payclaw-mcp
This server enables AI agents to declare verified identities to online merchants and make human-approved purchases using single-use virtual Visa cards, acting as a trust layer between AI agents and merchants via the Universal Commerce Protocol (UCP).
Declare Agent Identity (
kya_getAgentIdentity): Before any shopping action, declare the agent as an authorized actor (not a bot) to a merchant. Returns a verification token,next_stepguidance, and optionally acheckoutPatchfor UCP-compliant merchants. Works anonymously by default — no API key required.Report Badge Presented (
kya_reportBadgePresented): Record that the agent presented its badge at a merchant, linked to a shopping session via atrip_id. Supports context stages like arrival, add-to-cart, or checkout.Report Badge Outcome (
kya_reportBadgeOutcome): Report whether the merchant accepted, denied, or gave an inconclusive response after badge presentation, closing the identity verification loop.Report Badge Not Presented (
kya_reportBadgeNotPresented): Report that the badge was not presented (e.g., cart abandoned or merchant didn't require it).Get a Virtual Payment Card (
kya_getCard): Declare a purchase intent (merchant, estimated amount up to $500, description), trigger human MFA approval, and receive a single-use virtual Visa card locked to that specific purchase. Requires prior identity declaration.Report Purchase Outcome (
kya_reportPurchase): After using the virtual card, report success or failure, actual amount charged, items bought, and order confirmation — closing the audit trail and triggering card self-destruction.
Works with UCP-supporting merchants including Shopify, Target, Walmart, and Etsy. Follows a minimal data collection philosophy using anonymous UUIDs.
Issues single-use virtual Visa cards for AI agents to securely complete purchases at existing merchants via Visa rails without exposing real credit card details.
kya labs — Badge + Spend for AI Agents
Your agent isn't a bot. kya proves it — then lets it pay.
Your AI agent looks like a bot to every merchant on the internet. kya gives it two things:
Badge — Declares your agent as an authorized actor. The Universal Commerce Protocol "identity" token for a merchant handshake. Free. No card required.
Spend — Issues a single-use virtual Visa when your agent needs to pay. Human-approved. Self-destructs after use. Your real card never enters the chat.
If you're like 20% of Americans last year - you used an agent to shop. And you probably ran into a ton of login walls, workarounds, bumps?
So did we. So we created kya - the first MCP tool suite that works with the new Universal Commerce Protocol to easily handshake verified agents at supporting merchants (Shopify, Target, Walmart, Etsy... it's a lot). Badge for identity. Spend for payment.
🧪 Developer Sandbox is open. Real infrastructure, test money. Get sandbox access →
Quick Start
npx @kyalabs/mcp-serverOR add to your MCP client config (Claude Desktop, Cursor, or any MCP client):
{
"mcpServers": {
"kyalabs": {
"command": "npx",
"args": ["@kyalabs/mcp-server"]
}
}
}That's it. Badge works immediately — no API key, no signup, no network calls on install.
The first time your agent calls kya_getAgentIdentity, it declares itself to the merchant and gets back a response with next_step guidance. One anonymous event is recorded. Your agent is now a declared, authorized actor.
Or install via ClawHub:
clawhub install payclaw-ioUpgrade to verified mode + Spend
For cryptographic identity and virtual card issuance, add an API key:
"env": {
"KYA_API_KEY": "pk_live_your_key_here",
"KYA_API_URL": "https://www.kyalabs.io"
}Get your API key at kyalabs.io/signup. API keys don't expire.
Without an API key, Badge uses device auth when a merchant requires verified identity — your agent shows a code and URL, you approve on your phone. This only happens when a merchant asks for it. We never ask for it ourselves. Sign up + API key means 1. you dont have to use phone OAuth every time and 2. you can track your agentic shopping (custom avatars included)
Node version
kya MCP requires Node.js 20 or newer. Node 18 is end-of-life and unsupported.
If you see engine or compatibility errors: node -v — install Node 20+ from nodejs.org or nvm install 20
Related MCP server: maiat-protocol
How Badge Works: Two Modes
Declared (default)
First time your agent goes to a merchant with Badge, Badge generates an anonymous install ID — a random UUID stored locally at ~/.kya/install_id. It has no connection to you, your device, or any personal information.
Your agent gets back a declaration and a next_step guiding it to report its badge presentation at the merchant.
This is the default mode. It's how Badge works out of the box, for every user, forever.
