@kya-os/mcp 1.7.0 → 1.9.0

package/package.json

@@ -1,9 +1,10 @@
 {
   "name": "@kya-os/mcp",
-  "version": "1.7.0",
+  "version": "1.9.0",
   "description": "Reference implementation of the KYA-OS protocol for Model Context Protocol servers: delegation, proof, and session primitives",
   "license": "MIT",
   "type": "module",
+  "sideEffects": false,
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "exports": {
@@ -11,6 +12,10 @@
       "types": "./dist/index.d.ts",
       "default": "./dist/index.js"
     },
+    "./card": {
+      "types": "./dist/card/index.d.ts",
+      "default": "./dist/card/index.js"
+    },
     "./delegation": {
       "types": "./dist/delegation/index.d.ts",
       "default": "./dist/delegation/index.js"
@@ -51,6 +56,10 @@
       "types": "./dist/authz/index.d.ts",
       "default": "./dist/authz/index.js"
     },
+    "./cheqd": {
+      "types": "./dist/integrations/cheqd/index.d.ts",
+      "default": "./dist/integrations/cheqd/index.js"
+    },
     "./schemas/*.json": "./schemas/*.json",
     "./package.json": "./package.json"
   },
@@ -64,9 +73,15 @@
   "scripts": {
     "build": "tsc",
     "test": "vitest run",
+    "test:e2e:cheqd:testnet": "vitest run src/integrations/cheqd/__tests__/registrar.live.test.ts",
     "test:watch": "vitest",
     "test:coverage": "vitest run --coverage",
     "typecheck": "tsc --noEmit",
+    "conformance": "tsx conformance/bin.ts",
+    "conformance:generate": "tsx conformance/generate-vectors.ts",
+    "conformance:generate:card": "tsx conformance/card-vectors.ts",
+    "conformance:verify:crosslang": "python3 conformance/verify.py",
+    "conformance:typecheck": "tsc --noEmit -p conformance/tsconfig.json",
     "lint": "eslint src --ext .ts",
     "clean": "rm -rf dist",
     "prepublishOnly": "npm run clean && npm run build && npm run test",
@@ -75,13 +90,17 @@
     "example:inspector": "npx @modelcontextprotocol/inspector npx tsx examples/node-server/server.ts --stdio",
     "example:verify-proof": "npx tsx examples/verify-proof/verify.ts",
     "example:anti-mitm": "npx tsx examples/verify-proof/anti-mitm-demo.ts",
+    "example:entity-card": "npx tsx examples/entity-card/walkthrough.ts",
+    "example:entity-card:server": "npx tsx examples/entity-card/server.ts",
+    "example:embedded-agent": "npx tsx examples/embedded-agent/walkthrough.ts",
     "example:authz-inspector": "npx @modelcontextprotocol/inspector npx tsx examples/authz-inspector/src/stdio.ts",
     "example:authz-inspector:http": "npx tsx examples/authz-inspector/src/inspector-http.ts",
     "example:authz-inspector:http:server": "npx tsx examples/authz-inspector/src/http.ts",
-    "example:authz-inspector:stdio:server": "npx tsx examples/authz-inspector/src/stdio.ts"
+    "example:authz-inspector:stdio:server": "npx tsx examples/authz-inspector/src/stdio.ts",
+    "example:cheqd-dlr": "npx tsx examples/cheqd-dlr/operator-flow.ts"
   },
   "dependencies": {
-    "jose": "^5.6.3",
+    "jose": "^6.2.3",
     "json-canonicalize": "^2.0.0",
     "zod": "^4.3.6"
   },
@@ -98,13 +117,14 @@
     "@kya-os/consent": "^0.1.37",
     "@modelcontextprotocol/sdk": "^1.12.1",
     "@types/express": "^5.0.6",
-    "@types/node": "^20.14.9",
+    "@types/node": "^26.0.1",
     "@typescript-eslint/eslint-plugin": "^8.57.0",
     "@typescript-eslint/parser": "^8.57.0",
     "@vitest/coverage-v8": "^2.0.0",
-    "commander": "^14.0.3",
+    "commander": "^15.0.0",
     "eslint": "^10.0.3",
     "express": "^5.2.1",
+    "tsx": "^4.22.4",
     "typescript": "^5.5.3",
     "typescript-eslint": "^8.57.0",
     "vitest": "^2.0.0"

package/schemas/README.md

