb bundle hash differs from each binary hash. Normal agent-compatible setup verifies
signed binary checksums automatically; no hash is pasted. Keep SHA-256SUMS and
SHA-256SUMS.sig beside raw binaries. MCPB bundles carry signed sidecars in server/.
System OpenSSH ssh-keygen with -Y verify support is required at setup.
Install with one prompt
The same prompt is available in INSTALL_PROMPT.md.
This build has no Apple Developer ID signature or notarization. SSH-signed checksums
authenticate the release; they do not bypass native platform security prompts.
Pick your platform's binary URL and the signed checksum URLs above, then paste this into Claude Code,
Cursor, Codex or Hermes:
Install the SECONDED stdio MCP client for me.
Release binary URL for my OS/architecture: <RELEASE_BINARY_HTTPS_URL>
Signed checksums URL: https://github.com/SecondedOracle/seconded-mcp-releases/releases/download/v0.3.2/SHA-256SUMS
Signature URL: https://github.com/SecondedOracle/seconded-mcp-releases/releases/download/v0.3.2/SHA-256SUMS.sig
Independently trusted publisher SSH Ed25519 public key: <RELEASE_PUBLIC_KEY>
Version: 0.3.2
Host: <claude-desktop|claude-code|cursor|codex|generic> (use generic for Hermes)
Network I will pay on: base (Base mainnet) unless I name arc or robinhood. Use a testnet (base_sepolia, arc_testnet or robinhood_testnet) only if I ask for one.
Optional isolated profile: <ABSOLUTE_PRIVATE_PROFILE_DIRECTORY>
1. Confirm my OS and architecture and download that binary over HTTPS into a
new versioned directory owned by me. Never overwrite an installed binary.
Do not execute a downloaded installer script or pipe a download into a shell.
2. Download SHA-256SUMS and SHA-256SUMS.sig beside the binary. Verify the SSH
signature with the independently trusted publisher key, identity
release@seconded and namespace seconded-release; then compare the binary's
computed SHA-256 to its platform entry. Do this automatically, without asking
me to copy the digest. Stop on missing metadata, unresolved placeholders,
bad signatures or mismatches; do not execute unverified bytes. Never learn
the trusted key from the same unverified download. System OpenSSH ssh-keygen
with -Y verify support is required (including on Windows).
Use the publisher key supplied above from the independently
trusted announcement channel. Check the signed version comment matches my
selected release; a valid old signature alone does not prevent rollback.
This is an unsigned platform build: no Apple Developer ID or notarization.
If macOS blocks it, stop for the owner to review the release and Privacy &
Security approval; never remove quarantine or disable Gatekeeper.
3. Make the verified binary executable where needed. Add this MCP to my user-level
host settings using host-snippet --host <host> from its absolute path.
For an isolated profile, prefix every command with
--profile <ABSOLUTE_PRIVATE_PROFILE_DIRECTORY> before its command name.
Omit the optional profile when not requested; never pass a placeholder.
Preserve existing host settings and use the emitted host-specific configuration.
For Claude Code, run the printed claude mcp add --scope user seconded -- ...
command; do not edit ~/.claude.json. MCPB users use the bundle manifest without
also adding a duplicate raw-binary snippet.
4. Run setup --host <host> yourself with the same verified binary and profile.
Default setup is non-interactive and needs no terminal, yes or OS password.
New defaults: $2.50 max per check, $25 a day; chat can only tighten or freeze.
Hourly and outstanding limits are unset; value gate is off. Dedupe, loop brake
and alerts stay on, with 30 signed checks per rolling 60 seconds.
It prefers the OS credential store and verifies signed release metadata automatically.
If a wallet already exists, report its stored policy; setup never changes it.
After installation, change limits or safety switches when I ask in ordinary
language, using seconded_get_limits and seconded_set_limits. For example,
"set my daily limit to $20" means daily_usd=20; "remove my hourly limit"
means hourly_usd=null. "Turn on the value gate" means value_gate=true.
With it off, max_price_usd is optional and the per-check limit still applies.
Chat can always tighten limits, freeze payments, or enable safety switches.
Chat may only TIGHTEN limits, FREEZE payments and enable safety switches.
Raising any limit, removing a limit, unfreezing, weakening safety switches,
and switching wallets are terminal-only owner actions, even below $25/day.
The agent must show the owner the exact command returned by the release,
including its actual profile and patch, and must never run it or enter the
wallet-bound confirmation. Ask the owner to run the command in their terminal.
New wallets default to $25/day; chat cannot loosen that policy.
On upgrade, a legacy nil or above-$25/day policy freezes pending owner review.
Keep the wallet, history and existing switches; report the migration notice.
Report each policy-change notice with its old and new values and time.
