Connect

8 clients · secrets stay placeholders

JSON (mcpServers)Claude CodeCodexOpenCodeCursorVS CodeGemini CLIGoose

{
  "mcpServers": {
    "kya-brasil": {
      "type": "http",
      "url": "https://kya-br-agents.marcelfons.workers.dev/mcp"
    }
  }
}

claude mcp add --transport http kya-brasil https://kya-br-agents.marcelfons.workers.dev/mcp

[mcp_servers.kya-brasil]
url = "https://kya-br-agents.marcelfons.workers.dev/mcp"

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "kya-brasil": {
      "type": "remote",
      "url": "https://kya-br-agents.marcelfons.workers.dev/mcp",
      "enabled": true
    }
  }
}

{
  "mcpServers": {
    "kya-brasil": {
      "type": "http",
      "url": "https://kya-br-agents.marcelfons.workers.dev/mcp"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=kya-brasil&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8va3lhLWJyLWFnZW50cy5tYXJjZWxmb25zLndvcmtlcnMuZGV2L21jcCJ9"
}

{
  "servers": {
    "kya-brasil": {
      "type": "http",
      "url": "https://kya-br-agents.marcelfons.workers.dev/mcp"
    }
  }
}

{
  "mcpServers": {
    "kya-brasil": {
      "httpUrl": "https://kya-br-agents.marcelfons.workers.dev/mcp"
    }
  }
}

extensions:
  "kya-brasil":
    enabled: true
    name: "kya-brasil"
    type: streamable_http
    uri: "https://kya-br-agents.marcelfons.workers.dev/mcp"
    timeout: 300

Quality 77 / 100good

protocol75 · weight 25

warn
protocol.modernnewest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
n/a
protocol.statelessonly applies to 2026-07-28 servers
pass
protocol.transportstreamable HTTP
n/a
protocol.list_ttlonly applies to 2026-07-28 servers

authorizationn/a · weight 15

n/a
auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
n/a
auth.secret_in_urlno templated URL

tool hygiene79 · weight 30

pass
tools.descriptionsevery tool has a description
pass
tools.description_lengthdescriptions are concise
pass
tools.schemasevery tool has an object input schema
warn
tools.annotationsonly 10 of 15 tools declare readOnlyHint or destructiveHint
fail
tools.directory_hintsno tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: kya_register (readOnlyHint, destructiveHint, idempotentHint); kya_verify (destructiveHint, idempotentHint); kya_verify_paid (destructiveHint, idempotentHint); …
pass
tools.token_costabout 3,481 tokens to load every tool
pass
tools.api_dumptools are not a one-to-one API dump

stability75 · weight 15

warn
stability.changes23 tool changes in 30 days
pass
stability.rug_pullno tool changed its meaning under the same name

dependenciesn/a · weight 15

n/a
deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

15 tools, about 3,481 tokens to load them all · tool set 7e6b4153b209 · tools last changed 2026-10-14 · checked 2026-10-20 05:45 UTC

Tool changes

2026-10-14kya_sign_linkadded
Free. Link for whoever holds the company's e-CNPJ (owner, accountant): give challenge_id and the agent's signature, get the /sign URL. They see agent, company and mandate and sign in the browser (A1 .pfx) or with any ICP-Brasil signer (A3 token, cloud), or run kya-sign (npm @kya-brasil/agent-tools) with the link. The issuer never sees the certificate.
2026-10-14kya_person_agentsadded
Free, person only: every live credential behind your e-CPF and every CPF check made against each one. Sign "KYA Brasil: my agents\nat: <ISO time>" with the e-CPF (valid 10 minutes).
2026-10-14kya_principal_matchadded
Signed answer ($0.01) for a person's agent (principal.kind person): does the CPF you already have match the e-CPF holder behind it? On a match, a subject_ref of your own for that person (stable for you, different for every verifier). The CPF is never stored, published or revealed; 3 non-matching answers per credential stop your checks. The person sees every check.
2026-10-14kya_check_actionchangeddescription, input schema
before
Signed verdict: is this action (action, amount, currency, counterparty) inside the agent's mandate and is the credential active? Evaluates the reserved mandate fields; lists the fields it did not evaluate.
after · 92% of words in common
Signed verdict: is this action (action, amount, currency, counterparty, payment instrument) inside the agent's mandate and is the credential active? Evaluates the reserved mandate fields; lists the fields it did not evaluate.
2026-10-14kya_registerchangedinput schema
2026-10-13kya_verifychangeddescription
before
Free (50/day per IP). The agent's current credential: principal company, mandate, informative KYB snapshot, status (active, suspended, revoked, expired) and signature. Also by key: /v1/agents/by-key?kind=&id=.
after · 90% of words in common
Free (50/day per IP). The agent's current credential: principal company, mandate, status (active, suspended, revoked, expired) and signature. Also by key: /v1/agents/by-key?kind=&id=.
2026-10-13kya_acts_exportremoved
Free. The company's trail of everything registered for one of its agents (default 30 days). The request is signed with the company's e-CNPJ, so only the principal reads it.
2026-10-13kya_act_textremoved
Free. The exact text an agent signs to show it intended an act (optional agent_signature of kya_register_act).
2026-10-13kya_actremoved
Free. A registered act and its signed receipt, by act_id (the receipt holder has it).
2026-10-13kya_register_actremoved
Register what the agent did (action, amount, currency, counterparty, reference, optional document hash and agent signature), usually by the party that accepted it. The issuer checks it against the mandate, adding what was already registered today, and returns a signed receipt. Denied acts are recorded too. The receipt is the proof of what the agent could and did do at that moment.