@@ -8,7 +8,8 @@ This directory contains JSON Schema definitions for the core KYA-OS (Model Conte
 |--------|-------------|
 | [handshake-request.json](./handshake-request.json) | Client-initiated session establishment request |
 | [handshake-response.json](./handshake-response.json) | Server response with session context |
-| [delegation-credential.json](./delegation-credential.json) | W3C Verifiable Credential for delegations |
+| [delegation-credential.json](./delegation-credential.json) | W3C Verifiable Credential for delegations (legacy VC 1.0 shape) |
+| [card-delegation-credential.json](./card-delegation-credential.json) | W3C VC 2.0 + ZCAP-LD delegation profile (Entity Card) |
 | [detached-proof.json](./detached-proof.json) | Cryptographic proof for tool request/response |
 | [well-known-kyaos.json](./well-known-kyaos.json) | Service discovery document |
 

package/schemas/card-delegation-credential.json

@@ -0,0 +1,239 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schema.kya-os.org/v1/protocol/delegation/credential/v1.1.0",
+  "title": "KYA-OS Delegation Credential (W3C VC 2.0 + ZCAP-LD profile)",
+  "description": "A W3C Verifiable Credential 2.0 whose credentialSubject IS an attenuated ZCAP-LD capability. One credential per delegation HOP; a chain runs root -> ... -> leaf. CRISP attenuation is enforced on resolve, fail-closed: a child's allowedAction MUST be a subset of its parent's; caveats are monotone-narrowing (child MaxAmount <= parent, child ValidUntil <= parent, and a parent caveat may never be silently dropped); the parent's delegate (invoker/controller) MUST be the child's issuer; child.parentCapability MUST reference the parent capability id; the invocationTarget is constant along the chain; depth <= 10; and the ROOT's parentCapability equals its invocationTarget with issuer/invocationTarget = the resource owner / resource. responsibleParty is recomputed as the issuer of the root credential; the leaf invoker is asserted equal to the per-request proof key. This schema is a re-profile of the prior draft, not a new artifact.",
+  "type": "object",
+  "required": ["@context", "type", "issuer", "credentialSubject"],
+  "properties": {
+    "@context": {
+      "type": "array",
+      "items": {
+        "oneOf": [
+          { "type": "string", "format": "uri" },
+          { "type": "object" }
+        ]
+      },
+      "minItems": 2,
+      "description": "JSON-LD context. MUST include the W3C VC 2.0 context 'https://www.w3.org/ns/credentials/v2' as the first element, the ZCAP-LD context 'https://w3id.org/security/zcap/v1', and the KYA-OS delegation namespace 'https://kya-os.org/ns/delegation/v1'."
+    },
+    "id": {
+      "type": "string",
+      "format": "uri",
+      "description": "Unique credential identifier (URN or URL)."
+    },
+    "type": {
+      "type": "array",
+      "items": { "type": "string" },
+      "contains": { "const": "VerifiableCredential" },
+      "minItems": 2,
+      "description": "Credential types. MUST include 'VerifiableCredential' and 'DelegationCredential'."
+    },
+    "issuer": {
+      "oneOf": [
+        { "type": "string", "pattern": "^did:.+$" },
+        {
+          "type": "object",
+          "required": ["id"],
+          "properties": {
+            "id": { "type": "string", "pattern": "^did:.+$" }
+          }
+        }
+      ],
+      "description": "Delegator DID (or an issuer object carrying id). For the ROOT credential this is the resource owner and the recomputed responsibleParty."
+    },
+    "validFrom": {
+      "type": "string",
+      "format": "date-time",
+      "description": "VC 2.0 validity start (replaces the legacy issuanceDate)."
