@secondlayer/mcp 4.5.1 → 4.5.3

package/README.md

@@ -63,17 +63,13 @@ bunx -p @secondlayer/mcp secondlayer-mcp-http
 | **Streams** (1) | `streams_dumps` |
 | **Contracts** (2) | `contracts_find`, `get_contract_abi` |
 | **Scaffold** (1) | `scaffold_from_contract` |
-| **Account** (2) | `account_whoami`, `account_create_key` |
 
 Periphery surfaces (single block/tx lookups, mempool, stacking, proofs, usage,
 codegen, billing/caps, projects, live Streams reads, delivery forensics) are
 REST-only: see the OpenAPI spec at the API host.
 
-`account_create_key` mints a scoped `streams`/`index` read key — requires an
-account/owner key and returns the `sk-sl_` key **once**. **Key products:** an
-`account` key (dashboard default) grants both `streams:read` and `index:read` and
-is the only key that can mint; `streams`/`index` keys are scoped reads and cannot
-mint (403).
+Account tools are unmounted. Point the server at your instance with `SL_API_URL`
+(default `http://127.0.0.1:3800`). Writes use `INSTANCE_TOKEN` from `sl init`.
 
 ### `subscriptions_create` kinds
 

package/dist/bin-http.js

@@ -53,44 +53,23 @@ function buildFetchImpl() {
 function getClient() {
   if (!instance) {
     const apiKey = readApiKey();
-    const baseUrl = process.env.SECONDLAYER_API_URL;
+    const baseUrl = process.env.SECONDLAYER_API_URL || process.env.SL_API_URL || "http://127.0.0.1:3800";
     const dumpsBaseUrl = process.env.SL_STREAMS_DUMPS_URL;
     const fetchImpl = buildFetchImpl();
     instance = new SecondLayer({
       ...apiKey ? { apiKey } : {},
       origin: "mcp",
-      ...baseUrl ? { baseUrl } : {},
+      baseUrl,
       ...dumpsBaseUrl ? { dumpsBaseUrl } : {},
       ...fetchImpl ? { fetchImpl } : {}
     });
   }
   return instance;
 }
-var keyHint = " — set SL_API_KEY to an sk-sl_ API key from " + "https://secondlayer.tools/platform/api-keys for write and account operations";
-async function apiRequest(method, path, body) {
-  const apiKey = readApiKey();
-  const baseUrl = process.env.SECONDLAYER_API_URL || "https://api.secondlayer.tools";
-  const res = await fetch(`${baseUrl}${path}`, {
-    method,
-    headers: {
-      "Content-Type": "application/json",
-      ...apiKey ? { Authorization: `Bearer ${apiKey}` } : {}
-    },
-    body: body ? JSON.stringify(body) : undefined
-  });
-  if (!res.ok) {
-    const text = await res.text().catch(() => "");
-    const needsKey = !apiKey && (res.status === 401 || res.status === 403);
-    throw Object.assign(new Error((text || `HTTP ${res.status}`) + (needsKey ? keyHint : "")), { status: res.status });
-  }
-  if (res.status === 204)
-    return;
-  return res.json();
-}
 
 // src/lib/format.ts
 function formatSubgraphSummary(s) {
-  const apiUrl = process.env.SECONDLAYER_API_URL || "https://api.secondlayer.tools";
+  const apiUrl = process.env.SECONDLAYER_API_URL || process.env.SL_API_URL || "http://127.0.0.1:3800";
   return {
     name: s.name,
     status: s.status,
@@ -315,31 +294,18 @@ function registerResources(server) {
   }));
 }
 
-// src/tools/account.ts
-import { z } from "zod";
-function registerAccountTools(server) {
-  defineTool(server, "account_whoami", "Show the authenticated account's email and plan.", {}, async () => {
-    const result = await apiRequest("GET", "/api/accounts/me");
-    return jsonResponse(result);
-  });
-  defineTool(server, "account_create_key", "Mint a scoped streams/index read API key so the agent can self-provision access. Requires an account-level (owner) API key. The returned `key` is shown ONCE — forward it to the user to set as SL_API_KEY.", {
-    product: z.enum(["streams", "index"]).optional().describe("Key scope (default streams)"),
-    name: z.string().optional().describe("Optional label for the key")
-  }, async ({ product, name }) => jsonResponse(await getClient().apiKeys.create({ product, name })));
-}
-
 // src/tools/codegen.ts
 import {
   generateIndexSchema
 } from "@secondlayer/subgraphs";
-import { z as z2 } from "zod";
+import { z } from "zod";
 var TARGETS = ["prisma", "kysely", "drizzle", "json-schema"];
 function registerCodegenTools(server) {
   defineTool(server, "codegen_index_schema", "Generate an ORM schema for the Index tables (blocks, transactions, decoded_events, …) — the same output as `sl codegen index`. Returns the file contents as text; write it wherever your project keeps its schema. Use `tables` to emit only what you read.", {
-    target: z2.enum(TARGETS).optional().describe("Output flavor (default kysely)"),
