kya-brasil

io.github.celfons/kya-brasilVersion 0.4.1

KYA backed by a real company: e-CNPJ-signed agent mandates, revocation-checked, signed verdicts

Status

Responds1258 msNov 14, 2026, 14:47 UTCAnswered our handshake without sign-in.

Registry data may be out of date

We could not refresh it, so this page shows the last copy.

Last checked: Nov 14, 2026, 14:47 UTC
Latency: 1258 ms
Remotes responding: 1 of 1
Sign-in: No sign-in
Hosting: Hosted outside the EU (detected)
Registry data as of: Nov 14, 2026, 22:14 UTC

Data from the official MCP Registry, checked by run.zero. How we check

Connect

Streamable HTTP

https://kya-br-agents.marcelfons.workers.dev/mcpResponds1258 msNov 14, 2026, 14:47 UTC

No sign-in

Claude Code

claude mcp add --transport http kya-brasil https://kya-br-agents.marcelfons.workers.dev/mcp

Claude Desktop and claude.ai

1
2
3

Settings > Connectors > Add custom connector
Name: kya-brasil
Remote MCP server URL: https://kya-br-agents.marcelfons.workers.dev/mcp

Cursor

{
  "mcpServers": {
    "kya-brasil": {
      "url": "https://kya-br-agents.marcelfons.workers.dev/mcp"
    }
  }
}

VS Code

code --add-mcp '{"name":"kya-brasil","type":"http","url":"https://kya-br-agents.marcelfons.workers.dev/mcp"}'

Built your own server? run.zero hosts MCP servers on European infrastructure.