+    },
+    "validUntil": {
+      "type": "string",
+      "format": "date-time",
+      "description": "VC 2.0 validity end (replaces the legacy expirationDate). A child's validUntil MUST be no later than its parent's (monotone-narrowing)."
+    },
+    "credentialSubject": {
+      "$ref": "#/$defs/ZcapCapability"
+    },
+    "credentialStatus": {
+      "$ref": "#/$defs/CredentialStatus"
+    },
+    "proof": {
+      "$ref": "#/$defs/Proof"
+    }
+  },
+  "additionalProperties": true,
+  "$defs": {
+    "ZcapCapability": {
+      "type": "object",
+      "description": "The attenuated ZCAP-LD capability carried as the VC credentialSubject.",
+      "required": ["id", "parentCapability", "invocationTarget", "allowedAction"],
+      "anyOf": [
+        { "required": ["controller"] },
+        { "required": ["invoker"] }
+      ],
+      "properties": {
+        "id": {
+          "type": "string",
+          "description": "Capability identifier, typically a 'urn:zcap:*' URN. A child's parentCapability MUST reference this value."
+        },
+        "controller": {
+          "type": "string",
+          "pattern": "^did:.+$",
+          "description": "The delegate DID that controls this capability (synonym of invoker)."
+        },
+        "invoker": {
+          "type": "string",
+          "pattern": "^did:.+$",
+          "description": "The delegate DID authorized to invoke this capability. For the leaf hop this is asserted equal to the per-request proof key (proof.did)."
+        },
+        "parentCapability": {
+          "type": "string",
+          "description": "The parent capability id. For the ROOT hop this MUST equal invocationTarget (the resource itself)."
+        },
+        "invocationTarget": {
+          "type": "string",
+          "description": "The resource DID/URI this capability authorizes. Constant along the whole chain."
+        },
+        "allowedAction": {
+          "type": "array",
+          "items": { "type": "string" },
+          "description": "Permitted action strings. A child's allowedAction MUST be a subset of its parent's (no escalation)."
+        },
+        "caveats": {
+          "type": "array",
+          "items": { "$ref": "#/$defs/Caveat" },
+          "description": "Monotone-narrowing constraints accumulated down the chain."
+        }
+      },
+      "additionalProperties": true
+    },
+    "Caveat": {
+      "type": "object",
+      "description": "A monotone-narrowing constraint. A child MUST carry, for every parent caveat, a caveat of the same type that is at least as narrow; unknown caveat types MUST be replicated verbatim (fail-closed).",
+      "required": ["type"],
+      "properties": {
+        "type": {
+          "type": "string",
+          "description": "Caveat type, e.g. 'ValidUntil' or 'MaxAmount'."
+        },
+        "date": {
+          "type": "string",
+          "format": "date-time",
+          "description": "ValidUntil caveat: the expiry; a child's date MUST be <= its parent's."
+        },
+        "limit": {
+          "type": "string",
+          "description": "MaxAmount caveat: a decimal cap; a child's limit MUST be <= its parent's for the same currency."
+        },
+        "currency": {
+          "type": "string",
+          "description": "MaxAmount caveat: the ISO currency code (e.g. 'USD')."
+        }
+      },
+      "additionalProperties": true
+    },
+    "CredentialStatus": {
+      "type": "object",
+      "description": "W3C Bitstring Status List v1.0 entry (the StatusList2021Entry successor), evaluated through the injected RevocationChecker seam; a revoked ancestor cascades to invalidate the subtree.",
+      "required": ["type", "statusListIndex", "statusListCredential"],
+      "properties": {
+        "id": {
+          "type": "string",
+          "format": "uri",
+          "description": "Status entry identifier."
+        },
+        "type": {
+          "type": "string",
+          "const": "BitstringStatusListEntry"
+        },
+        "statusPurpose": {
+          "type": "string",
+          "enum": ["revocation", "suspension"]
+        },
+        "statusListIndex": {
+          "type": "string",
+          "pattern": "^[0-9]+$",
+          "description": "Index in the status-list bitstring."
+        },
+        "statusListCredential": {
+          "type": "string",
+          "format": "uri",
+          "description": "URL of the Bitstring Status List credential."
