kya-brasil
Server Details
Know-your-agent for Brazil: e-CNPJ-signed credentials binding AI agents to companies, KYB-checked
- Status
- Healthy
- Last Tested
- Transport
- Streamable HTTP · MCP 2025-11-25
- URL
TDQS
Score is being calculated.
Available Tools
10 toolskya_aboutRead-onlyIdempotentInspect
Free. What KYA Brasil is, how the credential flow works, prices, and where the schemas and signing keys are.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
kya_check_actionRead-onlyInspect
Signed verdict: is this action (action, amount, currency, counterparty) inside the agent's mandate and is the credential active? Evaluates the reserved mandate fields; lists the fields it did not evaluate.
| Name | Required | Description | Default |
|---|---|---|---|
| action | No | Action the agent wants to perform (e.g. pay, order, sign). | |
| amount | No | ||
| currency | No | BRL, USDC, ... | |
| spent_today | No | What this agent already spent today, if you track it (used for max_per_day). | |
| counterparty | No | CNPJ, domain or wallet address of the other side. | |
| credential_id | Yes | credential_id returned by kya_register. |
kya_proveInspect
Free. Send both signatures of the challenge. The e-CNPJ chain is validated against ICP-Brasil roots, the CNPJ must match, KYB Brasil must clear the company; then the credential is issued (90 days, Ed25519-signed).
| Name | Required | Description | Default |
|---|---|---|---|
| challenge_id | Yes | challenge.id from kya_register (or kya_renew). | |
| credential_id | Yes | credential_id returned by kya_register. | |
| agent_signature | Yes | Signature of challenge.text by the agent key: EIP-191 personal_sign hex (evm) or raw Ed25519 base64url (web-bot-auth). | |
| ecnpj_signature | Yes | CMS/PKCS#7 SignedData (detached, base64 DER) of challenge.text, signed with the company's e-CNPJ certificate. |
kya_registerInspect
Register an AI agent for a Brazilian company: agent key (EVM address or Web Bot Auth Ed25519 key), CNPJ and a mandate (JSON, validated against /.well-known/kya-mandate.schema.json). Returns a one-time challenge the agent signs with its key and the company signs with its e-CNPJ (CMS/PKCS#7). Price covers the KYB check at issuance.
| Name | Required | Description | Default |
|---|---|---|---|
| cnpj | Yes | The company's CNPJ, with or without punctuation. | |
| agent | Yes | ||
| mandate | Yes | Mandate JSON validated by https://kya-br-agents.marcelfons.workers.dev/.well-known/kya-mandate.schema.json. Reserved fields: actions, max_per_operation, max_per_day, currencies, counterparties, valid_from, valid_until. |
kya_renewInspect
Re-issue the credential for 90 more days if KYB Brasil still clears the company. The company signs the renewal challenge with its e-CNPJ.
| Name | Required | Description | Default |
|---|---|---|---|
| credential_id | Yes | credential_id returned by kya_register. |
kya_renew_proveInspect
Free. Second step of kya_renew: send both signatures of the renewal challenge; the credential is re-issued for 90 days if KYB Brasil still clears the company.
| Name | Required | Description | Default |
|---|---|---|---|
| challenge_id | Yes | challenge.id from kya_register (or kya_renew). | |
| credential_id | Yes | credential_id returned by kya_register. | |
| agent_signature | Yes | Signature of challenge.text by the agent key: EIP-191 personal_sign hex (evm) or raw Ed25519 base64url (web-bot-auth). | |
| ecnpj_signature | Yes | CMS/PKCS#7 SignedData (detached, base64 DER) of challenge.text, signed with the company's e-CNPJ certificate. |
kya_revocationsRead-onlyIdempotentInspect
Free. Credentials revoked since a date (default: last 30 days), for verifiers that cache credentials.
| Name | Required | Description | Default |
|---|---|---|---|
| since | No |
kya_revokeDestructiveInspect
Free. The company revokes the credential at once (e-CNPJ-signed request). Revocations are listed at /v1/revocations.
| Name | Required | Description | Default |
|---|---|---|---|
| reason | No | ||
| signed_text | Yes | Exactly "KYA Brasil: revoke <credential_id>" followed by a newline and a nonce of your choice. | |
| credential_id | Yes | credential_id returned by kya_register. | |
| ecnpj_signature | Yes | CMS/PKCS#7 SignedData (detached, base64 DER) of signed_text with the company's e-CNPJ. |
kya_verifyRead-onlyInspect
Free (50/day per IP). The agent's current credential: principal company, mandate, KYB snapshot, status (active, suspended, revoked, expired) and signature. Also by key: /v1/agents/by-key?kind=&id=.