-    tables: z2.array(z2.string()).optional().describe("Restrict to these Index tables (default: all)"),
-    schemaName: z2.string().optional().describe("Postgres schema to qualify table names with"),
-    datasourceEnv: z2.string().optional().describe("Prisma only: datasource url env var (default DATABASE_URL)")
+    target: z.enum(TARGETS).optional().describe("Output flavor (default kysely)"),
+    tables: z.array(z.string()).optional().describe("Restrict to these Index tables (default: all)"),
+    schemaName: z.string().optional().describe("Postgres schema to qualify table names with"),
+    datasourceEnv: z.string().optional().describe("Prisma only: datasource url env var (default DATABASE_URL)")
   }, ({ target, tables, schemaName, datasourceEnv }) => textResponse(generateIndexSchema(target ?? "kysely", {
     tables,
     schemaName,
@@ -348,17 +314,17 @@ function registerCodegenTools(server) {
 }
 
 // src/tools/contracts.ts
-import { z as z3 } from "zod";
+import { z as z2 } from "zod";
 function registerContractTools(server, clientProvider = getClient) {
   defineTool(server, "contracts_find", 'Discover deployed Stacks contracts conforming to a trait (e.g. "sip-010", "sip-009", "sip-013"). The discovery endpoint for "which contracts implement X". Reads are public.', {
-    trait: z3.string().describe('Required. Trait to match (e.g. "sip-010").'),
-    conformance: z3.enum(["declared", "inferred", "any"]).optional().describe("declared = parsed from source, inferred = ABI shape-match, any = either (default)"),
-    include: z3.literal("abi").optional().describe(`Set to "abi" to include each contract's full ABI`),
-    limit: z3.number().optional().describe("Page size, 1–500 (default 100)"),
-    cursor: z3.string().optional().describe("Opaque cursor from a prior response's next_cursor")
+    trait: z2.string().describe('Required. Trait to match (e.g. "sip-010").'),
+    conformance: z2.enum(["declared", "inferred", "any"]).optional().describe("declared = parsed from source, inferred = ABI shape-match, any = either (default)"),
+    include: z2.literal("abi").optional().describe(`Set to "abi" to include each contract's full ABI`),
+    limit: z2.number().optional().describe("Page size, 1–500 (default 100)"),
+    cursor: z2.string().optional().describe("Opaque cursor from a prior response's next_cursor")
   }, async (params) => jsonResponse(await clientProvider().contracts.list(params)));
   defineTool(server, "contracts_get_abi", "Fetch a single deployed contract's ABI from the registry (prod-safe). Returns the contract's metadata + full ABI (functions, maps, variables, fungible/non-fungible tokens). Returns not_found if the contract isn't in the registry. Use it to inspect a contract before scaffold_from_contract.", {
-    contractId: z3.string().describe("Fully qualified contract id (e.g. SP….amm-pool-v2-01)")
+    contractId: z2.string().describe("Fully qualified contract id (e.g. SP….amm-pool-v2-01)")
   }, async ({ contractId }) => {
     const contract = await clientProvider().contracts.get(contractId, {
       includeAbi: true
@@ -375,14 +341,14 @@ function registerContractTools(server, clientProvider = getClient) {
 
 // src/tools/index.ts
 import { DECODED_EVENT_TYPES } from "@secondlayer/shared";
-import { z as z4 } from "zod";
+import { z as z3 } from "zod";
 var INDEX_EVENT_TYPES = DECODED_EVENT_TYPES;
 var rangeFilters = {
-  contractId: z4.string().optional().describe("Filter by contract id"),
-  fromHeight: z4.number().optional().describe("Start block height (inclusive)"),
-  toHeight: z4.number().optional().describe("End block height (inclusive)"),
-  cursor: z4.string().optional().describe("Opaque cursor from a prior response's next_cursor"),
-  limit: z4.number().optional().describe("Max rows for this page")
+  contractId: z3.string().optional().describe("Filter by contract id"),
+  fromHeight: z3.number().optional().describe("Start block height (inclusive)"),
+  toHeight: z3.number().optional().describe("End block height (inclusive)"),
+  cursor: z3.string().optional().describe("Opaque cursor from a prior response's next_cursor"),
+  limit: z3.number().optional().describe("Max rows for this page")
 };
 var heightFilters = {
   fromHeight: rangeFilters.fromHeight,
@@ -393,52 +359,52 @@ var heightFilters = {
 function registerIndexTools(server, clientProvider = getClient) {
   defineTool(server, "index_ft_transfers", "List decoded SIP-010 fungible-token transfers from the Index (decoded layer). Anonymous reads allowed (free-tier API keys are rejected — Build+ required).", {