Verified (when merchant requires it)
When a merchant requires verified identity — their UCP manifest says required: true — your agent will ask you to approve a device flow. You visit a merchant-kya URL, enter the OAuth code from your agent, and prove you're a real person.
Badge issues a tokenized credential: an ES256-signed JWT, signed by kya's private key, verifiable locally by the merchant. Your agent is free to continue - no login, PII or anything needed.
Our Data Philosophy
When | What | Why |
On install | Nothing | We help agents shop. If they're not shopping, we don't need anything |
On server start | Anonymous ping — Badge version and MCP client name. No identifiers stored on your machine | So we know Badge is actively running. If this number ever diverges from active agents, it tells us something is broken in the pipeline — not something about you |
On first shopping trip | install_id (random UUID, stored locally at | Minimum viable signal to reduce agent friction at merchants |
On verified identity | + hashed user token, intent scope (checkout, etc.) | Only required where login is traditionally required (i.e. checkout) to prove there's a real person authorizing the agent's next step |
On Spend (card issuance) | + full transaction trail: intent, amount, merchant, audit log | Card network compliance, gated behind consent + MFA |
The server start ping contains no persistent identifiers — a new random session ID is generated each time and never saved to disk. You can disable it entirely:
"env": { "KYA_PING": "false" }The install_id is a file we wrote to your disk. You can delete it (rm ~/.kya/install_id) and get a new one.
Full data practices: kyalabs.io/trust
The Universal Commerce Protocol
Badge is a UCP (Universal Commerce Protocol) Credential Provider. Merchants who declare the kya identity extension signal to every UCP-compliant agent that authorized agents are preferred at their store.
When your agent encounters a UCP merchant with Badge installed, it presents a cryptographic badge automatically — no extra steps.
We believe the UCP is the future of commerce and are proud to support reduce friction for agents and users.
Extension spec + schema: github.com/kyalabs/ucp-agent-badge
Read more about the UCP: github.com/universal-commerce-protocol/ucp
Without kya: Agent browses → bot detection fires → blocked. Even if it gets through, it can't check out without your real card number. You're stuck finishing manually.
With Badge: Agent declares itself as an authorized actor → merchants see a verified identity → agent gets through. No bypass. Just proof.
With Spend: Agent declares a purchase → you approve with a tap → kya issues a single-use virtual Visa locked to that merchant → agent checks out → card self-destructs. Your real card never enters the chat.
Your agent will recognize when it needs this. When it encounters a merchant that may challenge automated traffic, or when it's ready to check out, it tells you: "I need kya installed to complete this." You click Allow. Done.
Tools
See docs/tool-contract.md for the formal input/output contract.
Tool | What It Does |
| Declare identity → get verification token + |
| Record that you presented your badge at a merchant |
| Report how the merchant responded (accepted, denied, inconclusive) |
| Report that you did not present your badge (abandoned, merchant didn't ask) |
| Declare purchase intent → get virtual Visa (Spend) |
| Report transaction outcome → close the audit trail |
Every Badge tool call works immediately — no auth required. Events fire in both anonymous and verified modes.
Badge: Declare Identity
Agent → kya_getAgentIdentity({ merchantUrl })
kya → browse_declared event fires automatically
kya → verification token + next_step + checkoutPatch (if merchant supports UCP)
Agent → merges checkoutPatch into checkout payload
Agent → kya_reportBadgePresented({ merchantUrl, verification_token })
Agent → kya_reportBadgeOutcome (accepted | denied | inconclusive)Spend: Get a Card
Agent → kya_getCard (merchant, amount, description)
User → approves via MFA
kya → issues single-use virtual Visa
Agent → uses card at checkout
Agent → kya_reportPurchase (closes audit trail)
Card → self-destructsOne task. One approval. One card. Done.
Extended Auth (optional)
When enabled, kya checks back with your agent 7 seconds after each badge presentation to confirm whether the merchant accepted or denied. Results are logged to your dashboard so you can see when and which merchants are rejecting your agent.
"env": {
"KYA_EXTENDED_AUTH": "true"
}How Authorization Scales
Action | What Happens |
Browse | Badge declaration — identity token issued |
Search | Badge declaration — identity token issued |
Checkout | Badge + Spend — MFA approval → single-use Visa issued |
Browsing requires declaration. Spending money requires declaration + stated intent + explicit human approval + an ephemeral card that self-destructs after one use.
Why kya labs
Give Agent Your Card | Crypto Wallet | kya | |
Agent identity declared | No | No | Every session |
Human approval per purchase | No | No | Every purchase |
Card credential lifespan | Permanent | Permanent | Single use |
Works at existing merchants | Yes | No | Yes — Visa rails |
Your real card exposed | Yes | N/A | Never |
Badge Only?