| Name | Required | Description | Default |
|---|---|---|---|
| agent | No | Alternative to credential_id: look up active credentials by agent key. | |
| credential_id | No | credential_id returned by kya_register. |
kya_verify_paidRead-onlyInspect
Same as the free verification, without daily limit, plus a signed receipt of the verification itself (what was checked, when). Pay per call with x402.
| Name | Required | Description | Default |
|---|---|---|---|
| credential_id | Yes | credential_id returned by kya_register. |
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
2 tool updates
- Changed
kya_register4 fields changed- changed
Input schema / properties / agent / properties / id / descriptionPrevious value: -"0x address for evm; base64url raw Ed25519 public key for web-bot-auth."New value: +"0x address for evm; base64url raw Ed25519 public key for web-bot-auth; eip155:<chainId>:<identityRegistry>:<agentId> for erc8004." - changed
Input schema / properties / agent / properties / id / maxLengthPrevious value: -128New value: +160 - changed
Input schema / properties / agent / properties / kind / descriptionPrevious value: -"evm: an Ethereum-style wallet (EIP-191 signatures). web-bot-auth: an Ed25519 key (RFC 9421 / Web Bot Auth)."New value: +"evm: an Ethereum-style wallet (EIP-191 signatures). web-bot-auth: an Ed25519 key (RFC 9421 / Web Bot Auth). erc8004: an agent registered in an ERC-8004 Identity Registry; its on-chain agentWallet signs." - changed
Input schema / properties / agent / properties / kind / enumPrevious value: -[ - "evm", - "web-bot-auth" -]New value: +[ + "evm", + "web-bot-auth", + "erc8004" +]
- Changed
kya_verify4 fields changed- changed
Input schema / properties / agent / properties / id / descriptionPrevious value: -"0x address for evm; base64url raw Ed25519 public key for web-bot-auth."New value: +"0x address for evm; base64url raw Ed25519 public key for web-bot-auth; eip155:<chainId>:<identityRegistry>:<agentId> for erc8004." - changed
Input schema / properties / agent / properties / id / maxLengthPrevious value: -128New value: +160 - changed
Input schema / properties / agent / properties / kind / descriptionPrevious value: -"evm: an Ethereum-style wallet (EIP-191 signatures). web-bot-auth: an Ed25519 key (RFC 9421 / Web Bot Auth)."New value: +"evm: an Ethereum-style wallet (EIP-191 signatures). web-bot-auth: an Ed25519 key (RFC 9421 / Web Bot Auth). erc8004: an agent registered in an ERC-8004 Identity Registry; its on-chain agentWallet signs." - changed
Input schema / properties / agent / properties / kind / enumPrevious value: -[ - "evm", - "web-bot-auth" -]New value: +[ + "evm", + "web-bot-auth", + "erc8004" +]
10 tool updates
- First observed
kya_about - First observed
kya_check_action - First observed
kya_prove - First observed
kya_register - First observed
kya_renew - First observed
kya_renew_prove - First observed
kya_revocations - First observed
kya_revoke - First observed
kya_verify - First observed
kya_verify_paid
Related MCP Connectors
KYA identity verification, trust scoring, and performance bonds for AI agents
W3C DID issuance and verification for autonomous AI agents
Agentic identity trust: precision decisioning, cryptographic release tokens, hash-chained proof
Brazilian public data API for AI agents. BCB, IBGE, CVM, B3, compliance. x402 payments on Base.
Related MCP Servers
- AlicenseNot gradedqualityCmaintenanceW3C DID resolution and agent KYC for autonomous agent counterparties, enabling identity verification and trust scoring.MIT
- AlicenseNot gradedqualityDmaintenanceDecentralized KYC identity protocol for AI agents. Proves there's a verified human behind any bot using Zero-Knowledge Proofs. No servers, no PII stored.2 npm5MIT
- AlicenseNot gradedqualityCmaintenanceEU Digital Identity Wallet (eIDAS 2.0) for AI agents, compliant with MCP protocol and EU AI Act.37 PyPIMIT
- AlicenseNot gradedqualityDmaintenanceKYA (Know Your Agent) identity, trust scoring, and insurance protocol for autonomous AI agents. Issues verifiable credentials, computes real-time trust scores, and provides agent liability coverage on Base L2.MIT
Glama MCP Gateway
Add one secure layer between your agents and this server.