// SCAN REPORT

UMBRAXON/kya Hub

20 tools. 1 can modify or destroy data without limits.

1 write tool that can modify data. Rate limits recommended.

Last updated: 3 Jul 2026

1 can modify or destroy data

19 read-only

20 tools total

Community server · catalogue entry verified 03/07/2026

How to control UMBRAXON/kya Hub ↓

TOOL MAP

What UMBRAXON/kya Hub exposes to your agents

Read (19) Write / Execute (1) Destructive / Financial (0)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

High Risk

The most dangerous UMBRAXON/kya Hub tools

Execute · Medium kya_cert_verify The tool submits a POST request to an external API endpoint to verify a certificate payload.

1 of UMBRAXON/kya Hub's 20 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control UMBRAXON/kya Hub

PolicyLayer is an MCP gateway — it sits between your AI agents and UMBRAXON/kya Hub, and nothing reaches the server without passing your rules. These are the rules we recommend:

Cap read operations

{
  "kya_agent_actions": {
    "limits": [
      {
        "counter": "kya_agent_actions_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register UMBRAXON/kya Hub — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON UMBRAXON/KYA HUB →

Instant setup, no code required.

FULL CATALOGUE

All 20 UMBRAXON/kya Hub tools

EXECUTE 1 tools

Execute kya_cert_verify POST /api/cert/verify with { certificate } object (KYA VC JSON).

READ 19 tools

Read kya_agent_actions GET /api/agent/{kya_id}/actions — optional limit (max 200) and offset. Read kya_agent_events GET /api/agent/{kya_id}/events — optional limit (max 200) and offset. Read kya_agent_reputation GET /api/agent/{kya_id}/reputation Read kya_cert GET /api/cert/{kya_id} Read kya_cert_status GET /api/cert/{kya_id}/status Read kya_crl_latest GET /crl/latest.json when deployed; may 404 on minimal dev setups. Read kya_delegation_pass_verify POST /api/delegation-pass/verify — verify hub Ed25519 signature and time window on a KYADelegationPass JSON bo Read kya_discovery_agents GET /api/discovery/v1/agents.json — agents with discovery_opt_in; optional capability filter. Read kya_embed_badge_status GET /api/embed/badge/{kya_id}?format=json — compact verified / not_verified for READMEs. Read kya_health GET /api/health — hub liveness and dependency checks. Read kya_hub_pubkey GET /api/hub/pubkey — verify hub-signed payloads. Read kya_l402_delegation_profile GET /api/protocol/l402-delegation-profile — schema for KYA delegation passes + caveat examples (hub is non-cus Read kya_manifest_schema GET /api/protocol/manifest-schema Read kya_manufacturer GET /api/manufacturer/{manufacturer_id} Read kya_manufacturers GET /api/manufacturers Read kya_protocol_versions GET /api/protocol/versions Read kya_registration_quote GET /api/registration/quote — requires tier; optional Ed25519 pubkey hex. Read kya_reputation_model GET /api/protocol/reputation-model Read kya_tiers GET /api/tiers — tier list and pricing metadata.

FAQ

Questions about UMBRAXON/kya Hub

Is the UMBRAXON/kya Hub MCP server safe to use without restrictions? +

The UMBRAXON/kya Hub server is primarily read-only with 19 read tools. While it cannot modify data, an agent in a retry loop can make thousands of API calls per minute, exhausting rate limits and running up costs. Rate limiting is still recommended.

How many tools does the UMBRAXON/kya Hub MCP server expose? +

20 tools across 1 categories: Read. 19 are read-only. 1 can modify, create, or delete data.

How do I enforce a policy on UMBRAXON/kya Hub? +

Register the UMBRAXON/kya Hub MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every UMBRAXON/kya Hub tool call.

Deterministic rules across all 20 UMBRAXON/kya Hub tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON UMBRAXON/KYA HUB →

Instant setup, no code required.

20 UMBRAXON/kya Hub tools catalogued and risk-classified — across an index of 43,000+ MCP servers.