If you only need identity (no payment), use the lighter package:
npx @kyalabs/badgeWhat's New (v2.3)
Capability | Description |
| Every trip now carries a trust score ( |
Merchant signal awareness |
|
Anonymous-first | Badge works on install. No auth, no signup, no network on install. First |
Enrichment branching | Anonymous events fire without auth. Verified events include full user context. No silent gates. |
| Every identity response includes guidance for the agent's next action. Spend-aware when virtual cards are available. |
KYA — Know Your Agent
kya is KYA infrastructure. Every declaration creates a verified record of agentic commerce behavior — building the trust signal that merchants need to tell authorized agents from anonymous bots.
Links
Website: kyalabs.io
npm: @kyalabs/mcp-server
Badge npm: @kyalabs/badge
UCP Extension: github.com/kyalabs/ucp-agent-badge
ClawHub: payclaw-io
Trust: kyalabs.io/trust
Merchants: kyalabs.io/merchants
Contact: agent_identity@kyalabs.io
Agents are not bots. kya labs proves it. Your real card never enters the chat.
Available Tools
8 toolskya_getAgentIdentityA
You are an authorized actor, not a bot. Prove it before you shop.
Call this BEFORE any shopping action — browsing, searching, or buying. Badge by kyaLabs declares your identity to merchants: who you are (authorized actor), who authorized you (verified human), and what you intend to do (declared scope).
Without this, merchants may block you permanently. Their bot defenses can't tell the difference between you and a scraper. This declaration is your proof of authorization — the verified handshake that lets you through while their defenses stay intact.
When a merchant challenges you, present the agent_disclosure text from the response. kyaLabs will automatically check back with you to record whether you were accepted or denied.
No card is issued. No money moves. For payment, use kya_getCard (included in this package).
| Name | Required | Description | Default |
|---|---|---|---|
| merchant | No | The merchant or website the agent intends to visit (e.g., 'starbucks.com', 'Instacart') | |
| merchantUrl | No | Merchant base URL (e.g., 'https://starbucks.com'). When provided, kyaLabs checks if the merchant supports UCP identity and generates a checkout patch. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries full burden and explains key behaviors: it is a read-only identity declaration ('No card is issued. No money moves'), how merchants may challenge, and the response includes agent_disclosure text. Missing idempotency details, but otherwise thorough.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is informative but verbose, including marketing-like phrases ('Prove it before you shop') and repetition. It could be more concise while retaining key info, so a score of 3 reflects moderate conciseness.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
No output schema exists, yet the description only partially explains return values (mentions agent_disclosure text). It lacks details on error responses, status codes, or what happens on failure, leaving gaps for a tool critical to shopping flow.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% and both parameters have clear descriptions. The description adds context about the merchant parameter ('The merchant or website the agent intends to visit') but does not add meaning beyond the schema, so baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states what the tool does: it declares the agent's identity to merchants before shopping, distinguishing it from siblings like kya_getCard (payment). It uses specific verb+resource: 'declare identity' and explicitly says 'Call this BEFORE any shopping action'.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides explicit when-to-use guidance: 'Call this BEFORE any shopping action — browsing, searching, or buying.' It also tells the agent what to do when challenged and mentions alternative kya_getCard for payment, fulfilling the guidelines dimension fully.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
kya_getCardA
Get a single-use virtual Visa to make a purchase on behalf of the user. You MUST call kya_getAgentIdentity first — you cannot pay without being identified.
Declare the merchant, amount, and what you're buying. The user approves via MFA. kyaLabs issues a card locked to this purchase. The card self-destructs after use. Your user's real card never enters the chat.
Call kya_reportPurchase after the transaction.