Host your own MCP server on run.zero

Tools

15 tools

Tools of kya-brasil
	Description		Read-only	Idempotent	Open world
`kya_about`Free. What KYA Brasil is, how the credential flow works, prices, and where the schemas and signing keys are.	Free. What KYA Brasil is, how the credential flow works, prices, and where the schemas and signing keys are.	Not declared	Yes	Yes	Not declared
`kya_check_action`Signed verdict: is this action (action, amount, currency, counterparty, payment instrument) inside the agent's mandate and is the credential active? Evaluates the reserved mandate fields; lists the fields it did not evaluate.	Signed verdict: is this action (action, amount, currency, counterparty, payment instrument) inside the agent's mandate and is the credential active? Evaluates the reserved mandate fields; lists the fields it did not evaluate.	Not declared	Yes	Not declared	Yes
`kya_company_agents`Free, company only. Every credential ever registered for your CNPJ, any status, whoever held the certificate (an accountant, another employee). Request signed with your e-CNPJ over "KYA Brasil: agents <cnpj>" + "at: <ISO time>".	Free, company only. Every credential ever registered for your CNPJ, any status, whoever held the certificate (an accountant, another employee). Request signed with your e-CNPJ over "KYA Brasil: agents <cnpj>" + "at: <ISO time>".	Not declared	Yes	Not declared	Yes
`kya_company_webhook`Free, company only. Sets the https URL that receives signed events about your agents: credential issued, renewed, suspended, reinstated, revoked. Request signed with your e-CNPJ; url "-" removes it.	Free, company only. Sets the https URL that receives signed events about your agents: credential issued, renewed, suspended, reinstated, revoked. Request signed with your e-CNPJ; url "-" removes it.	Not declared	Not declared	Yes	Yes
`kya_person_agents`Free, person only: every live credential behind your e-CPF and every CPF check made against each one. Sign "KYA Brasil: my agents\nat: <ISO time>" with the e-CPF (valid 10 minutes).	Free, person only: every live credential behind your e-CPF and every CPF check made against each one. Sign "KYA Brasil: my agents\nat: <ISO time>" with the e-CPF (valid 10 minutes).	Not declared	Yes	Not declared	Yes
`kya_principal_match`Signed answer ($0.01) for a person's agent (principal.kind person): does the CPF you already have match the e-CPF holder behind it? On a match, a subject_ref of your own for that person (stable for you, different for every verifier). The CPF is never stored, published or revealed; 3 non-matching answers per credential stop your checks. The person sees every check.	Signed answer ($0.01) for a person's agent (principal.kind person): does the CPF you already have match the e-CPF holder behind it? On a match, a subject_ref of your own for that person (stable for you, different for every verifier). The CPF is never stored, published or revealed; 3 non-matching answers per credential stop your checks. The person sees every check.	Not declared	Yes	Not declared	Yes
`kya_prove`Free. Send both signatures of the challenge. The e-CNPJ chain is validated against ICP-Brasil roots, the CNPJ must match, the certificate must not be revoked (CRL) and the company must be ATIVA; then the credential is issued (90 days, Ed25519-signed).	Free. Send both signatures of the challenge. The e-CNPJ chain is validated against ICP-Brasil roots, the CNPJ must match, the certificate must not be revoked (CRL) and the company must be ATIVA; then the credential is issued (90 days, Ed25519-signed).	Not declared	Not declared	Not declared	Yes
`kya_register`Register an AI agent for a Brazilian company: agent key (EVM address or Web Bot Auth Ed25519 key), CNPJ and a mandate (JSON, validated against /.well-known/kya-mandate.schema.json). Returns a one-time challenge the agent signs with its key and the company signs with its e-CNPJ (CMS/PKCS#7). Price covers the checks at issuance.	Register an AI agent for a Brazilian company: agent key (EVM address or Web Bot Auth Ed25519 key), CNPJ and a mandate (JSON, validated against /.well-known/kya-mandate.schema.json). Returns a one-time challenge the agent signs with its key and the company signs with its e-CNPJ (CMS/PKCS#7). Price covers the checks at issuance.	Not declared	Not declared	Not declared	Yes
`kya_renew`Re-issue the credential for 90 more days. The company signs the renewal challenge with an e-CNPJ in force (not revoked); the company must still be ATIVA at the Receita.	Re-issue the credential for 90 more days. The company signs the renewal challenge with an e-CNPJ in force (not revoked); the company must still be ATIVA at the Receita.	Not declared	Not declared	Not declared	Yes
`kya_renew_prove`Free. Second step of kya_renew: send both signatures of the renewal challenge; the credential is re-issued for 90 days if the e-CNPJ is not revoked and the company is still ATIVA.	Free. Second step of kya_renew: send both signatures of the renewal challenge; the credential is re-issued for 90 days if the e-CNPJ is not revoked and the company is still ATIVA.	Not declared	Not declared	Not declared	Yes
`kya_revocations`Free. Credentials revoked since a date (default: last 30 days), for verifiers that cache credentials.	Free. Credentials revoked since a date (default: last 30 days), for verifiers that cache credentials.	Not declared	Yes	Yes	Not declared
`kya_revoke`Free. The company revokes the credential at once (e-CNPJ-signed request). Revocations are listed at /v1/revocations.	Free. The company revokes the credential at once (e-CNPJ-signed request). Revocations are listed at /v1/revocations.	Yes	Not declared	Not declared	Yes
`kya_sign_link`Free. Link for whoever holds the company's e-CNPJ (owner, accountant): give challenge_id and the agent's signature, get the /sign URL. They see agent, company and mandate and sign in the browser (A1 .pfx) or with any ICP-Brasil signer (A3 token, cloud), or run kya-sign (npm @kya-brasil/agent-tools) with the link. The issuer never sees the certificate.	Free. Link for whoever holds the company's e-CNPJ (owner, accountant): give challenge_id and the agent's signature, get the /sign URL. They see agent, company and mandate and sign in the browser (A1 .pfx) or with any ICP-Brasil signer (A3 token, cloud), or run kya-sign (npm @kya-brasil/agent-tools) with the link. The issuer never sees the certificate.	Not declared	Yes	Not declared	Yes
`kya_verify`Free (50/day per IP). The agent's current credential: principal company, mandate, status (active, suspended, revoked, expired) and signature. Also by key: /v1/agents/by-key?kind=&id=.	Free (50/day per IP). The agent's current credential: principal company, mandate, status (active, suspended, revoked, expired) and signature. Also by key: /v1/agents/by-key?kind=&id=.	Not declared	Yes	Not declared	Yes
`kya_verify_paid`Same as the free verification, without daily limit, plus a signed receipt of the verification itself (what was checked, when). Pay per call with x402.	Same as the free verification, without daily limit, plus a signed receipt of the verification itself (what was checked, when). Pay per call with x402.	Not declared	Yes	Not declared	Yes

Details

Registry status: Active
Published: Oct 13, 2026
Updated: Oct 13, 2026
Website: https://kya-br-agents.marcelfons.workers.dev/⁠ (opens in a new tab)
Repository: Not given
Categories (suggested): Developer toolsSuggested categories are assigned automatically from the registry text and may be wrong. Verified operators can correct them.
GDPR: Not declared

Are you the operator? Claim this listing