     ...rangeFilters,
-    sender: z4.string().optional().describe("Filter by sender principal"),
-    recipient: z4.string().optional().describe("Filter by recipient principal"),
-    assetIdentifier: z4.string().optional().describe("Filter by asset identifier (contract::asset), e.g. SP…sbtc-token::sbtc-token")
+    sender: z3.string().optional().describe("Filter by sender principal"),
+    recipient: z3.string().optional().describe("Filter by recipient principal"),
+    assetIdentifier: z3.string().optional().describe("Filter by asset identifier (contract::asset), e.g. SP…sbtc-token::sbtc-token")
   }, async (params) => jsonResponse(await clientProvider().index.ftTransfers.list(params)));
   defineTool(server, "index_nft_transfers", "List decoded SIP-009 non-fungible-token transfers from the Index. Anonymous reads allowed (free-tier keys rejected).", {
     ...rangeFilters,
-    sender: z4.string().optional().describe("Filter by sender principal"),
-    recipient: z4.string().optional().describe("Filter by recipient principal"),
-    assetIdentifier: z4.string().optional().describe("Filter by asset identifier (contract::asset)")
+    sender: z3.string().optional().describe("Filter by sender principal"),
+    recipient: z3.string().optional().describe("Filter by recipient principal"),
+    assetIdentifier: z3.string().optional().describe("Filter by asset identifier (contract::asset)")
   }, async (params) => jsonResponse(await clientProvider().index.nftTransfers.list(params)));
   defineTool(server, "index_events", "List decoded chain events from the Index by event type. Use this for event types without a dedicated tool (stx_*, ft_mint/burn, nft_mint/burn, print), and for trait-scoped queries: set `trait` (e.g. sip-010) to match all contracts conforming to a standard — pair with contracts_find to discover traits. For ft/nft transfers without a trait prefer index_ft_transfers / index_nft_transfers.", {
-    eventType: z4.enum(INDEX_EVENT_TYPES).describe("Required. Decoded event type to list."),
+    eventType: z3.enum(INDEX_EVENT_TYPES).describe("Required. Decoded event type to list."),
     ...rangeFilters,
-    sender: z4.string().optional().describe("Filter by sender principal"),
-    recipient: z4.string().optional().describe("Filter by recipient principal"),
-    assetIdentifier: z4.string().optional().describe("Filter by asset identifier where applicable"),
-    trait: z4.string().optional().describe("Match contracts conforming to a trait/standard (e.g. sip-010). Mutually exclusive with contractId; contract-keyed event types only."),
-    txContext: z4.boolean().optional().describe("Join the submitting transaction into each event (tx_sender, tx_type, tx_status, tx_contract_id, tx_function_name). For print events it's the only source of the submitting sender.")
+    sender: z3.string().optional().describe("Filter by sender principal"),
+    recipient: z3.string().optional().describe("Filter by recipient principal"),
+    assetIdentifier: z3.string().optional().describe("Filter by asset identifier where applicable"),
+    trait: z3.string().optional().describe("Match contracts conforming to a trait/standard (e.g. sip-010). Mutually exclusive with contractId; contract-keyed event types only."),
+    txContext: z3.boolean().optional().describe("Join the submitting transaction into each event (tx_sender, tx_type, tx_status, tx_contract_id, tx_function_name). For print events it's the only source of the submitting sender.")
   }, async (params) => jsonResponse(await clientProvider().index.events.list(params)));
   defineTool(server, "index_contract_calls", "List decoded contract calls from the Index (function name, args, result). Set `trait` (e.g. sip-010) to match calls to all contracts conforming to a standard. Note: contract-call cursors are a SEPARATE keyspace from event cursors — they are not interchangeable.", {
     ...rangeFilters,
-    functionName: z4.string().optional().describe("Filter by called function name"),
-    sender: z4.string().optional().describe("Filter by caller principal"),
-    trait: z4.string().optional().describe("Match contracts conforming to a trait/standard (e.g. sip-010). Mutually exclusive with contractId.")
+    functionName: z3.string().optional().describe("Filter by called function name"),
+    sender: z3.string().optional().describe("Filter by caller principal"),
+    trait: z3.string().optional().describe("Match contracts conforming to a trait/standard (e.g. sip-010). Mutually exclusive with contractId.")