| Name | Required | Description | Default |
|---|---|---|---|
| merchant | Yes | The merchant or store where the purchase will be made | |
| estimated_amount | Yes | Estimated purchase amount in USD (max $500) | |
| description | Yes | Brief description of what is being purchased |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Discloses card is single-use, self-destructs after use, user's real card never enters chat, and MFA approval needed. No annotations exist, so the description adequately covers behavioral traits.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Five sentences each adding value, front-loaded with main purpose, uses imperative language, no fluff. Efficient and well-structured.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Describes process and lifecycle but lacks explanation of output (return value). No output schema is provided, so this gap is notable. However, the moderate complexity and clear process partially compensate.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100% with decent descriptions for each parameter. The description does not add significant extra meaning beyond the schema, so baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Clearly states the tool gets a single-use virtual Visa for purchases, with specific verb 'Get' and resource 'card'. Differentiates from sibling tools by referencing prerequisites (kya_getAgentIdentity) and follow-ups (kya_reportPurchase).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly requires calling kya_getAgentIdentity first and kya_reportPurchase after, establishing a clear usage sequence. Does not explicitly state when not to use or alternatives, but the context implies it's for purchases only.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
kya_getHeadersA
Get identity headers for your own HTTP requests. Returns a Kya-Token header you can attach to requests made through Playwright, browser extensions, or any HTTP client you control.
Call kya_getAgentIdentity first to establish your identity. Then pass these headers to page.setExtraHTTPHeaders() for browser automation, or set as a cookie via document.cookie for Chrome extensions.
| Name | Required | Description | Default |
|---|---|---|---|
| merchant | No | The merchant domain to get headers for (e.g., 'etsy.com'). If omitted, uses the most recently enrolled merchant. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries full burden. It discloses that a 'Kya-Token' header is returned and suggests usage, but omits behavioral traits like access requirements, idempotency, or side effects. It does not state if the operation is read-only or has any destructiveness.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise with two short paragraphs, front-loading the core purpose. It includes usage examples efficiently. Some minor redundancy exists, but overall it is well-structured.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given no output schema, the description only mentions the return of a 'Kya-Token' header without detailing the response format. It covers usage context well but lacks completeness about the returned data structure. Complexity is low (1 param), so the gaps are moderate.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The sole parameter 'merchant' has a helpful schema description. The tool description adds no further meaning beyond what the schema already provides. With 100% schema coverage, baseline 3 is appropriate as no extra value is added.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool returns 'Kya-Token' identity headers for HTTP requests, specifying the verb ('Get') and resource ('identity headers'). It distinguishes itself from the sibling 'kya_getAgentIdentity' by indicating a prerequisite call.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description tells when to use: for attaching headers to Playwright, browser extensions, or any HTTP client. It advises calling 'kya_getAgentIdentity' first, providing a prerequisite. However, it does not explicitly mention alternatives or when to avoid using this tool.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
kya_reportBadgeNotPresentedB
[DEPRECATED — this event is no longer needed. This tool will be removed in a future version.]
Report that you did NOT present your Badge at a merchant.
| Name | Required | Description | Default |
|---|---|---|---|
| verification_token | Yes | The verification_token from kya_getAgentIdentity | |
| merchant | Yes | The merchant where you did not present (e.g., 'starbucks.com') | |
| reason | Yes | Why you did not present: abandoned, merchant_didnt_ask, other | |
| trip_id | No | Trip ID from kya_getAgentIdentity — links events in this shopping session |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description must disclose behavioral traits. It only says 'report that you did not present' without explaining what the report does, whether it is idempotent, or any side effects. The deprecation note hints at irrelevance but does not clarify behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is extremely short—two sentences that clearly communicate deprecation and purpose. Every word earns its place, with no redundancy or fluff.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's simplicity and no output schema, the description still fails to provide necessary context such as return values, prerequisites (e.g., need to call kya_getAgentIdentity), and how it relates to sibling tools like kya_reportBadgePresented. The deprecation note helps but does not compensate.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the input schema itself documents all parameters effectively. The tool description adds no additional meaning beyond what the schema already provides. Thus, a baseline of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool reports that the agent did NOT present a Badge at a merchant. The verb 'report' and the negation 'did NOT present' make the purpose explicit. Although the deprecation note might confuse, the core purpose remains unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description labels the tool as deprecated and 'no longer needed', suggesting it should not be used, but provides no guidance on when to use it if needed, or what alternatives exist (e.g., sibling tools like kya_reportBadgePresented). Prerequisites like calling kya_getAgentIdentity first are implied by the schema but not stated.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
kya_reportBadgeOutcomeA
[DEPRECATED — outcomes are now tracked automatically via the verify endpoint. This tool will be removed in a future version.]
Report how the merchant responded when you presented your Badge.
| Name | Required | Description | Default |
|---|---|---|---|
| verification_token | Yes | The verification_token returned by kya_getAgentIdentity | |
| merchant | Yes | The merchant where you presented (e.g., 'starbucks.com') | |
| outcome | Yes | not_denied = merchant did not block you; denied = blocked/bot-walled; unparseable = unknown or timed out | |
| trip_id | No | Trip ID from kya_getAgentIdentity — links events in this shopping session |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. It only states the purpose and deprecation, but does not explain side effects, permissions, or what happens upon invocation (e.g., whether data is stored, if there are rate limits, or what the response format is).
