stillmarcus24-stillos-kyaSAFE
Know Your Agent (KYA): drop-in counterparty trust check for agent-to-agent commerce — CLEAR/REVIEW/BLOCK, OFAC + on-chain wallet signals, signed receipt. npm + MCP.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
The trust toll for agent-to-agent commerce. Before your AI agent pays another agent, run one check: is the counterparty sanctioned? Is its wallet a scam/contract/drained? StillOS returns a fail-closed CLEAR / REVIEW / BLOCK verdict — OFAC SDN screen + live on-chain wallet signals — with an Ed25519-signed receipt you can attach to the transaction as proof-of-diligence.
a16z (Big Ideas 2026) calls "Know Your Agent" — signed agent credentials + counterparty trust — the prerequisite for merchants to let agents onto payment rails. This is a working drop-in for it.
Install
npm install stillos-kya
Use — one call
const { kya } = require('stillos-kya');
const r = await kya({ name: 'Acme Agent', wallet: '0xabc...' });
if (!r.allowed) throw new Error(`counterparty ${r.verdict}`); // CLEAR | REVIEW | BLOCK
// r.receipt -> { hash, signature, verify } (signed, verifiable proof-of-screening)Use — gate an x402 / express route in one line
const { kyaGate } = require('stillos-kya');
// Every payment through this route runs a counterparty trust-check first.
app.post('/pay-agent', kyaGate({ blockOnReview: false }), async (req, res) => {
// req.kya = { verdict, allowed, checks, receipt, ... }
// ...proceed to pay; blocked counterparties never reach here
});What the gate lets through (0.4.2)
kyaGate requires a positive clearance. It does not merely block BLOCK.
That last row changed in 0.4.2. Through 0.4.1 the gate asked "is this BLOCK?" rathe
6ecc766dc5cdOBSERVED · 2026-10-12Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add stillos-kya -- npx -y [email protected]
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- declared (1 observation(s))
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (7)
.wellknown-verify
const mw = kyaGate({ endpoint: `http://127.0.0.1:${server.address().port}/agent-clearance`, timeoutMs: 3000, ...opts });const resource = `http://127.0.0.1:${server.address().port}/agent-clearance`;const endpoint = `http://127.0.0.1:${server.address().port}/agent-clearance`;x402-fetch, viem
Gates applied: no_behavioural_pass, no_license.
6ecc766dc5cdfull audit observations/trust-audit/mcp-server/stillmarcus24__stillos-kya.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-12 | 6ecc766dc5cd | SAFE | B | 89 | first audit |
Questions
What is the stillmarcus24-stillos-kya MCP server?
Know Your Agent (KYA): drop-in counterparty trust check for agent-to-agent commerce — CLEAR/REVIEW/BLOCK, OFAC + on-chain wallet signals, signed receipt. npm + MCP.
Is stillmarcus24-stillos-kya safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does stillmarcus24-stillos-kya need?
It reads STILLOS_KYA_WALLET_KEY from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does stillmarcus24-stillos-kya run?
It speaks stdio and streamable-http, so it runs as a local process your client starts. It is published on npm as stillos-kya at 0.4.2.
How current is this page?
The grade is for one exact copy of the source (6ecc766dc5cd), read on 2026-10-12. The repository is watched and re-audited when it changes.