   }, async (params) => jsonResponse(await clientProvider().index.contractCalls.list(params)));
   defineTool(server, "index_blocks", "List decoded blocks from the Index. Anonymous reads allowed (free-tier keys rejected).", { ...heightFilters }, async (params) => jsonResponse(await clientProvider().index.blocks.list(params)));
   defineTool(server, "index_transactions", "List decoded transactions from the Index. Filter by type, sender, or contract. Anonymous reads allowed (free-tier keys rejected).", {
     ...rangeFilters,
-    type: z4.string().optional().describe("Filter by transaction type"),
-    sender: z4.string().optional().describe("Filter by sender principal")
+    type: z3.string().optional().describe("Filter by transaction type"),
+    sender: z3.string().optional().describe("Filter by sender principal")
   }, async (params) => jsonResponse(await clientProvider().index.transactions.list(params)));
   defineTool(server, "index_print_schema", "Empirical per-topic print payload schemas for a contract, inferred from sampled on-chain events: each topic's fields with observed Clarity types, decoded TS types, subgraph column types, and presence rates. Use before writing print_event subgraph handlers to learn what's on e.data. Anonymous read.", {
-    contractId: z4.string().describe("Contract id (SP….name) whose print events to profile")
+    contractId: z3.string().describe("Contract id (SP….name) whose print events to profile")
   }, async (params) => jsonResponse(await clientProvider().index.printSchema(params.contractId)));
   defineTool(server, "index_discover", "Discover the Index vocabulary: every event type and its columns, allowed/equality filters, and required-non-null fields (and which types accept `trait`). Read this before building Index queries instead of guessing filters. Anonymous read.", {}, async () => jsonResponse(await clientProvider().index.discover()));
   defineTool(server, "batch_query", "Run up to 10 public /v1 reads in one round trip (POST /v1/batch). Each item keeps its own auth/quota/pay-per-call semantics; results return in order with per-item status. Paths must start with /v1/index, /v1/subgraphs, /v1/streams, or /v1/contracts.", {
-    requests: z4.array(z4.object({
-      path: z4.string().describe("Public /v1 read path"),
-      params: z4.record(z4.string(), z4.string()).optional()
+    requests: z3.array(z3.object({
+      path: z3.string().describe("Public /v1 read path"),
+      params: z3.record(z3.string(), z3.string()).optional()
     })).min(1).max(10).describe("Read descriptors, executed concurrently")
   }, async (params) => jsonResponse(await clientProvider().batch(params.requests)));
 }
 
 // src/tools/scaffold.ts
 import { generateSubgraphCode } from "@secondlayer/scaffold";
-import { z as z5 } from "zod";
+import { z as z4 } from "zod";
 async function fetchAbi(clientProvider, contractId) {
   const contract = await clientProvider().contracts.get(contractId, {
     includeAbi: true
@@ -453,8 +419,8 @@ async function fetchAbi(clientProvider, contractId) {
 }
 function registerScaffoldTools(server, clientProvider = getClient) {
   defineTool(server, "scaffold_from_contract", "Generate a subgraph scaffold from a deployed Stacks contract. Fetches the ABI automatically.", {
-    contractId: z5.string().describe("Fully qualified contract ID (e.g. SP102V8P0F7JX67ARQ77WEA3D3CFB5XW39REDT0AM.amm-pool-v2-01)"),
-    subgraphName: z5.string().optional().describe("Override the subgraph name (defaults to contract name)")
+    contractId: z4.string().describe("Fully qualified contract ID (e.g. SP102V8P0F7JX67ARQ77WEA3D3CFB5XW39REDT0AM.amm-pool-v2-01)"),
+    subgraphName: z4.string().optional().describe("Override the subgraph name (defaults to contract name)")
   }, async ({ contractId, subgraphName }) => {
     const { functions } = await fetchAbi(clientProvider, contractId);
     const code = generateSubgraphCode(contractId, functions, subgraphName);
@@ -470,26 +436,26 @@ function registerStreamsTools(server, clientProvider = getClient) {
 // src/tools/subgraphs.ts
 import { bundleSubgraphCode } from "@secondlayer/bundler";
 import { ByoBreakingChangeError } from "@secondlayer/sdk";
-import { z as z6 } from "zod";
+import { z as z5 } from "zod";
 function registerSubgraphTools(server, clientProvider = getClient) {
   defineTool(server, "subgraphs_list", "List all deployed subgraphs. Returns summary fields only, including visibility — public subgraphs are anon-readable at /v1/subgraphs/<name>.", {}, async () => {
     const { data } = await clientProvider().subgraphs.list();
     return jsonResponse(data.map(formatSubgraphSummary));
   });
-  defineTool(server, "subgraphs_get", "Get full details of a subgraph including schema, health, and table columns.", { name: z6.string().describe("Subgraph name") }, async ({ name }) => {
+  defineTool(server, "subgraphs_get", "Get full details of a subgraph including schema, health, and table columns.", { name: z5.string().describe("Subgraph name") }, async ({ name }) => {