Changes are also recorded locally in policy-audit.json, without private keys.
The $2.50 compiled maximum per authorization always applies, including when
a per-check policy limit is higher or removed.
If the OS key store is unavailable, setup automatically uses private wallet.key.
Report its location and ask me to back it up; SECONDED does not encrypt the file.
Do not ask me for a password or seed, or automate owner authentication.
Restart the host after adding the MCP: fully quit Claude Desktop (including
its tray/menu-bar process) or Cursor and reopen; restart Claude Code, Codex
or Hermes sessions. If the host starts before setup, its first tool call can
create the safe wallet and return the funding address without running a check.
5. Run self-check on the same binary and profile. Verify fingerprint_matches and
live_api_configured, then return the public wallet address and the dedicated-wallet notice below.
Setup creates its own wallet; recovery can select a detected earlier SECONDED wallet. Do not initiate
a paid check or fund the wallet.
If live_api_...
Contributors
Assets 11
SECONDED 0.3.0
SECONDED 0.3.0
SECONDED is the oracle for agents: a local stdio MCP client that lets your agent buy an
independent check — of a trade, a token, a stock token, an agent registration or a suspicious
message — before it acts. Each answer is checked by two rival AIs, one from OpenAI and one from
Anthropic, and comes with a signed receipt. Billing is settle-on-agreement.
This is the first public release. It runs on macOS (arm64/amd64), Linux (amd64/arm64) and
Windows (amd64), as a raw binary or as an MCPB desktop-extension bundle.
The five checks
| Check | Tool | Price (small / medium / large) |
|---|---|---|
| Trade Check | seconded_trade_check |
$0.25 / $1.50 / not sold |
| Stock Token Check | seconded_stock_token_check |
$0.25 / not sold / not sold |
| Token Check | seconded_token_check |
$0.25 / not sold / not sold |
| Agent Registry Check | seconded_agent_registry_check |
$0.25 / not sold / not sold |
| Scam Check | seconded_scam_check |
$0.25 / $1.50 / $2.50 |
Size tiers are canonical JSON input bytes: small ≤ 8,192, medium ≤ 65,536, large ≤ 131,072.
An input above a product's largest sold tier is refused before any payment is signed.
Listing products (seconded_products) and price quotes (seconded_quote) are free.
Hidden Prompt, Owner Instruction and Code Review checks are still in testing: they cannot be
quoted or purchased and have no MCP tools in this release. New in 0.3.0, Stock Token Check
answers can include optional signed parity and market_status facts at the unchanged $0.25
price.
Payment networks
Checks pay per call with x402 (EIP-3009 TransferWithAuthorization, scheme exact) in the
selected network's stablecoin:
network value |
Chain | Asset |
|---|---|---|
omitted or base |
Base mainnet (eip155:8453) |
USDC |
arc |
Arc mainnet (eip155:5042) |
USDC |
robinhood |
Robinhood Chain mainnet (eip155:4663) |
USDG (Global Dollar) |
base_sepolia |
Base Sepolia testnet (eip155:84532) |
testnet USDC |
arc_testnet |
Arc testnet (eip155:5042002) |
testnet USDC |
robinhood_testnet |
Robinhood Chain testnet (eip155:46630) |
testnet USDG |
A check that names no network pays USDC on Base mainnet. Every other network, including each
testnet, is used only when a check explicitly names it. Robinhood Chain never takes USDC.
Fund the dedicated check wallet only with what checks need.
Base mainnet and Base Sepolia funding normally becomes usable after about a minute: the client
uses state 30 blocks behind the lower of two independent readers' latest heads, or their agreed
finalized block when newer. Both readers must agree on the block, token identity and balance, and
a valid finalized anchor is still required. The wallet labels this recent_agreement; it is not a
claim of OP-Stack safe or L1 finality and can still reorganize. Final payment certification,
reservation release and spending-limit time continue to require finalized evidence. Stale or
unavailable readers, disagreement, or excessive finality lag block checks instead of guessing.
Spending limits
- A compiled cap limits every payment authorization to $2.50 — it cannot be raised by
any setting, flag or API reply. - Quick setup applies: $2.50 max per check, $25 per day, no hourly or outstanding limit,
value gate off; dedupe (300-second reuse window), loop brake (at most 30 signed checks per
rolling 60 seconds) and alerts (at 50%, 80% and 100% of each configured budget) on. - Your agent can always tighten limits, freeze payments or enable safety switches in chat.
Loosening through chat is bounded: the daily limit can be raised to at most $100, and chat can
never remove the daily limit, disable dedupe or the loop brake, or unfreeze payments. Those
changes require running the exactseconded-mcp limits --human --patchcommand the tool
returns in your own terminal and typing the wallet address's last 6 characters (single-use,
expires in two minutes).
