Sample certificate

XMKS-KYA-2026-000001

This is an illustrative hosted KYA certificate. It shows what a reviewed MCP server or agent certificate looks like before your first live production company is listed.

Type

Sample

KYA level

KYA-L2

Risk class

MCP-R1

Subject

Company: Example AI Inc.
Domain: exampleai.com
Country: US
Asset: Payments MCP Endpoint
Asset type: mcp server
Protocol: streamable_http

Agent ID / DID

did:web:exampleai.com:agents:payments-mcp

Verification

API endpoint

https://xupracorp.com/api/kya-registry/v1/sample-certificate

Public URL

https://xupracorp.com/kya-registry/sample-certificate

Badge URL

https://xupracorp.com/kya-registry/badges/XMKS-KYA-2026-000001

Issuer metadata

https://xupracorp.com/.well-known/kya-registry.json

Trust signing

AWS KMS

Signature algorithm

AWS-KMS-RSASSA_PSS_SHA_256

Evidence hash

sha256:31132bef01acd398592155d5760ff213b4738c05b69bdb0558cd856afc1b946f

Expires

2027-06-15T00:00:00.000Z

Open sample JSON

Trust signing

Xupra signs the canonical certificate payload with AWS KMS. The issuer metadata endpoint publishes the public key that external verifiers use to validate that signature.

MCP verification

The hosted MCP server turns the certificate into a live trust check. Verifiers can fetch the certificate offline, then use the MCP handshake tools when a transaction needs challenge-response proof that the remote agent still controls the certified key.

Signed certificate payload

Illustrative public record

Back to KYA

{
  "version": "xupra-kya-certificate-v1",
  "sample": true,
  "certificateId": "XMKS-KYA-2026-000001",
  "issuer": {
    "name": "Xupra KYA Registry",
    "did": "did:web:xupracorp.com",
    "metadataUrl": "https://xupracorp.com/.well-known/kya-registry.json",
    "signatureProvider": "AWS KMS"
  },
  "subject": {
    "companyName": "Example AI Inc.",
    "companyDomain": "exampleai.com",
    "country": "US",
    "assetName": "Payments MCP Endpoint",
    "assetType": "mcp_server",
    "protocol": "streamable_http",
    "did": "did:web:exampleai.com:agents:payments-mcp",
    "agentCardUrl": "https://exampleai.com/.well-known/agent.json",
    "endpointUrl": "https://api.exampleai.com/mcp/payments"
  },
  "review": {
    "standardLabel": "Xupra KYA Agent Transaction Standard v0.1",
    "standardVersion": "mcp-kya-basic-v0.1",
    "kyaLevel": "KYA-L2",
    "riskClass": "MCP-R1",
    "issuedAt": "2026-06-15T00:00:00.000Z",
    "expiresAt": "2027-06-15T00:00:00.000Z"
  },
  "subjectBinding": {
    "method": "jwk",
    "keyId": "did:web:exampleai.com:keys:payments-mcp-1",
    "did": "did:web:exampleai.com:agents:payments-mcp",
    "agentCardUrl": "https://exampleai.com/.well-known/agent.json",
    "endpointUrl": "https://api.exampleai.com/mcp/payments",
    "thumbprint": "sha256:7a9dbdb2994a0b8e1d5b5797f1808c74d0e3c9329426b24fe8e6b49060908d8b",
    "algorithms": [
      "EdDSA"
    ]
  },
  "verification": {
    "certificateUrl": "https://xupracorp.com/kya-registry/sample-certificate",
    "certificateApiUrl": "https://xupracorp.com/api/kya-registry/v1/sample-certificate",
    "mcpServerUrl": "https://xupracorp.com/api/kya-registry/v1/mcp",
    "handshakeTools": [
      "kya_prepare_handshake",
      "kya_verify_handshake",
      "kya_evaluate_policy"
    ]
  }
}