     const detail = await clientProvider().subgraphs.get(name);
     return jsonResponse(detail);
   });
   defineTool(server, "subgraphs_query", 'Query rows from a subgraph table (max 200 rows). Filters support operators: "amount.gte": "1000", "sender.neq": "SP...", "name.like": "%token%". Available operators: eq, neq, gt, gte, lt, lte, like. To TAIL new rows (no streaming over MCP): sort=_id, order=desc for the latest, then poll forward with the filter {"_id.gt": "<last _id seen>"}, order=asc — when tailing with a `fields` list, include "_id" in it or the next poll filter cannot be formed. Fetch one row by id with {"_id": "<id>"}. Public subgraphs are also keyless over HTTP at GET /v1/subgraphs/<name>/<table> — { rows, next_cursor, tip } envelope, resume with ?cursor=<next_cursor> + _order=asc|desc (no _offset/_sort on /v1); hand that URL to third parties.', {
-    name: z6.string().describe("Subgraph name"),
-    table: z6.string().describe("Table name"),
-    filters: z6.record(z6.string(), z6.string()).optional().describe('Column filters — plain values or with operators (e.g. {"amount.gte": "1000", "sender": "SP..."})'),
-    sort: z6.string().optional().describe("Column to sort by"),
-    order: z6.enum(["asc", "desc"]).optional().describe("Sort order"),
-    limit: z6.number().max(200).optional().describe("Max rows (default 50, max 200)"),
-    offset: z6.number().optional().describe("Offset for pagination"),
-    fields: z6.string().optional().describe('Comma-separated column list to return (e.g. "sender,amount")'),
-    count: z6.boolean().optional().describe("If true, return row count instead of rows")
+    name: z5.string().describe("Subgraph name"),
+    table: z5.string().describe("Table name"),
+    filters: z5.record(z5.string(), z5.string()).optional().describe('Column filters — plain values or with operators (e.g. {"amount.gte": "1000", "sender": "SP..."})'),
+    sort: z5.string().optional().describe("Column to sort by"),
+    order: z5.enum(["asc", "desc"]).optional().describe("Sort order"),
+    limit: z5.number().max(200).optional().describe("Max rows (default 50, max 200)"),
+    offset: z5.number().optional().describe("Offset for pagination"),
+    fields: z5.string().optional().describe('Comma-separated column list to return (e.g. "sender,amount")'),
+    count: z5.boolean().optional().describe("If true, return row count instead of rows")
   }, async ({
     name,
     table,
@@ -517,15 +483,15 @@ function registerSubgraphTools(server, clientProvider = getClient) {
     return jsonResponse(result);
   });
   defineTool(server, "subgraphs_reindex", "Reindex a subgraph: drops and rebuilds the whole subgraph from its start block to chain tip. Takes no block range — use subgraphs_backfill to process a specific range. Returns an operationId — check subgraphs_get (health) or the REST operations endpoint to track progress to completion.", {
-    name: z6.string().describe("Subgraph name")
+    name: z5.string().describe("Subgraph name")
   }, async ({ name }) => {
     const result = await clientProvider().subgraphs.reindex(name);
     return jsonResponse(result);
   });
   defineTool(server, "subgraphs_backfill", "Backfill a subgraph over a block range. Non-destructive forward fill (does not drop existing data) — unlike subgraphs_reindex, and the only data-fill path for BYO subgraphs (reindex is blocked there). Both blocks required. Returns an operationId — check subgraphs_get (health) or the REST operations endpoint to track progress.", {
-    name: z6.string().describe("Subgraph name"),
-    fromBlock: z6.number().int().nonnegative().describe("Start block (inclusive)"),
-    toBlock: z6.number().int().nonnegative().describe("End block (inclusive)")
+    name: z5.string().describe("Subgraph name"),
+    fromBlock: z5.number().int().nonnegative().describe("Start block (inclusive)"),
+    toBlock: z5.number().int().nonnegative().describe("End block (inclusive)")
   }, async ({ name, fromBlock, toBlock }) => {
     const result = await clientProvider().subgraphs.backfill(name, {
       fromBlock,
@@ -533,15 +499,15 @@ function registerSubgraphTools(server, clientProvider = getClient) {
     });
     return jsonResponse(result);
   });
-  defineTool(server, "subgraphs_stop", "Cancel an in-flight reindex or backfill operation for a subgraph. Returns the stop request status; check subgraphs_get (health) or the REST operations endpoint to confirm it reaches a terminal state.", { name: z6.string().describe("Subgraph name") }, async ({ name }) => {
+  defineTool(server, "subgraphs_stop", "Cancel an in-flight reindex or backfill operation for a subgraph. Returns the stop request status; check subgraphs_get (health) or the REST operations endpoint to confirm it reaches a terminal state.", { name: z5.string().describe("Subgraph name") }, async ({ name }) => {
