# Seatlayer Ai Toolkit > Agent skills, diagnostics, and Designer MCP guidance for safe SeatLayer integrations across Web, React, Flutter, and iOS. - **Type:** MCP server - **Install:** `agentstack add mcp-seatlayer-seatlayer-ai-toolkit` - **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior - **Seller:** [seatlayer](https://agentstack.voostack.com/s/seatlayer) - **Installs:** 0 - **Category:** [Integrations](https://agentstack.voostack.com/c/integrations) - **Latest version:** 0.1.0 - **License:** MIT - **Upstream author:** [seatlayer](https://github.com/seatlayer) - **Source:** https://github.com/seatlayer/seatlayer-ai-toolkit - **Website:** https://seatlayer.io/ ## Install ```sh agentstack add mcp-seatlayer-seatlayer-ai-toolkit ``` Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent. ## About # SeatLayer AI Toolkit [](https://github.com/seatlayer/seatlayer-ai-toolkit/actions/workflows/ci.yml) [](LICENSE) Agent skills, diagnostics, and optional Designer MCP configuration for choosing, building, and verifying SeatLayer hosted checkout, buyer SDK, private-access, server SDK, mobile, platform, and operator integrations. The toolkit does not replace the [SeatLayer developer documentation](https://docs.seatlayer.io/). It teaches an agent how to inspect a repository, select the right SeatLayer surface, load the smallest relevant live documentation set, implement the integration, and prove the result. [Build with agents](https://docs.seatlayer.io/agents/overview/) · [Developer docs](https://docs.seatlayer.io/) · [Demo hub](https://app.seatlayer.io/demo) · [Website](https://seatlayer.io/developers/) ## Choose the integration before the package | Outcome | Start here | Commerce owner | |---|---|---| | Share a complete booking page | Hosted Event Page | SeatLayer managed ticketing | | Put managed checkout in an existing site | Managed embed | SeatLayer managed ticketing | | Publish one or many events as a site | Organizer Website | SeatLayer managed ticketing | | Add seating to an existing checkout | `SeatPicker` or `SeatingChart` | Your platform | | Sell a private, partner, sponsor, or presale allocation | Hosted access link or buyer access session | Depends on the selected product profile | | Build a mobile buyer experience | React Native, Flutter, iOS, or Android SDK | Your platform | | Add organizer chart or event operations | Embedded Designer or control room | Your platform | Read [Choose an integration](https://docs.seatlayer.io/start/choose-an-integration/) before implementing. A managed hosted surface does not require a host booking endpoint. A platform/custom checkout does. ## SeatLayer package ecosystem The [developer documentation](https://docs.seatlayer.io/) is the authoritative contract. Registry pages are the authority for the latest published version. ### Buyer and mobile SDKs | Surface | Package or source | Documentation | |---|---|---| | JavaScript | [`@seatlayer/js`](https://www.npmjs.com/package/@seatlayer/js) | [Install](https://docs.seatlayer.io/buyer-sdk/install/) | | React | [`@seatlayer/react`](https://www.npmjs.com/package/@seatlayer/react) | [Install](https://docs.seatlayer.io/buyer-sdk/install/) | | React Native | [`@seatlayer/react-native`](https://www.npmjs.com/package/@seatlayer/react-native) | [Mobile](https://docs.seatlayer.io/buyer-sdk/mobile/) | | Flutter | [`seatlayer`](https://pub.dev/packages/seatlayer) | [Mobile](https://docs.seatlayer.io/buyer-sdk/mobile/) | | iOS | [Swift package](https://github.com/seatlayer/seatlayer-ios) | [Mobile](https://docs.seatlayer.io/buyer-sdk/mobile/) | | Android | [Kotlin/JitPack package](https://github.com/seatlayer/seatlayer-android) | [Mobile](https://docs.seatlayer.io/buyer-sdk/mobile/) | ### Server SDKs Server SDKs are secret-key packages. Never bundle them into buyer-facing code. | Language | Package | Source | |---|---|---| | Node.js | [`@seatlayer/server`](https://www.npmjs.com/package/@seatlayer/server) | [seatlayer-node](https://github.com/seatlayer/seatlayer-node) | | Python | [`seatlayer`](https://pypi.org/project/seatlayer/) | [seatlayer-python](https://github.com/seatlayer/seatlayer-python) | | PHP | [`seatlayer/seatlayer-php`](https://packagist.org/packages/seatlayer/seatlayer-php) | [seatlayer-php](https://github.com/seatlayer/seatlayer-php) | | Java | [`io.seatlayer:seatlayer-java`](https://central.sonatype.com/artifact/io.seatlayer/seatlayer-java) | [seatlayer-java](https://github.com/seatlayer/seatlayer-java) | | Go | [`github.com/seatlayer/seatlayer-go`](https://pkg.go.dev/github.com/seatlayer/seatlayer-go) | [seatlayer-go](https://github.com/seatlayer/seatlayer-go) | | Ruby | [`seatlayer`](https://rubygems.org/gems/seatlayer) | [seatlayer-ruby](https://github.com/seatlayer/seatlayer-ruby) | | .NET | [`SeatLayer`](https://www.nuget.org/packages/SeatLayer) | [seatlayer-dotnet](https://github.com/seatlayer/seatlayer-dotnet) | [Server SDK installation](https://docs.seatlayer.io/server-sdk/install/) · [SeatLayer on GitHub](https://github.com/seatlayer) ## What is included - `integrate-seatlayer` — a portable Agent Skill for implementation, review, troubleshooting, and go-live work. - `seatlayer-ai doctor` — deterministic checks for exposed credentials, server packages in client code, browser-side booking, unsafe