+        }
+      }
+    },
+    "Proof": {
+      "type": "object",
+      "description": "Data Integrity proof over the credential.",
+      "required": ["type", "cryptosuite"],
+      "properties": {
+        "type": {
+          "type": "string",
+          "const": "DataIntegrityProof"
+        },
+        "cryptosuite": {
+          "type": "string",
+          "const": "eddsa-jcs-2022"
+        },
+        "created": {
+          "type": "string",
+          "format": "date-time"
+        },
+        "verificationMethod": {
+          "type": "string",
+          "description": "DID URL of the verification key."
+        },
+        "proofPurpose": {
+          "type": "string",
+          "description": "Purpose of the proof (e.g., 'assertionMethod')."
+        },
+        "proofValue": {
+          "type": "string",
+          "description": "Multibase-encoded signature value."
+        }
+      },
+      "additionalProperties": true
+    }
+  },
+  "examples": [
+    {
+      "@context": [
+        "https://www.w3.org/ns/credentials/v2",
+        "https://w3id.org/security/zcap/v1",
+        "https://kya-os.org/ns/delegation/v1"
+      ],
+      "id": "urn:uuid:12345678-1234-1234-1234-123456789abc",
+      "type": ["VerifiableCredential", "DelegationCredential"],
+      "issuer": "did:web:agent-a.example",
+      "validFrom": "2026-03-12T00:00:00Z",
+      "validUntil": "2026-06-01T00:00:00Z",
+      "credentialSubject": {
+        "id": "urn:zcap:del_123",
+        "invoker": "did:web:agent-b.example",
+        "parentCapability": "urn:zcap:root",
+        "invocationTarget": "did:web:api.example:payments",
+        "allowedAction": ["payments.transfer"],
+        "caveats": [
+          { "type": "ValidUntil", "date": "2026-06-01T00:00:00Z" },
+          { "type": "MaxAmount", "limit": "500.00", "currency": "USD" }
+        ]
+      },
+      "credentialStatus": {
+        "id": "https://issuer.example/status/1#94567",
+        "type": "BitstringStatusListEntry",
+        "statusPurpose": "revocation",
+        "statusListIndex": "94567",
+        "statusListCredential": "https://issuer.example/status/1"
+      },
+      "proof": {
+        "type": "DataIntegrityProof",
+        "cryptosuite": "eddsa-jcs-2022",
+        "created": "2026-03-12T00:00:01Z",
+        "verificationMethod": "did:web:agent-a.example#key-1",
+        "proofPurpose": "assertionMethod",
+        "proofValue": "z3FXQ..."
+      }
+    }
+  ]
+}

package/schemas/kya-os-card.schema.json

@@ -0,0 +1,284 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schema.kya-os.org/v1/protocol/identity/card/v1.1.0",
+  "title": "KYA-OS Entity Card",
+  "description": "A typed, DID-anchored identity card for a KYA-OS entity (mcp | agent | client | verifier | human). One canonical card is anchored by a `KyaOsEntityCard` service entry on the entity's did:web DID document and projected onto the four discovery surfaces the ecosystem already indexes (MCP server.json / catalog.json `_meta['org.kya-os/card']`, A2A AgentExtension, NANDA AgentFacts, and the MCP catalog entry). The card asserts identity + type + declared capabilities; everything trust-bearing (accountability, attested capabilities, KYC/KYB) is proven by referenced credentials, not self-claimed (claim-minimalism). The sender-constrained holder-of-key proof (`org.kya-os/proof@1`) is NEVER on the static card — it rides per-request `_meta` on top (see detached-proof); `proofProfile` only names the profile a verifier should expect.",
+  "type": "object",
+  "required": ["id", "entityType", "name"],
+  "properties": {
+    "id": {
+      "type": "string",
+      "pattern": "^did:(key|web):.+$",
+      "description": "The entity's DID. did:web cards are registry-anchored (trust tiers 1-2 + L2 + KYC/KYB eligible); did:key cards are self-asserted (dev/ephemeral; trust from holder-of-key-on-use only)."