     const result = await clientProvider().subgraphs.stop(name);
     return jsonResponse(result);
   });
   defineTool(server, "subgraphs_gaps", "List indexing gaps (missing block ranges) for a subgraph. Each gap reports start/end/size, reason, and detected/resolved timestamps. Feed an unresolved gap's range into subgraphs_backfill to fill it. Defaults to unresolved gaps.", {
-    name: z6.string().describe("Subgraph name"),
-    limit: z6.number().int().positive().optional().describe("Max gaps to return"),
-    offset: z6.number().int().nonnegative().optional().describe("Pagination offset"),
-    resolved: z6.boolean().optional().describe("Filter by resolved state (omit for unresolved only)")
+    name: z5.string().describe("Subgraph name"),
+    limit: z5.number().int().positive().optional().describe("Max gaps to return"),
+    offset: z5.number().int().nonnegative().optional().describe("Pagination offset"),
+    resolved: z5.boolean().optional().describe("Filter by resolved state (omit for unresolved only)")
   }, async ({ name, limit, offset, resolved }) => {
     const result = await clientProvider().subgraphs.gaps(name, {
       limit,
@@ -550,16 +516,16 @@ function registerSubgraphTools(server, clientProvider = getClient) {
     });
     return jsonResponse(result);
   });
-  defineTool(server, "subgraphs_delete", "Delete a subgraph permanently.", { name: z6.string().describe("Subgraph name") }, async ({ name }) => {
+  defineTool(server, "subgraphs_delete", "Delete a subgraph permanently.", { name: z5.string().describe("Subgraph name") }, async ({ name }) => {
     const result = await clientProvider().subgraphs.delete(name);
     return textResponse(result.message);
   });
   defineTool(server, "subgraphs_deploy", "Deploy a subgraph from TypeScript code. Pass the full defineSubgraph() source — it will be bundled, validated, and deployed. Optional startBlock overrides the source definition for this deploy. Set dryRun to validate and preview the schema/DDL without writing anything. Set databaseUrl to deploy to your own Postgres (BYO data plane) — the server verifies the connection first; with dryRun it returns the DDL + grant script. A breaking BYO schema change is refused and returns a migration plan (drop + rebuild DDL) instead of deploying. Visibility defaults: managed deploys are public (anon-readable at /v1/subgraphs/<name>, name claimed in the global public namespace), BYO deploys are private. Call `subgraphs_reindex` separately if you need a forced reindex.", {
-    code: z6.string().describe("TypeScript source code containing a defineSubgraph() call"),
-    startBlock: z6.number().int().nonnegative().optional().describe("Override the definition startBlock for this deploy"),
-    databaseUrl: z6.string().optional().describe("BYO data plane: Postgres connection string to host the subgraph's schema and rows in your own database"),
-    dryRun: z6.boolean().optional().describe("Validate and preview the deploy (schema/DDL, BYO connection) without writing changes"),
-    visibility: z6.enum(["public", "private"]).optional().describe("Read visibility: public = anon /v1 reads + global name claim; private = owning account's key only. Defaults: managed → public, BYO → private.")
+    code: z5.string().describe("TypeScript source code containing a defineSubgraph() call"),
+    startBlock: z5.number().int().nonnegative().optional().describe("Override the definition startBlock for this deploy"),
+    databaseUrl: z5.string().optional().describe("BYO data plane: Postgres connection string to host the subgraph's schema and rows in your own database"),
+    dryRun: z5.boolean().optional().describe("Validate and preview the deploy (schema/DDL, BYO connection) without writing changes"),
+    visibility: z5.enum(["public", "private"]).optional().describe("Read visibility: public = anon /v1 reads + global name claim; private = owning account's key only. Defaults: managed → public, BYO → private.")
   }, async ({ code, startBlock, databaseUrl, dryRun, visibility }) => {
     const bundled = await bundleSubgraphCode(code);
     try {
@@ -584,11 +550,11 @@ function registerSubgraphTools(server, clientProvider = getClient) {
       throw err;
     }
   });
-  defineTool(server, "subgraphs_publish", "Make a subgraph publicly readable at /v1/subgraphs/<name> — anyone (or any agent) can read it without a key. Claims the name in the global public namespace; fails with PUBLIC_NAME_TAKEN if another account holds it.", { name: z6.string().describe("Subgraph name") }, async ({ name }) => {
+  defineTool(server, "subgraphs_publish", "Make a subgraph publicly readable at /v1/subgraphs/<name> — anyone (or any agent) can read it without a key. Claims the name in the global public namespace; fails with PUBLIC_NAME_TAKEN if another account holds it.", { name: z5.string().describe("Subgraph name") }, async ({ name }) => {
     const result = await clientProvider().subgraphs.publish(name);
     return jsonResponse(result);