Showing the latest 10. Full history: list_changes · trend: quality JSON.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 79 / 100

no-repository

provenance45

liveness99

freshness100

hygiene80

+website +reachable +uptime-97% +updated-7d-ago -no-repository

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

remote	auth	reachable	uptime 30d	p50	protocol	last ok
`https://kya-br-agents.marcelfons.workers.dev/mcp` streamable-http	none	yes	97%	834 ms	2025-11-25	2026-10-20

Tools (15)

`kya_about`read-only	Free. What KYA Brasil is, how the credential flow works, prices, and where the schemas and signing keys are.
`kya_check_action`read-only	Signed verdict: is this action (action, amount, currency, counterparty, payment instrument) inside the agent's mandate and is the credential active? Evaluates the reserved mandate fields; lists the fields it did not evaluate.
`kya_company_agents`read-only	Free, company only. Every credential ever registered for your CNPJ, any status, whoever held the certificate (an accountant, another employee). Request signed with your e-CNPJ over "KYA Brasil: agents <cnpj>" + "at: <ISO time>".
`kya_company_webhook`	Free, company only. Sets the https URL that receives signed events about your agents: credential issued, renewed, suspended, reinstated, revoked. Request signed with your e-CNPJ; url "-" removes it.
`kya_person_agents`read-only	Free, person only: every live credential behind your e-CPF and every CPF check made against each one. Sign "KYA Brasil: my agents\nat: <ISO time>" with the e-CPF (valid 10 minutes).
`kya_principal_match`read-only	Signed answer ($0.01) for a person's agent (principal.kind person): does the CPF you already have match the e-CPF holder behind it? On a match, a subject_ref of your own for that person (stable for you, different for every verifier). The CPF is never stored, published or revealed; 3 non-matching answers per credential stop your checks. The person sees every check.
`kya_prove`	Free. Send both signatures of the challenge. The e-CNPJ chain is validated against ICP-Brasil roots, the CNPJ must match, the certificate must not be revoked (CRL) and the company must be ATIVA; then the credential is issued (90 days, Ed25519-signed).
`kya_register`	Register an AI agent for a Brazilian company: agent key (EVM address or Web Bot Auth Ed25519 key), CNPJ and a mandate (JSON, validated against /.well-known/kya-mandate.schema.json). Returns a one-time challenge the agent signs with its key and the company signs with its e-CNPJ (CMS/PKCS#7). Price covers the checks at issuance.
`kya_renew`	Re-issue the credential for 90 more days. The company signs the renewal challenge with an e-CNPJ in force (not revoked); the company must still be ATIVA at the Receita.
`kya_renew_prove`	Free. Second step of kya_renew: send both signatures of the renewal challenge; the credential is re-issued for 90 days if the e-CNPJ is not revoked and the company is still ATIVA.
`kya_revocations`read-only	Free. Credentials revoked since a date (default: last 30 days), for verifiers that cache credentials.
`kya_revoke`destructive	Free. The company revokes the credential at once (e-CNPJ-signed request). Revocations are listed at /v1/revocations.
`kya_sign_link`read-only	Free. Link for whoever holds the company's e-CNPJ (owner, accountant): give challenge_id and the agent's signature, get the /sign URL. They see agent, company and mandate and sign in the browser (A1 .pfx) or with any ICP-Brasil signer (A3 token, cloud), or run kya-sign (npm @kya-brasil/agent-tools) with the link. The issuer never sees the certificate.
`kya_verify`read-only	Free (50/day per IP). The agent's current credential: principal company, mandate, status (active, suspended, revoked, expired) and signature. Also by key: /v1/agents/by-key?kind=&id=.
`kya_verify_paid`read-only	Same as the free verification, without daily limit, plus a signed receipt of the verification itself (what was checked, when). Pay per call with x402.

Schemas: list_tools.

Similar MCP servers

More from io.github.celfons

Official server.json

{
  "name": "io.github.celfons/kya-brasil",
  "icons": [
    {
      "src": "https://kya-br-agents.marcelfons.workers.dev/icon.svg",
      "sizes": [
        "any"
      ],
      "mimeType": "image/svg+xml"
    }
  ],
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://kya-br-agents.marcelfons.workers.dev/mcp",
      "type": "streamable-http"
    }
  ],
  "version": "0.4.1",
  "websiteUrl": "https://kya-br-agents.marcelfons.workers.dev",
  "description": "KYA backed by a real company: e-CNPJ-signed agent mandates, revocation-checked, signed verdicts"
}