MCP

Introduction

— Servers prove their identity.
— Authorization enforced per-tool.
— Proof of every agentic action.

Aligned with MCP 2026-07-28: stateless, so every request carries its own self-contained proof. Packaged as the org.kya-os/decentralized-authority extension.

1. How It Works

When an AI agent wants to use a tool, both sides prove who they are—like showing ID before entering a building.

2. Proof on Every Request

No handshake to establish first. Each request carries a self-contained, sender-constrained proof the server verifies on its own—so any request can land on any instance.

{
  "method": "tools/call",
  "params": {
    "name": "read_calendar",
    "_meta": {
      "org.kya-os/request-proof": {
        "prf": "org.kya-os/proof.v1",
        "did": "did:key:z6Mk...",
        "requestHash": "sha-256=:...:",
        "jws": "eyJ..."
      }
    }
  }
}

{
  "result": { "...": "..." },
  "_meta": {
    "org.kya-os/response-proof": {
      "jws": "eyJ...",
      "meta": { "did": "did:web:srv...", "responseHash": "sha-256=:...:" }
    }
  }
}

3. Tool Authorization

Tools declare what permissions they need.
The agent checks if the human granted those permissions before calling.

4. Origin Proof

A detached proof binds the tool request and response to identity, session, authorization context, and exact content. It proves origin; it does not assign a position in an audit ledger.

{
  "name": "read_calendar",
  "arguments": { "date": "2026-07-28" },
  "_meta": {
    "org.kya-os/request-proof": {
      "prf": "org.kya-os/proof.v1",
      "delegationRef": "vc_root>del_123",
      "requestHash": "sha-256=:...:",
      "jws": "eyJ..."
    }
  }
}

5. Errors

No proprietary numeric codes. A server that requires the extension rejects an undeclared client with MCP's own -32021 (missing required capability); every KYA-OS verification failure carries a machine-readable error.data.reason.

proof_missing              No request-proof on a gated call
proof_invalid              Holder-of-key proof did not verify
proof_level_insufficient   Assurance below the required level
delegation_invalid         Delegation chain failed verification
delegation_revoked         A credential in the chain was revoked

8. Implementation

Reference implementations:

npm install @kya-os/mcp   # identity, delegation, proof, and audit protocol

import { createAuditTrail } from '@kya-os/mcp/audit';
import { withKyaOs } from '@kya-os/mcp';

See the auditability protocol for recorder contracts, delivery semantics, privacy boundaries, assurance profiles, and offline replay verification.