+    },
+    "entityType": {
+      "type": "string",
+      "enum": ["mcp", "agent", "client", "verifier", "human"],
+      "description": "The kind of entity. tool/skill are sub-resources (capabilities), not entity types. Named 'entityType' to avoid colliding with the deployment-flavour AgentIdentity.type (development|production)."
+    },
+    "name": {
+      "type": "string",
+      "minLength": 1,
+      "description": "Human-readable display name."
+    },
+    "kid": {
+      "type": "string",
+      "description": "Key identifier for the entity's signing key (matches a verification method in the DID document and the JWS header kid of its proofs)."
+    },
+    "publicKeyJwk": {
+      "$ref": "#/$defs/Ed25519PublicJwk",
+      "description": "Optional inline public key. MUST match the key published in the DID document; omit to require resolution from didDocument."
+    },
+    "createdAt": {
+      "type": "string",
+      "format": "date-time",
+      "description": "When the entity/card was created."
+    },
+    "capabilities": {
+      "type": "array",
+      "items": { "$ref": "#/$defs/Capability" },
+      "description": "Declared capabilities. Bare strings are L1 (self-declared, unattested); objects with attestations are L2 (capability-attested). tool/skill sub-resources appear here, not as top-level cards."
+    },
+    "conformanceLevel": {
+      "type": "string",
+      "enum": ["L1", "L2", "L3"],
+      "description": "DERIVED, verifier-recomputable summary of the entity's conformance floor: L1 self-declared, L2 capability-attested, L3 holder-of-key + delegation-chain resolution. NOT an independent claim — a verifier recomputes it from capabilities + the live per-request proof."
+    },
+    "responsibleParty": {
+      "type": "string",
+      "pattern": "^did:(key|web):.+$",
+      "description": "DID of the entity ultimately accountable (= root issuerDid of the delegation chain; SPEC Responsible Party). SHOULD be did:web. Verified via delegationRef against the signed DelegationCredential, not self-asserted."
+    },
+    "principal": {
+      "type": "string",
+      "pattern": "^did:(key|web):.+$",
+      "description": "Optional DID of the immediate delegator / authorizing human (the runtime userDid), when it differs from responsibleParty (SPEC Principal)."
+    },
+    "delegationRef": {
+      "type": "string",
+      "description": "Reference to the signed DelegationCredential chain backing responsibleParty/principal. Format 'vcId>delId', multi-hop joined with '>'. The DelegationCredential VC is authoritative (ADR-001); KYA-OS-Delegation-Chain/-Granted-Scopes headers are advisory."
+    },
+    "attestations": {
+      "type": "array",
+      "items": { "$ref": "#/$defs/Attestation" },
+      "description": "Resolvable, signed credentials about the entity or its responsibleParty (e.g. IdentityVerification = KYC/KYB). Referenced, not inlined; verified via the trusted-issuer + signature + expiry path. Assert the verification fact + level, not raw PII."
+    },
+    "didDocument": {
+      "type": "string",
+      "format": "uri",
+      "description": "URL of the entity's DID document (the trust anchor for did:web; integrity derives from domain control). The DID document carries the `KyaOsEntityCard` service entry that anchors this card."
+    },
+    "proofProfile": {
+      "const": "org.kya-os/proof@1",
+      "description": "Names the per-request holder-of-key proof profile this entity's requests carry — the stateless, sender-constrained `org.kya-os/proof@1` envelope (distinct from the legacy session-bound ProofMeta). The proof itself is NEVER on this static card; it rides per-request `_meta`. This field only advertises the profile a verifier should expect."
+    },
+    "cimd": {
+      "$ref": "#/$defs/CimdBinding",
+      "description": "L1 CIMD (draft-ietf-oauth-client-id-metadata-document) on-ramp coordinates binding the entity's did:web to its OAuth client identity and DID-keyed JWKS."
+    },
+    "revocation": {
+      "$ref": "#/$defs/BitstringStatusListEntry",
+      "description": "W3C Bitstring Status List v1.0 revocation entry for this card's backing credential, evaluated through the injected RevocationChecker seam (live at L3, cached/offline at L2)."
