Install
$ agentstack add mcp-seatlayer-seatlayer-ai-toolkit ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
SeatLayer AI Toolkit
[](https://github.com/seatlayer/seatlayer-ai-toolkit/actions/workflows/ci.yml) [](LICENSE)
Agent skills, diagnostics, and optional Designer MCP configuration for choosing, building, and verifying SeatLayer hosted checkout, buyer SDK, private-access, server SDK, mobile, platform, and operator integrations.
The toolkit does not replace the SeatLayer developer documentation. It teaches an agent how to inspect a repository, select the right SeatLayer surface, load the smallest relevant live documentation set, implement the integration, and prove the result.
Build with agents · Developer docs · Demo hub · Website
Choose the integration before the package
| Outcome | Start here | Commerce owner | |---|---|---| | Share a complete booking page | Hosted Event Page | SeatLayer managed ticketing | | Put managed checkout in an existing site | Managed embed | SeatLayer managed ticketing | | Publish one or many events as a site | Organizer Website | SeatLayer managed ticketing | | Add seating to an existing checkout | SeatPicker or SeatingChart | Your platform | | Sell a private, partner, sponsor, or presale allocation | Hosted access link or buyer access session | Depends on the selected product profile | | Build a mobile buyer experience | React Native, Flutter, iOS, or Android SDK | Your platform | | Add organizer chart or event operations | Embedded Designer or control room | Your platform |
Read Choose an integration before implementing. A managed hosted surface does not require a host booking endpoint. A platform/custom checkout does.
SeatLayer package ecosystem
The developer documentation is the authoritative contract. Registry pages are the authority for the latest published version.
Buyer and mobile SDKs
| Surface | Package or source | Documentation | |---|---|---| | JavaScript | @seatlayer/js | Install | | React | @seatlayer/react | Install | | React Native | @seatlayer/react-native | Mobile | | Flutter | seatlayer | Mobile | | iOS | Swift package | Mobile | | Android | Kotlin/JitPack package | Mobile |
Server SDKs
Server SDKs are secret-key packages. Never bundle them into buyer-facing code.
| Language | Package | Source | |---|---|---| | Node.js | @seatlayer/server | seatlayer-node | | Python | seatlayer | seatlayer-python | | PHP | seatlayer/seatlayer-php | seatlayer-php | | Java | io.seatlayer:seatlayer-java | seatlayer-java | | Go | github.com/seatlayer/seatlayer-go | seatlayer-go | | Ruby | seatlayer | seatlayer-ruby | | .NET | SeatLayer | seatlayer-dotnet |
Server SDK installation · SeatLayer on GitHub
What is included
integrate-seatlayer— a portable Agent Skill for implementation, review,
troubleshooting, and go-live work.
seatlayer-ai doctor— deterministic checks for exposed credentials,
server packages in client code, browser-side booking, unsafe buyer-access token handling, missing idempotency and conflict handling, unaudited channel overrides, and weak webhook verification.
- Claude Code commands for setup, integration, diagnosis, and verification.
- Codex and Claude plugin manifests.
- Optional remote Designer MCP configuration. OAuth remains chart-scoped and
publication always requires an explicit human decision.
Quick start
Clone the repository:
git clone https://github.com/seatlayer/seatlayer-ai-toolkit.git
cd seatlayer-ai-toolkit
Codex
Install the skill into your personal Codex skills directory:
node scripts/install.mjs --target codex
Then ask:
Use $integrate-seatlayer to add reserved seating to this repository.
Claude Code
Load the complete plugin:
claude --plugin-dir /absolute/path/to/seatlayer-ai-toolkit
Available commands:
/seatlayer:setup
/seatlayer:integrate
/seatlayer:doctor
/seatlayer:verify
GitHub Copilot
Install the portable skill into a project:
node scripts/install.mjs --target github --project /path/to/project
This writes .github/skills/integrate-seatlayer/ without modifying application code.
Any coding agent
Give the agent these two resources:
https://docs.seatlayer.io/llms.txtskills/integrate-seatlayer/SKILL.md
The complete documentation corpus is available at https://docs.seatlayer.io/llms-full.txt, but focused page routes are preferred to avoid unnecessary context.
Diagnose an existing integration
Run the read-only scanner:
node scripts/doctor.mjs /path/to/project
For machine-readable output:
node scripts/doctor.mjs /path/to/project --json
The scanner never reads files outside the target repository, never prints environment-variable values, and ignores dependencies and build output.
Core safety boundaries
- Choose managed ticketing or platform/custom commerce before choosing an SDK.
- Managed hosted checkout owns payment, Orders, tickets, and booking; do not add
a duplicate host booking endpoint.
- In platform/custom commerce, the browser selects and holds while a trusted
server inspects and books.
SEATLAYER_SECRET_KEYnever enters browser code.- Payment amounts come from trusted server data, not browser input.
bookingRefis the host order identifier and is reused for safe retries.- Inventory conflicts and expired holds are normal recovery paths.
- Buyer access tokens are event- and origin-bound capabilities. Keep them in
memory, never in storage, URLs, logs, analytics, or exception text.
- A private event is token-gated and has no public link; it is not hard-off.
- Listing an event on an Organizer Website makes it discoverable on that public
Website and must be an explicit organizer decision.
- Webhook signatures are verified from the raw request body.
The live documentation is authoritative when it conflicts with toolkit guidance:
- Build with agents
- Agent integration workflow
- Complete checkout
- Private and partner sales
- Server SDK installation
- Integration best practices
Designer MCP
The included .mcp.json points to SeatLayer's remote Streamable HTTP MCP resource. It uses OAuth 2.1 with PKCE and a chart-scoped authorization boundary. Availability and publish capability are shown in the SeatLayer dashboard.
The integration skill must not use Designer MCP unless the task involves chart authoring or review. It must never publish without the user's explicit authorization.
Development
Requirements: Node.js 18 or newer and Python 3 for the optional upstream skill and plugin validators.
npm run validate
npm run check:docs
The first command validates manifests, the portable skill, installer behavior, and deterministic diagnostics. The second resolves every referenced SeatLayer documentation URL. The repository intentionally has no runtime dependencies.
License
MIT © SeatLayer
Source & license
This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: seatlayer
- Source: seatlayer/seatlayer-ai-toolkit
- License: MIT
- Homepage: https://seatlayer.io/
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.