No Client Identity
Create one to connect to servers
Type Reference
The real protocol surface: the wire-model types from @kya-os/mcp and the published JSON Schema registry at schema.kya-os.org. Field definitions, TypeScript interfaces, examples, and canonical schema links.
Showing 7 of 7 wire-model types · 31 published schemas below
Per-Request Proof (v1)
The stateless holder-of-key proof every request carries - the core of the v1 wire model
Response Proof & Audit
The server's detached response proof and the consent step-up challenge it can bind
Identity & Delegation
The Entity Card that anchors identity, and the W3C VC delegation credential that conveys authority
Published Schema Registry
Every wire artifact has a canonical JSON Schema at schema.kya-os.org (31 schemas; list vendored from schema-index.json).
proof
The detached response proof- /v1/protocol/proof/detached/v1.0.0KYA-OS Detached Proof
mcp-extension
The org.kya-os/decentralized-authority settings object- /v1/protocol/mcp-extension/settings/v1.0.0KYA-OS MCP Extension Settings
identity
The Entity Card- /v1/protocol/identity/card/v1.1.0KYA-OS Entity Card
authorization
The consent step-up challenge- /v1/protocol/authorization/needs-authorization/v1.0.0KYA-OS Needs-Authorization Error
delegation
W3C VC delegation credentials and revocation status lists- /v1/protocol/delegation/credential/v1.0.0KYA-OS Delegation Credential
- /v1/protocol/delegation/credential/v1.1.0KYA-OS Delegation Credential (W3C VC 2.0 + ZCAP-LD profile)
- /v1/protocol/delegation/status-list/v1.0.0KYA-OS StatusList2021 Credential
well-known
Out-of-band discovery- /v1/protocol/well-known/v1.0.0KYA-OS Discovery Document
audit
The verifiable audit trail: entries, checkpoints, receipts, RFC 9162 proofs, and replay bundles- /v1/protocol/audit/record/v1.0.0KYA-OS Audit Record
- /v1/protocol/audit/entry/v1.0.0KYA-OS Audit Entry Core v1
- /v1/protocol/audit/signed-entry/v1.0.0KYA-OS Signed Audit Entry v1
- /v1/protocol/audit/event/v1.0.0KYA-OS Audit Producer Event v1
- /v1/protocol/audit/checkpoint/v1.0.0KYA-OS Audit Checkpoint Core v1
- /v1/protocol/audit/signed-checkpoint/v1.0.0KYA-OS Signed Audit Checkpoint v1
- /v1/protocol/audit/receipt/v1.0.0KYA-OS Audit Recorder Receipt Core v1
- /v1/protocol/audit/signed-receipt/v1.0.0KYA-OS Signed Audit Recorder Receipt v1
- /v1/protocol/audit/ingest-response/v1.0.0KYA-OS Audit Ingest Response v1
- /v1/protocol/audit/inclusion-proof/v1.0.0KYA-OS RFC 9162 Inclusion Proof v1
- /v1/protocol/audit/consistency-proof/v1.0.0KYA-OS RFC 9162 Consistency Proof v1
- /v1/protocol/audit/observation/v1.0.0KYA-OS Independent Checkpoint Observation Receipt v1
- /v1/protocol/audit/anchor-receipt/v1.0.0KYA-OS Supporting Checkpoint Anchor Receipt v1
- /v1/protocol/audit/replay-bundle/v1.0.0KYA-OS Audit Replay Bundle v1
- /v1/protocol/audit/bundle-component/v1.0.0KYA-OS Audit Replay Bundle Component v1
- /v1/protocol/audit/bundle-manifest/v1.0.0KYA-OS Audit Bundle Manifest Core v1
- /v1/protocol/audit/signed-bundle-manifest/v1.0.0KYA-OS Signed Audit Bundle Manifest v1
- /v1/protocol/audit/bundle-inclusion-proof/v1.0.0KYA-OS Audit Bundle Inclusion Proof v1
- /v1/protocol/audit/bundle-consistency-proof/v1.0.0KYA-OS Audit Bundle Consistency Proof v1
- /v1/protocol/audit/verification-policy/v1.0.0KYA-OS Out-of-Band Audit Verification Policy v1
- /v1/protocol/audit/verification-report/v1.0.0KYA-OS Audit Verification Report v1
handshake (legacy)
Pre-v1 session establishment - read-compat only; v1 has no handshake- /v1/protocol/handshake/request/v1.0.0KYA-OS Handshake Requestlegacy
- /v1/protocol/handshake/response/v1.0.0KYA-OS Handshake Responselegacy
Proof Explorer
See ProofMeta and DetachedProof in action
Live Client
See request and response proofs on the wire
Delegation Builder
Build DelegationConstraints interactively
Error Decoder
Debug StructuredError codes
Using @kya-os/mcp
Installation
npm install @kya-os/mcpImporting Types
// Response proof + extension surface (main entry)
import {
DetachedProof,
ProofMeta,
NeedsAuthorizationError,
KyaOsExtensionSettings,
KYA_OS_EXTENSION_ID,
} from "@kya-os/mcp";
// Per-request proof + Entity Card (card subpath)
import { CardProofMeta, buildCardProof, verifyCardProof } from "@kya-os/mcp/card";
// Delegation chains
import { validateDelegationChain } from "@kya-os/mcp/delegation";Runtime Validation
// Wire artifacts validate against the published registry schemas
// (each card above links to its canonical URL), e.g.:
// https://schema.kya-os.org/v1/protocol/proof/detached/v1.0.0
// The reference implementation ships matching Zod schemas:
import { CardProofMetaSchema } from "@kya-os/mcp/card";
const parsed = CardProofMetaSchema.safeParse(untrustedProof);
if (parsed.success) {
// parsed.data is a typed CardProofMeta
}