+    }
+  },
+  "additionalProperties": false,
+  "$defs": {
+    "Capability": {
+      "description": "A declared capability: an L1 bare-string name, or an L2 object carrying attestations.",
+      "oneOf": [
+        {
+          "type": "string",
+          "minLength": 1,
+          "description": "L1: self-declared capability name (unattested)."
+        },
+        { "$ref": "#/$defs/Level2Capability" }
+      ]
+    },
+    "Level2Capability": {
+      "type": "object",
+      "required": ["name", "attestations"],
+      "properties": {
+        "name": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Capability name, e.g. 'payments.transfer'."
+        },
+        "attestations": {
+          "type": "array",
+          "minItems": 1,
+          "items": { "$ref": "#/$defs/CapabilityAttestation" },
+          "description": "At least one attestation; the capability is L2 if at least one verifies (signature + trusted issuer + subject + capability match + validity)."
+        }
+      },
+      "additionalProperties": false
+    },
+    "CapabilityAttestation": {
+      "type": "object",
+      "required": ["vc"],
+      "properties": {
+        "vc": {
+          "type": ["string", "object"],
+          "description": "A CapabilityAttestationCredential — compact VC-JWT string or pre-parsed object. issuer MUST be a trusted issuer (default did:web:example.com); credentialSubject.id MUST equal the card id; credentialSubject.capability MUST equal the capability name; validUntil MUST be in the future."
+        }
+      },
+      "additionalProperties": true
+    },
+    "Attestation": {
+      "type": "object",
+      "required": ["type", "vc"],
+      "properties": {
+        "type": {
+          "type": "string",
+          "enum": ["IdentityVerification", "CapabilityAttestation"],
+          "description": "Attestation kind. IdentityVerification is the registry-issued KYC (individual) / KYB (organization) credential."
+        },
+        "vc": {
+          "type": ["string", "object"],
+          "description": "The signed Verifiable Credential (compact VC-JWT string or object), resolved + verified via the trusted-issuer path. For IdentityVerification: credentialSubject = { id: <subject DID>, subjectType: 'individual'|'organization', verificationLevel: 'basic'|'enhanced'|'loa3', provider }."
+        },
+        "subject": {
+          "type": "string",
+          "pattern": "^did:(key|web):.+$",
+          "description": "DID the attestation is about. For KYC/KYB this is the responsibleParty, not the agent."
+        },
+        "issuer": {
+          "type": "string",
+          "pattern": "^did:(key|web):.+$",
+          "description": "Issuer DID. MUST be in the trusted-issuer allowlist (default did:web:example.com)."
+        }
+      },
+      "additionalProperties": false
+    },
+    "Ed25519PublicJwk": {
+      "type": "object",
+      "required": ["kty", "crv", "x"],
+      "properties": {
+        "kty": { "const": "OKP" },
+        "crv": { "const": "Ed25519" },
+        "x": { "type": "string", "description": "Base64url-encoded Ed25519 public key." },
+        "kid": { "type": "string" },
+        "use": { "type": "string" }
+      },
+      "additionalProperties": false
+    },
+    "CimdBinding": {
+      "type": "object",
+      "description": "CIMD on-ramp binding: the client_id ↔ did:web bijection and the DID-keyed JWKS the AS validates private_key_jwt against (so OAuth client-auth IS a DID-key proof, closing L1→L3).",
+      "required": ["clientId", "jwksUri"],
+      "properties": {
+        "clientId": {
+          "type": "string",
+          "minLength": 1,
+          "description": "The OAuth client_id — the did:web HTTPS form (did:web:host:a:b ⇄ https://host/a/b). Its origin MUST equal the did:web host and the jwksUri origin (origin-equality, fail-closed)."
+        },
+        "jwksUri": {
+          "type": "string",
+          "minLength": 1,
+          "description": "JWKS endpoint that is a mechanical projection of the DID document's verificationMethod[] (Ed25519 → OKP JWK, kid preserved)."