   });
-  defineTool(server, "subgraphs_unpublish", "Make a subgraph private again — /v1 reads then require the owning account's bearer key, and the global public name claim is released.", { name: z6.string().describe("Subgraph name") }, async ({ name }) => {
+  defineTool(server, "subgraphs_unpublish", "Make a subgraph private again — /v1 reads then require the owning account's bearer key, and the global public name claim is released.", { name: z5.string().describe("Subgraph name") }, async ({ name }) => {
     const result = await clientProvider().subgraphs.unpublish(name);
     return jsonResponse(result);
   });
@@ -596,38 +562,38 @@ function registerSubgraphTools(server, clientProvider = getClient) {
 
 // src/tools/subscriptions.ts
 import { CHAIN_TRIGGER_TYPES } from "@secondlayer/shared";
-import { z as z7 } from "zod";
+import { z as z6 } from "zod";
 function registerSubscriptionTools(server, clientProvider = getClient) {
   defineTool(server, "subscriptions_list", "List all subscriptions for the current account. Returns summary fields (no secrets).", {}, async () => {
     const { data } = await clientProvider().subscriptions.list();
     return jsonResponse(data);
   });
-  defineTool(server, "subscriptions_get", "Get full detail for a subscription (filter, auth, retry config, circuit state).", { id: z7.string().describe("Subscription id") }, async ({ id }) => {
+  defineTool(server, "subscriptions_get", "Get full detail for a subscription (filter, auth, retry config, circuit state).", { id: z6.string().describe("Subscription id") }, async ({ id }) => {
     const detail = await clientProvider().subscriptions.get(id);
     return jsonResponse(detail);
   });
   defineTool(server, "subscriptions_create", "Create a subscription. Two kinds (mutually exclusive): a SUBGRAPH subscription fires on a subgraph table's rows (set subgraphName + tableName + optional filter); a CHAIN subscription fires on raw chain events with no subgraph (set triggers). Returns `signingSecret` ONCE — forward it to the user so they can wire it into their receiver.", {
-    name: z7.string().describe("Human-readable name, unique per account"),
-    subgraphName: z7.string().optional().describe("Subgraph to subscribe to (subgraph subscription)"),
-    tableName: z7.string().optional().describe("Table within the subgraph (subgraph subscription)"),
-    triggers: z7.array(z7.object({
-      type: z7.enum(CHAIN_TRIGGER_TYPES),
-      contractId: z7.string().optional(),
-      functionName: z7.string().optional(),
-      caller: z7.string().optional(),
-      sender: z7.string().optional(),
-      recipient: z7.string().optional(),
-      assetIdentifier: z7.string().optional(),
-      deployer: z7.string().optional(),
-      contractName: z7.string().optional(),
-      topic: z7.string().optional(),
-      lockedAddress: z7.string().optional(),
-      trait: z7.string().optional(),
-      minAmount: z7.union([z7.string(), z7.number()]).optional(),
-      maxAmount: z7.union([z7.string(), z7.number()]).optional()
+    name: z6.string().describe("Human-readable name, unique per account"),
+    subgraphName: z6.string().optional().describe("Subgraph to subscribe to (subgraph subscription)"),
+    tableName: z6.string().optional().describe("Table within the subgraph (subgraph subscription)"),
+    triggers: z6.array(z6.object({
+      type: z6.enum(CHAIN_TRIGGER_TYPES),
+      contractId: z6.string().optional(),
+      functionName: z6.string().optional(),
+      caller: z6.string().optional(),
+      sender: z6.string().optional(),
+      recipient: z6.string().optional(),
+      assetIdentifier: z6.string().optional(),
+      deployer: z6.string().optional(),
+      contractName: z6.string().optional(),
+      topic: z6.string().optional(),
+      lockedAddress: z6.string().optional(),
+      trait: z6.string().optional(),
+      minAmount: z6.union([z6.string(), z6.number()]).optional(),
+      maxAmount: z6.union([z6.string(), z6.number()]).optional()
     })).optional().describe("Chain triggers (chain subscription) — provide INSTEAD of subgraphName/tableName. Each targets a raw chain event/tx; string fields accept `*` wildcards, `trait` scopes to a SIP/trait. Per-type accepted fields: see the secondlayer://chain-triggers resource. Forward-looking: starts at chain tip, no backfill."),
-    url: z7.string().describe("Webhook URL"),
-    format: z7.enum([
+    url: z6.string().describe("Webhook URL"),
+    format: z6.enum([
       "standard-webhooks",
       "inngest",
       "trigger",
@@ -635,20 +601,20 @@ function registerSubscriptionTools(server, clientProvider = getClient) {
       "cloudevents",
       "raw"
     ]).optional().describe("Wire format (default standard-webhooks)"),
-    runtime: z7.enum(["inngest", "trigger", "cloudflare", "node"]).optional().describe("Receiver runtime label (display only)"),
-    filter: z7.record(z7.string(), z7.unknown()).optional().describe('Scalar filter DSL, e.g. {"amount": {"gte": 100}, "sender": "SP..."}'),