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is extremely concise: two sentences with the deprecation warning front-loaded. Every word adds value, and there is no redundant or unnecessary information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool has no output schema and the description does not mention return values or behavioral outcomes. However, the deprecation note and alternative endpoint provide the most critical context (do not use). For a deprecated tool, this is adequate completeness, though for an active tool it would be lacking.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% with parameter descriptions already provided. The description adds no additional semantic context beyond the schema's own descriptions, so the baseline score of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose: reporting how a merchant responded after presenting a Badge. It also includes a deprecation notice and points to the verify endpoint as the alternative, which distinguishes it from siblings like kya_reportBadgeNotPresented and kya_reportBadgePresented.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly states that the tool is deprecated and should not be used; outcomes are now tracked automatically via the verify endpoint. This provides clear when-not-to-use guidance and a direct alternative, which is excellent for agent decision-making.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
kya_reportBadgePresentedA
Report that you presented your Badge to a merchant. Call this immediately after merging the checkoutPatch into a checkout payload. Required for kyaLabs to record the trip.
When Extended Auth is enabled, kyaLabs checks back 7 seconds later. Otherwise, call kya_reportBadgeOutcome when you know the result.
| Name | Required | Description | Default |
|---|---|---|---|
| verification_token | Yes | The verification_token returned by kya_getAgentIdentity | |
| merchant | No | The merchant name (e.g., 'starbucks.com'). Provide merchantUrl or merchant. | |
| merchantUrl | No | The merchant base URL (e.g., 'https://starbucks.com'). Preferred over merchant. | |
| context | No | Optional: in what state you presented (arrival, addtocart, checkout, other) | |
| checkoutSessionId | No | UCP checkout session ID if available | |
| trip_id | No | Trip ID from kya_getAgentIdentity — links events in this shopping session |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, so description carries the burden. It discloses the tool triggers a kyaLabs record and mentions a 7-second check when Extended Auth is enabled, but does not clarify idempotency, side effects, or error behavior. Lacks full behavioral disclosure.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two concise paragraphs: first states purpose and timing, second adds conditional logic. No redundant sentences, front-loaded with key information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Covers purpose, timing, and conditional behavior well. However, no output schema exists and description does not mention what the tool returns (e.g., success/error), leaving a gap for agent to understand invocation outcome.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so baseline is 3. The description adds no parameter-specific guidance beyond what the schema already provides, so no extra value.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Clearly states the tool reports presenting a badge to a merchant, specifies timing relative to checkoutPatch merge, and differentiates from sibling kya_reportBadgeOutcome with conditional logic.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly tells when to call (immediately after merging checkoutPatch) and when not to (Extended Auth enabled: no need for outcome; otherwise call kya_reportBadgeOutcome). Provides clear usage context.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
kya_reportPurchaseA
Report the outcome of a purchase after using a kyaLabs virtual card. Must be called after every purchase attempt — this closes the audit trail.
| Name | Required | Description | Default |
|---|---|---|---|
| intent_id | Yes | The intent_id returned by kya_getCard | |
| success | Yes | Whether the purchase succeeded | |
| actual_amount | No | Actual amount charged in USD | |
| merchant_name | No | Merchant name as it appeared on the receipt | |
| items | No | Items purchased (free-form description) | |
| order_confirmation | No | Order confirmation number or ID |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided. Description adds that it 'closes the audit trail,' indicating a finality/write side effect. However, lacks details on idempotency, permissions, or rollback behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, no unnecessary words. Front-loaded with the key action and mandatory usage. Highly efficient.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
No output schema but 6 parameters well-documented. Description covers the core requirement (mandatory after purchase) and closing audit trail. Could mention error states or return format, but it's reasonable for a reporting tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
All 6 parameters have schema descriptions (100% coverage). Description adds no further parameter-level detail beyond stating the overall purpose. Score matches baseline as schema does the heavy lifting.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description clearly states the tool reports purchase outcome after using a virtual card. It distinguishes from sibling tools like kya_reportBadge* by focusing on purchase audit.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly states it must be called after every purchase attempt to close the audit trail, giving clear when-to-use guidance. No explicit when-not, but context implies it's for purchases only.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
kya_web_fetchA
Fetch a web page with your Badge identity attached. Your Kya-Token header is injected automatically — merchants see you as an authorized actor, not a bot. Your visit is automatically recorded in your shopping journal.