+        }
+      },
+      "additionalProperties": false
+    },
+    "BitstringStatusListEntry": {
+      "type": "object",
+      "description": "W3C Bitstring Status List v1.0 credentialStatus entry — the StatusList2021Entry successor. `statusListIndex` is an integer expressed as a string per the spec.",
+      "required": ["statusListCredential", "statusListIndex"],
+      "properties": {
+        "statusListCredential": {
+          "type": "string",
+          "minLength": 1,
+          "description": "URL of the Bitstring Status List credential."
+        },
+        "statusListIndex": {
+          "type": "string",
+          "pattern": "^[0-9]+$",
+          "description": "Index in the status-list bitstring — a non-negative canonical decimal string (no whitespace, hex, or scientific notation), matching the fail-closed runtime parse."
+        }
+      },
+      "additionalProperties": false
+    }
+  },
+  "examples": [
+    {
+      "id": "did:web:example.com:agents:acme-pay",
+      "entityType": "agent",
+      "name": "Acme Pay Agent",
+      "kid": "did:web:example.com:agents:acme-pay#key-1",
+      "createdAt": "2026-06-01T00:00:00Z",
+      "capabilities": [
+        "handshake",
+        {
+          "name": "payments.transfer",
+          "attestations": [
+            { "vc": "eyJhbGciOiJFZERTQSJ9.eyJ2YyI6e319.sig" }
+          ]
+        }
+      ],
+      "conformanceLevel": "L2",
+      "responsibleParty": "did:web:example.com:org:acme",
+      "principal": "did:web:example.com:users:jane",
+      "delegationRef": "vc_root>del_123",
+      "attestations": [
+        {
+          "type": "IdentityVerification",
+          "vc": "eyJhbGciOiJFZERTQSJ9.eyJ2YyI6e319.sig",
+          "subject": "did:web:example.com:org:acme",
+          "issuer": "did:web:example.com"
+        }
+      ],
+      "didDocument": "https://example.com/agents/acme-pay/did.json"
+    },
+    {
+      "id": "did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK",
+      "entityType": "client",
+      "name": "KYA-OS Inspector (dev)",
+      "capabilities": ["handshake", "signing", "verification"],
+      "conformanceLevel": "L1",
+      "proofProfile": "org.kya-os/proof@1"
+    },
+    {
+      "id": "did:web:example.com:mcp:acme-search",
+      "entityType": "mcp",
+      "name": "Acme Search MCP",
+      "kid": "did:web:example.com:mcp:acme-search#key-1",
+      "createdAt": "2026-06-01T00:00:00Z",
+      "capabilities": [
+        "tools.list",
+        {
+          "name": "tools.call",
+          "attestations": [
+            { "vc": "eyJhbGciOiJFZERTQSJ9.eyJ2YyI6e319.sig" }
+          ]
+        }
+      ],
+      "conformanceLevel": "L3",
+      "responsibleParty": "did:web:example.com:org:acme",
+      "delegationRef": "vc_root>del_mcp",
+      "didDocument": "https://example.com/mcp/acme-search/did.json",
+      "proofProfile": "org.kya-os/proof@1",
+      "cimd": {
+        "clientId": "https://example.com/mcp/acme-search",
+        "jwksUri": "https://example.com/mcp/acme-search/jwks.json"
+      },
+      "revocation": {
+        "statusListCredential": "https://example.com/status/1",
+        "statusListIndex": "94567"
+      }
+    },
+    {
+      "id": "did:web:example.com:clients:acme-cli",
+      "entityType": "client",
+      "name": "Acme CLI",
+      "kid": "did:web:example.com:clients:acme-cli#key-1",
+      "capabilities": ["handshake"],
+      "conformanceLevel": "L1",
+      "responsibleParty": "did:web:example.com:org:acme",
+      "didDocument": "https://example.com/clients/acme-cli/did.json",
+      "proofProfile": "org.kya-os/proof@1",
+      "cimd": {
+        "clientId": "https://example.com/clients/acme-cli",
+        "jwksUri": "https://example.com/clients/acme-cli/jwks.json"
+      }
+    }
+  ]
+}