-    authConfig: z7.record(z7.string(), z7.unknown()).optional().describe('Receiver auth sent with each delivery, e.g. {"type": "bearer", "token": "..."}')
+    runtime: z6.enum(["inngest", "trigger", "cloudflare", "node"]).optional().describe("Receiver runtime label (display only)"),
+    filter: z6.record(z6.string(), z6.unknown()).optional().describe('Scalar filter DSL, e.g. {"amount": {"gte": 100}, "sender": "SP..."}'),
+    authConfig: z6.record(z6.string(), z6.unknown()).optional().describe('Receiver auth sent with each delivery, e.g. {"type": "bearer", "token": "..."}')
   }, async (input) => {
     const res = await clientProvider().subscriptions.create(input);
     return jsonResponse(res);
   });
   defineTool(server, "subscriptions_update", "Patch a subscription (name, url, filter, authConfig, format, runtime, retry, timeout, concurrency).", {
-    id: z7.string(),
-    name: z7.string().optional().describe("Rename the subscription"),
-    url: z7.string().optional(),
-    filter: z7.record(z7.string(), z7.unknown()).optional(),
-    authConfig: z7.record(z7.string(), z7.unknown()).optional().describe("Receiver auth sent with each delivery (bearer/etc.)"),
-    format: z7.enum([
+    id: z6.string(),
+    name: z6.string().optional().describe("Rename the subscription"),
+    url: z6.string().optional(),
+    filter: z6.record(z6.string(), z6.unknown()).optional(),
+    authConfig: z6.record(z6.string(), z6.unknown()).optional().describe("Receiver auth sent with each delivery (bearer/etc.)"),
+    format: z6.enum([
       "standard-webhooks",
       "inngest",
       "trigger",
@@ -656,27 +622,27 @@ function registerSubscriptionTools(server, clientProvider = getClient) {
       "cloudevents",
       "raw"
     ]).optional(),
-    runtime: z7.enum(["inngest", "trigger", "cloudflare", "node"]).nullable().optional(),
-    maxRetries: z7.number().int().min(0).optional(),
-    timeoutMs: z7.number().int().min(100).optional(),
-    concurrency: z7.number().int().min(1).optional()
+    runtime: z6.enum(["inngest", "trigger", "cloudflare", "node"]).nullable().optional(),
+    maxRetries: z6.number().int().min(0).optional(),
+    timeoutMs: z6.number().int().min(100).optional(),
+    concurrency: z6.number().int().min(1).optional()
   }, async ({ id, ...patch }) => {
     const res = await clientProvider().subscriptions.update(id, patch);
     return jsonResponse(res);
   });
-  defineTool(server, "subscriptions_delete", "Delete a subscription. Pending outbox rows are cascade-deleted.", { id: z7.string() }, async ({ id }) => {
+  defineTool(server, "subscriptions_delete", "Delete a subscription. Pending outbox rows are cascade-deleted.", { id: z6.string() }, async ({ id }) => {
     const res = await clientProvider().subscriptions.delete(id);
     return jsonResponse(res);
   });
-  defineTool(server, "subscriptions_test", "Send a one-off test webhook to a subscription's URL (built for its format, SSRF-guarded). Logged as a delivery row. Returns {ok, statusCode, error, durationMs, deliveryId}.", { id: z7.string().describe("Subscription id") }, async ({ id }) => {
+  defineTool(server, "subscriptions_test", "Send a one-off test webhook to a subscription's URL (built for its format, SSRF-guarded). Logged as a delivery row. Returns {ok, statusCode, error, durationMs, deliveryId}.", { id: z6.string().describe("Subscription id") }, async ({ id }) => {
     const res = await clientProvider().subscriptions.test(id);
     return jsonResponse(res);
   });
   defineTool(server, "subscriptions_replay", "Replay a block range for a subscription. Replays run at 10% of batch capacity — use sparingly. Pass `force` (a short idempotency suffix) to re-run a range that was already replayed.", {
-    id: z7.string(),
-    fromBlock: z7.number().int().nonnegative(),
-    toBlock: z7.number().int().nonnegative(),
-    force: z7.string().optional().describe("Idempotency suffix to force a duplicate replay of the range")
+    id: z6.string(),
+    fromBlock: z6.number().int().nonnegative(),
+    toBlock: z6.number().int().nonnegative(),
+    force: z6.string().optional().describe("Idempotency suffix to force a duplicate replay of the range")
   }, async ({ id, fromBlock, toBlock, force }) => {
     const res = await clientProvider().subscriptions.replay(id, {
       fromBlock,
@@ -698,7 +664,6 @@ function createServer() {
   registerScaffoldTools(server);
   registerSubgraphTools(server);
   registerSubscriptionTools(server);
-  registerAccountTools(server);
   registerIndexTools(server);
   registerStreamsTools(server);
   registerContractTools(server);
@@ -793,5 +758,5 @@ httpServer.listen(port, () => {
     console.error("Warning: SECONDLAYER_MCP_SECRET not set, authentication disabled");
 });
 
-//# debugId=64EC9FCF80EBC7C864756E2164756E21
+//# debugId=A5B0624749536DF364756E2164756E21
 //# sourceMappingURL=bin-http.js.map