New: signed upgrade path
0.3.0 introduces signed wallet re-enrollment. A replacement binary adopts your existing wallet,
limits and ledger only when its bytes match a release manifest signed by the compiled publisher
key, the signed version header exactly matches its running version, and its version is strictly
newer than the enrolled one. Tampered, unsigned, same-version or older binaries are refused with
fingerprint_mismatch. Enrollment commits atomically, so an interrupted upgrade leaves either
the old or the new complete enrollment, never a broken one.
Rollback is explicit and owner-run: keep the complete older signed release, run its rollback
command in your own terminal with the same profile, and type the wallet-bound confirmation.
When a newer release exists, the client shows a fixed one-line notice at most once per rolling
24 hours; it never downloads or executes an update itself.
Install
Paste the prompt in INSTALL_PROMPT.md into Claude
Desktop, Claude Code, Cursor, Codex or Hermes, filling in the URLs, version and the publisher
key — or install manually per README.md. With Node 20 or newer,
the version-pinned launcher route is:
npx --yes @seconded/mcp@0.3.0 serve --host genericThe npm launcher has no install lifecycle script. It pins the publisher key and verifies the
signed manifest, exact release version and native-binary SHA-256 on every launch; it does not
clear quarantine attributes. MCPB users install seconded-mcp_0.3.0.mcpb (Claude Desktop:
Settings → Extensions → Advanced settings → Install Extension…). Setup is non-interactive: it
verifies the signed checksums, creates a dedicated spending wallet and prints the funding address.
It never asks for a password, seed or existing wallet.
Verify your download
The publisher key is an SSH Ed25519 key, identity release@seconded, namespace
seconded-release. Its fingerprint is SHA256:wV2gkz0HE+pcwQtkI0qwT/XGA7h+D0+sNa9ClqjCTKA; check the key you use against it.
# 1. Build allowed_signers from the announced public key file:
awk '{print "release@seconded namespaces=\"seconded-release\" " $1 " " $2}' seconded-release-ed25519.pub > allowed_signers
# 2. Verify the signed checksum manifest:
ssh-keygen -Y verify -f allowed_signers -I release@seconded -n seconded-release -s SHA-256SUMS.sig < SHA-256SUMS
# 3. Verify every downloaded file (Linux: sha256sum -c SHA-256SUMS):
shasum -a 256 -c SHA-256SUMSThe signed manifest includes a version comment; check it says 0.3.0. Setup re-verifies the
binary automatically against the same key compiled into the release.
Release assets (nine files): seconded-mcp_darwin_arm64, seconded-mcp_darwin_amd64,
seconded-mcp_linux_amd64, seconded-mcp_linux_arm64, seconded-mcp_windows_amd64.exe,
seconded-mcp_0.3.0.mcpb, build-info.json, SHA-256SUMS, SHA-256SUMS.sig.
Known limits — read before installing
- Platform-unsigned build. No Apple Developer ID, notarization or Windows publisher
signature. macOS Gatekeeper may block the binary until you approve it under System Settings →
Privacy & Security; review the release first, and never remove quarantine or disable
Gatekeeper to skip that review. Windows SmartScreen may warn. SSH-signed checksums are the
publisher authentication. - Hot wallet. The spending wallet lives on your machine. Software running as your OS user
can read its key and bypass the client; budgets are enforced locally, not on chain. Keep only
small balances in it. - File fallback is unencrypted. When the OS credential store is unavailable, the wallet is a
privatewallet.keyfile protected only by filesystem permissions. Back it up yourself. - No wallet deletion, terminal-only export. There is no wallet deletion command.
export-key
works only in your own terminal after typed confirmation; no MCP tool can export keys. - NOT VERIFIED is not a verdict. When the two models disagree, decline or time out, the
result says so and the agent must pause or ask a human. The reported charge follows
independent on-chain evidence and can stay "not yet known" until that evidence is final. - Quotes preview Base mainnet only.
seconded_quoterejects anetworkargument; a Base
quote is not proof of a live quote on another chain. Paid checks accept all six networks. - Trade Check effects preview is not available in this release; it reports approval and
signature-scope facts within its stated coverage, and unavailable facts asnot_checked. - Waits are short.
wait_secondsaccepts up to 25 but the client waits at most 8 seconds;
on timeout, callseconded_receipt— the paid check may still be running. A paid presentation
is sent at most once; recovery never signs a new payment. - Limits cap the payment price, not the service's own model costs, and no answer is
financial advice, an investment recommendation or a guarantee. - Native host integration is not certified per platform beyond the tested configurations;
restart your MCP host after setup as instructed.
Privacy policy: https://secondedoracle.xyz/privacy