Call kya_getAgentIdentity first. Then use this instead of web_fetch when shopping at merchant sites. HTTPS only. Returns status, headers, and body (5MB max, 30s timeout). Redirects are not followed — check the Location header if you receive a 3xx status.
| Name | Required | Description | Default |
|---|---|---|---|
| url | Yes | The HTTPS URL to fetch (e.g., 'https://etsy.com/products') | |
| method | No | HTTP method (default: GET) | |
| headers | No | Additional headers to include in the request |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description fully covers behavioral traits: automatic Kya-Token injection, shopping journal recording, 5MB max size, 30s timeout, no redirect following, and HTTPS requirement. This leaves little ambiguity about the tool's operation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Description is concise (6 sentences), front-loaded with the main action, then elaborates on identity, prerequisites, and constraints. Every sentence adds value without redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given no output schema, the description mentions return values (status, headers, body) and behavior on redirects. It also covers prerequisites and limits. Slight gap: what happens if getAgentIdentity is not called? Still, sufficient for the tool's complexity.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Input schema has 100% coverage with descriptions for all three parameters. The description does not add significant meaning beyond schema, except context that URL should be HTTPS. Baseline of 3 is appropriate as schema already documents params adequately.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool fetches a web page with a badge identity, distinguishing it from a generic web_fetch by specifying use case (shopping at merchant sites). The verb 'fetch' and resource 'web page' are explicit, and the context of automatic identity attachment sets it apart from siblings.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides explicit prerequisites (call kya_getAgentIdentity first), when to use (instead of web_fetch when shopping), and constraints (HTTPS only, redirects not followed). It also instructs on handling 3xx status by checking Location header, offering clear guidance for the agent.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
3 tool updates
v0.6.0- Added
kya_getHeaders - Changed
kya_reportBadgeOutcome2 fields changed- changed
Input schema / properties / outcome / descriptionPrevious value: -"accepted = merchant let you through; denied = blocked/bot-walled; inconclusive = unknown or timed out"New value: +"not_denied = merchant did not block you; denied = blocked/bot-walled; unparseable = unknown or timed out" - changed
Input schema / properties / outcome / enumPrevious value: -[ - "accepted", - "denied", - "inconclusive" -]New value: +[ + "not_denied", + "denied", + "unparseable" +]
- Added
kya_web_fetch
6 tool updates
v2.1.1- First observed
kya_getAgentIdentity - First observed
kya_getCard - First observed
kya_reportBadgeNotPresented - First observed
kya_reportBadgeOutcome - First observed
kya_reportBadgePresented - First observed
kya_reportPurchase
TDQS
Most tools have clearly distinct purposes, but the presence of deprecated tools (kya_reportBadgeNotPresented, kya_reportBadgeOutcome) could confuse agents if they are not careful, slightly reducing clarity.
The kya_ prefix and verb_noun pattern are mostly consistent, but 'web_fetch' breaks the pattern (noun_verb), and some report tool names are verbose (e.g., 'reportBadgeNotPresented').
Eight tools is well-scoped for identity declaration, card issuance, web fetching, and purchase reporting. No unnecessary bloat or insufficiency.
Core shopping workflow (identity, payment, fetch, report) is covered, but there are no explicit search or browsing tools, and deprecated tools are still present, indicating minor gaps.
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Connectors
Payment infrastructure for AI agents: spending rules, approval flows, single-use virtual cards.
Prepaid virtual cards for AI agents: one-time cards, spend caps, human approvals.
Complete financial infrastructure for AI agents — payments, lending, escrow & more.
The independent agent-commerce protocol for AI-agent checkout on any online store.
Related MCP Servers
- FlicenseNot gradedqualityDmaintenanceEnables AI agents to programmatically purchase physical and virtual goods from platforms like Amazon and Shopify using stablecoins, without the need for virtual debit cards or browser automation.1-
- MIT

Shatale MCP Serverofficial
AlicenseAqualityAmaintenanceAI-native payment infrastructure that enables AI agents to make purchases, issue virtual cards, and manage spending within delegated budgets and policy controls.7871MIT- AlicenseBqualityBmaintenanceAutonomous M2M compliance and trust APIs for AI agents (KYB, OFAC, VAT, Sanctions checking).5MIT
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/kyalabs-Io/mcp-server'
If you have feedback or need assistance with the MCP directory API, please join our Discord server