buyer-access token handling, missing idempotency and conflict handling, unaudited channel overrides, and weak webhook verification. - Claude Code commands for setup, integration, diagnosis, and verification. - Codex and Claude plugin manifests. - Optional remote Designer MCP configuration. OAuth remains chart-scoped and publication always requires an explicit human decision. ## Quick start Clone the repository: ```bash git clone https://github.com/seatlayer/seatlayer-ai-toolkit.git cd seatlayer-ai-toolkit ``` ### Codex Install the skill into your personal Codex skills directory: ```bash node scripts/install.mjs --target codex ``` Then ask: ```text Use $integrate-seatlayer to add reserved seating to this repository. ``` ### Claude Code Load the complete plugin: ```bash claude --plugin-dir /absolute/path/to/seatlayer-ai-toolkit ``` Available commands: ```text /seatlayer:setup /seatlayer:integrate /seatlayer:doctor /seatlayer:verify ``` ### GitHub Copilot Install the portable skill into a project: ```bash node scripts/install.mjs --target github --project /path/to/project ``` This writes `.github/skills/integrate-seatlayer/` without modifying application code. ### Any coding agent Give the agent these two resources: - `https://docs.seatlayer.io/llms.txt` - `skills/integrate-seatlayer/SKILL.md` The complete documentation corpus is available at `https://docs.seatlayer.io/llms-full.txt`, but focused page routes are preferred to avoid unnecessary context. ## Diagnose an existing integration Run the read-only scanner: ```bash node scripts/doctor.mjs /path/to/project ``` For machine-readable output: ```bash node scripts/doctor.mjs /path/to/project --json ``` The scanner never reads files outside the target repository, never prints environment-variable values, and ignores dependencies and build output. ## Core safety boundaries - Choose managed ticketing or platform/custom commerce before choosing an SDK. - Managed hosted checkout owns payment, Orders, tickets, and booking; do not add a duplicate host booking endpoint. - In platform/custom commerce, the browser selects and holds while a trusted server inspects and books. - `SEATLAYER_SECRET_KEY` never enters browser code. - Payment amounts come from trusted server data, not browser input. - `bookingRef` is the host order identifier and is reused for safe retries. - Inventory conflicts and expired holds are normal recovery paths. - Buyer access tokens are event- and origin-bound capabilities. Keep them in memory, never in storage, URLs, logs, analytics, or exception text. - A private event is token-gated and has **no public link**; it is not hard-off. - Listing an event on an Organizer Website makes it discoverable on that public Website and must be an explicit organizer decision. - Webhook signatures are verified from the raw request body. The live documentation is authoritative when it conflicts with toolkit guidance: - [Build with agents](https://docs.seatlayer.io/agents/overview/) - [Agent integration workflow](https://docs.seatlayer.io/agents/integrate-seatlayer/) - [Complete checkout](https://docs.seatlayer.io/examples/complete-checkout/) - [Private and partner sales](https://docs.seatlayer.io/integrations/private-and-partner-sales/) - [Server SDK installation](https://docs.seatlayer.io/server-sdk/install/) - [Integration best practices](https://docs.seatlayer.io/integrations/best-practices/) ## Designer MCP The included `.mcp.json` points to SeatLayer's remote Streamable HTTP MCP resource. It uses OAuth 2.1 with PKCE and a chart-scoped authorization boundary. Availability and publish capability are shown in the SeatLayer dashboard. The integration skill must not use Designer MCP unless the task involves chart authoring or review. It must never publish without the user's explicit authorization. ## Development Requirements: Node.js 18 or newer and Python 3 for the optional upstream skill and plugin validators. ```bash npm run validate npm run check:docs ``` The first command validates manifests, the portable skill, installer behavior, and deterministic diagnostics. The second resolves every referenced SeatLayer documentation URL. The repository intentionally has no runtime dependencies. ## License MIT © SeatLayer ## Source & license This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code. - **Author:** [seatlayer](https://github.com/seatlayer) - **Source:** [seatlayer/seatlayer-ai-toolkit](https://github.com/seatlayer/seatlayer-ai-toolkit) - **License:** MIT - **Homepage:** https://seatlayer.io/ Install and usage instructions live in the source repository linked above. ## Pricing - **Free** — Free ## Security capabilities Automated source analysis of v0.1.0 — what this tool can access: - **Network access:** no - **Filesystem access:** no - **Shell / process execution:** no - **Environment & secrets:** no - **Dynamic code execution:** no *"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.* ## Versions - **0.1.0** — security scan: passed — Imported from the upstream source. ## Links - Listing page: https://agentstack.voostack.com/l/mcp-seatlayer-seatlayer-ai-toolkit - Seller: https://agentstack.voostack.com/s/seatlayer - Browse the marketplace: https://agentstack.voostack.com/browse --- Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.