io.github.celfons/kya-brasil

io.github.celfons/kya-brasil · v0.4.1 · agents-and-memory

io.github.celfons/kya-brasil is healthy: it completed an MCP handshake in 4882 ms and exposes 15 tools.

KYA backed by a real company: e-CNPJ-signed agent mandates, revocation-checked, signed verdicts

Endpoint: https://kya-br-agents.marcelfons.workers.dev/mcp (streamable-http)

No repository listed · Website · JSON · Add to my inventory

Facts

Users (last 30 days)0
HandshakeHealthy
Auth neededNone
Tool count15
Latency4882 ms
Last checked (UTC)2026-10-15T03:10:47.654Z

Health history

Checked (UTC)StatusLatencyError
2026-10-15T03:10:47.654ZHealthy4882

Tools (15)

kya_registerRegister an AI agent for a Brazilian company: agent key (EVM address or Web Bot Auth Ed25519 key), CNPJ and a mandate (JSON, validated against /.well-known/kya-mandate.schema.json). Returns a one-time challenge the agent signs with its key and the company signs with its e-CNPJ (CMS/PKCS#7). Price co
kya_verify_paidSame as the free verification, without daily limit, plus a signed receipt of the verification itself (what was checked, when). Pay per call with x402.
kya_check_actionSigned verdict: is this action (action, amount, currency, counterparty, payment instrument) inside the agent's mandate and is the credential active? Evaluates the reserved mandate fields; lists the fields it did not evaluate.
kya_renewRe-issue the credential for 90 more days. The company signs the renewal challenge with an e-CNPJ in force (not revoked); the company must still be ATIVA at the Receita.
kya_proveFree. Send both signatures of the challenge. The e-CNPJ chain is validated against ICP-Brasil roots, the CNPJ must match, the certificate must not be revoked (CRL) and the company must be ATIVA; then the credential is issued (90 days, Ed25519-signed).
kya_principal_matchSigned answer ($0.01) for a person's agent (principal.kind person): does the CPF you already have match the e-CPF holder behind it? On a match, a subject_ref of your own for that person (stable for you, different for every verifier). The CPF is never stored, published or revealed; 3 non-matching ans
kya_person_agentsFree, person only: every live credential behind your e-CPF and every CPF check made against each one. Sign "KYA Brasil: my agents\nat: <ISO time>" with the e-CPF (valid 10 minutes).
kya_sign_linkFree. Link for whoever holds the company's e-CNPJ (owner, accountant): give challenge_id and the agent's signature, get the /sign URL. They see agent, company and mandate and sign in the browser (A1 .pfx) or with any ICP-Brasil signer (A3 token, cloud), or run kya-sign (npm @kya-brasil/agent-tools)
kya_verifyFree (50/day per IP). The agent's current credential: principal company, mandate, status (active, suspended, revoked, expired) and signature. Also by key: /v1/agents/by-key?kind=&id=.
kya_renew_proveFree. Second step of kya_renew: send both signatures of the renewal challenge; the credential is re-issued for 90 days if the e-CNPJ is not revoked and the company is still ATIVA.
kya_revokeFree. The company revokes the credential at once (e-CNPJ-signed request). Revocations are listed at /v1/revocations.
kya_company_agentsFree, company only. Every credential ever registered for your CNPJ, any status, whoever held the certificate (an accountant, another employee). Request signed with your e-CNPJ over "KYA Brasil: agents <cnpj>" + "at: <ISO time>".
kya_company_webhookFree, company only. Sets the https URL that receives signed events about your agents: credential issued, renewed, suspended, reinstated, revoked. Request signed with your e-CNPJ; url "-" removes it.
kya_revocationsFree. Credentials revoked since a date (default: last 30 days), for verifiers that cache credentials.
kya_aboutFree. What KYA Brasil is, how the credential flow works, prices, and where the schemas and signing keys are.