npm install @kya-os/mcp

import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
import { withKyaOs, NodeCryptoProvider } from "@kya-os/mcp";

const server = new McpServer({ name: "my-server", version: "1.0.0" });
const kyaos = await withKyaOs(server, { crypto: new NodeCryptoProvider() });

// Your server now has:
// - A DID identity (kyaos.identity.did)
// - Handshake endpoint (_kyaos tool)
// - Proofs on every tool response
// - Session management with replay prevention

await withKyaOs(server, {
  crypto: new NodeCryptoProvider(),
  handshakeExposure: "none",   // 'tool' (default) | 'none'
  autoSession: false,           // Skip automatic session creation
});

const kyaos = await withKyaOs(server, {
  crypto: new NodeCryptoProvider(),
  handshakeExposure: "none",
  autoSession: false,
});

// In your runtime's connection hook:
await kyaos.handleKyaOs({
  action: "handshake",
  nonce: "client-generated-nonce",
  audience: kyaos.identity.did,
  timestamp: Math.floor(Date.now() / 1000),
  agentDid: "did:key:...optional...",
});

import {
  createKyaOsMiddleware,
  generateIdentity,
  NodeCryptoProvider,
} from "@kya-os/mcp";

const crypto = new NodeCryptoProvider();
const identity = await generateIdentity(crypto);
const kyaos = createKyaOsMiddleware(
  { identity, session: { sessionTtlMinutes: 60 } },
  crypto
);

const search = kyaos.wrapWithProof("search", async (args) => ({
  content: [{ type: "text", text: `Results for: ${args["query"]}` }],
}));

const placeOrder = kyaos.wrapWithDelegation(
  "place_order",
  {
    scopeId: "orders:write",
    consentUrl: "https://example.com/consent",
  },
  kyaos.wrapWithProof("place_order", async (args) => ({
    content: [{ type: "text", text: `Order placed: ${args["item"]}` }],
  }))
);

import { generateIdentity, NodeCryptoProvider } from "@kya-os/mcp";

const crypto = new NodeCryptoProvider();
const identity = await generateIdentity(crypto);

console.log(identity.did);
// did:key:z6Mk...

import { CryptoProvider } from "@kya-os/mcp";

class KMSCryptoProvider extends CryptoProvider {
  async sign(data: Uint8Array, keyArn: string) {
    return kmsClient.sign({ KeyId: keyArn, Message: data });
  }
}

await withKyaOs(server, { crypto: new KMSCryptoProvider() });

import { NonceCacheProvider } from "@kya-os/mcp";

class RedisNonceCacheProvider extends NonceCacheProvider {
  async hasNonce(nonce: string) {
    return redis.exists(`nonce:${nonce}`);
  }
  async addNonce(nonce: string, ttl: number) {
    redis.setex(`nonce:${nonce}`, ttl, "1");
  }
}