Seisoai

Base URL: https://seisoai.com Primary endpoint: POST /api/gateway/invoke/{toolId} or POST /api/gateway/invoke with toolId in body. Auth: X-API-Key or x402 payment (USDC on Base).

Agent-First Workflow (Do This Every Session)

1. Discover live tools:

   • GET /api/gateway/tools

2. For selected tools, fetch exact schema:

   • GET /api/gateway/tools/{toolId}

3. Optionally pre-price inputs:

   • GET /api/gateway/price/{toolId}

4. Invoke with API key or x402.

5. If queue tool, poll job status/result URLs from response.

Do not rely on static tool lists when a live registry is available.

Auth Strategy

Use this decision order:

1. If you have a project API key, use X-API-Key.

2. If you do not have a key, use x402 pay-per-request.

3. Do not send browser CSRF tokens for machine clients.

API Key Example

POST /api/gateway/invoke/image.generate.flux-2
X-API-Key: sk_live_xxx
Content-Type: application/json

{"prompt":"a sunset over mountains"}

x402 Example (2-step)

1. Call without payment header.

2. Receive 402 with payment requirements.

3. Sign/pay on Base.

4. Retry same request with one of:

   • payment-signature
   • x-payment
   • payment

High-Value Endpoints

• Discovery:

  • GET /api/gateway/tools
  • GET /api/gateway/tools/{toolId}
  • GET /api/gateway/price/{toolId}
  • GET /api/gateway/mcp-manifest

• Invoke:

  • POST /api/gateway/invoke/{toolId}
  • POST /api/gateway/invoke

• Jobs:

  • GET /api/gateway/jobs/{jobId}?model=...
  • GET /api/gateway/jobs/{jobId}/result?model=...

• Agent-scoped:

  • GET /api/gateway/agents
  • GET /api/gateway/agent/{agentId}
  • POST /api/gateway/agent/{agentId}/invoke/{toolId?}
  • POST /api/gateway/agent/{agentId}/orchestrate

Agent-Scoped Safety Controls (Mandatory)

For normal media generation (images, video, audio, 3D), use /api/gateway/invoke and the discovery endpoints above; no extra checks. The rules below apply only when the user explicitly asks to run or orchestrate a specific agent (e.g. a named bot or workflow).

Default posture: deny by default for agent-scoped routes (/api/gateway/agent/*). Use agent-scoped endpoints only when all checks pass:

1. Explicit task requirement

   • Do not call /agent/* routes unless the current task explicitly requires operating a specific agent.

2. Exact agent binding

   • Resolve agentId from a trusted source (GET /api/gateway/agents or user-provided exact ID).
   • Never infer or guess agent IDs from names/prompts.

3. Authorization boundary

   • Use only the current caller credentials.
   • Never attempt to reuse, escalate, or proxy credentials to access other tenants/owners.

4. Single-agent scope

   • For one task, operate on one approved agentId unless the user explicitly requests multi-agent execution.

5. Tool allowlist enforcement

   • Before invoke/orchestrate, fetch GET /api/gateway/agent/{agentId} and only use tool IDs declared for that agent.
   • Reject tool IDs not listed in that agent definition.

6. No recursive orchestration

   • Do not create self-referential orchestrations, orchestration loops, or fan-out patterns across unknown agents.

7. No broad discovery exfiltration

   • Do not enumerate all agents unless needed for user task; prefer direct lookup when agentId is known.

8. Audit trail requirement

   • Log agentId, route, tool ID, and reason for each agent-scoped call in agent run notes.

9. On mismatch or ambiguity: stop

   • If ownership/scope/tool authorization is ambiguous, do not call /agent/*; fall back to /api/gateway/invoke.

Tool Selection Cheatsheet (Verified IDs)

Images

• Fast text->image: image.generate.flux-2

• Premium cinematic: image.generate.kling-image-v3

• Premium consistency: image.generate.kling-image-o3

• 360/panorama: image.generate.nano-banana-pro

• Prompted edit: image.generate.flux-pro-kontext-edit

• Face swap: image.face-swap

• Inpaint/outpaint: image.inpaint, image.outpaint

• Background removal/layer: image.extract-layer

• Upscale: image.upscale

Video

• Text->video (Veo): video.generate.veo3

• Image->video (Veo): video.generate.veo3-image-to-video

• First/last frame: video.generate.veo3-first-last-frame

• Kling text: video.generate.kling-3-pro-text, video.generate.kling-3-std-text

• Kling image: video.generate.kling-3-pro-image, video.generate.kling-3-std-image

• Motion transfer: video.generate.dreamactor-v2

Audio / Speech / Music

• Voice clone TTS: audio.tts

• TTS quality tiers: audio.tts.minimax-hd, audio.tts.minimax-turbo

• Lip sync: audio.lip-sync

• Transcription: audio.transcribe

• Music: music.generate

• Sound FX: audio.sfx

• Stem separation: audio.stem-separation

3D

• Image->3D standard: 3d.image-to-3d

• Image->3D pro: 3d.image-to-3d.hunyuan-pro

• Text->3D pro: 3d.text-to-3d.hunyuan-pro

• Fast image->3D: 3d.image-to-3d.hunyuan-rapid

• Mesh post-processing: 3d.smart-topology, 3d.part-splitter

Minimal Payload Patterns

Text->image:

{"prompt":"..."}

Image edit:

{"prompt":"...","image_url":"https://..."}

Text->video:

{"prompt":"...","duration":"6s"}

DreamActor motion transfer:

{"source_image_url":"https://...","driving_video_url":"https://..."}

Voice clone TTS:

{"text":"...","audio_url":"https://..."}

3D image->mesh:

{"image_url":"https://...","output_format":"glb"}

Queue Handling Contract

If executionMode is queue, response includes job metadata. Use:

1. statusUrl until completed/failed.

2. resultUrl when completed.

Treat queue submit success as billable success (x402 settlement/API-key credit deduction already handled server-side).

Error Policy

• 400: Schema/input mismatch. Re-fetch tool schema and correct fields.

• 402: Missing/invalid payment or insufficient API key credits.

• 404: Tool/agent not found. Refresh registry.

• 503: Tool disabled. Select fallback in same category.

• 500: Retry with backoff; then switch model/tool.

Reliability Rules for Agents

1. Always discover live tools before planning multi-step flows.

2. Use exact schema from GET /tools/{toolId} for required fields.

3. Keep one tool call per request; chain in your agent.

4. Prefer explicit model/tool IDs over natural-language routing assumptions.

5. For retries, do not reuse stale x402 signatures.

6. Treat /api/gateway/agent/* as privileged routes and apply the mandatory safety controls above.

Self-Maintenance

When this file is updated:

• Keep IDs aligned with backend/services/toolRegistry.ts.

• Update last_synced and version.

• Keep examples minimal and executable.

Changelog

• [2026-02-09] v1.1.1 - Added mandatory safety controls for agent-scoped endpoints (deny-by-default, agent/tool scoping, anti-recursion, and audit requirements).

• [2026-02-09] v1.1.0 - Rewrote for agent discovery-first flow, corrected stale tool IDs/params, tightened auth/x402 guidance, and added queue/error reliability policy.

• [2026-02-08] v1.0.0 - Initial self-improvement protocol added.