live endpoint · anonymous

MCP playground

Connect to the KYE sandbox MCP server from Claude Desktop, Cursor, Cline, or any other MCP-aware host. The sandbox endpoint mounts all 12 KYE tools against synthetic fixtures so you can prototype agent governance without touching real systems.

Endpoint

https://mcp.sandbox.kyeprotocol.com/v1/mcp

No auth required. Rate-limited to 60 requests / minute per source IP. State resets nightly at 03:00 UTC.

Quick start

Claude Desktop (claude_desktop_config.json)

~/Library/Application Support/Claude/claude_desktop_config.jsonjson

{
  "mcpServers": {
    "kye-sandbox": {
      "command": "npx",
      "args": ["-y", "@modelcontextprotocol/server-http", "https://mcp.sandbox.kyeprotocol.com/v1/mcp"]
    }
  }
}

Cursor / Cline (HTTP transport)

settings.json / cline.jsonjson

{
  "mcp.servers": {
    "kye-sandbox": {
      "type": "http",
      "url": "https://mcp.sandbox.kyeprotocol.com/v1/mcp"
    }
  }
}

Smoke-test from curl

bashterminal

curl -sS https://mcp.sandbox.kyeprotocol.com/v1/mcp \
  -H 'content-type: application/json' \
  -d '{
    "jsonrpc": "2.0",
    "id": 1,
    "method": "tools/list"
  }' | jq .

The 12 KYE MCP tools

kye.observed_action.ingest

Push a single observed_action into the sandbox stream. Returns a decision envelope and a fresh Evidence Pack ID.

kye.observed_action.batch_ingest

Push up to 1,000 observed_actions in one round-trip. Useful for backfill demos.

kye.evidence_pack.get

Fetch a signed Evidence Pack by ID. Verifies the COSE-Sign1 signature client-side.

kye.evidence_pack.verify

Submit a serialized pack and get a structured verification report (signature, ordered linkage, public-key lookup).

kye.authority_graph.search

Walk the authority graph from any KYEID. Returns the delegation chain up to the root principal.

kye.purpose_permission.list

List all PPs bound to the sandbox tenant. Filter by actor, allowed_action, or scope.

kye.purpose_permission.issue

Issue a new PP in the sandbox (local-only, wiped nightly). Useful for testing scope evolution.

kye.purpose_permission.revoke

Revoke a PP and cascade. Shows the consent receipts and downstream grants that get touched.

kye.authority_gap.list

List detected Authority Gaps for a scenario. Returns severity, action counts, and recommended Guards.

kye.guard_recommendation.simulate

Simulate applying a Guard Recommendation. Returns the projected change in allow/deny rates against the 30-day fixture stream.

kye.drift.score

Return the current drift score for an agent over a window. Indicates whether the action distribution has shifted meaningfully. The scoring method is part of the hosted engine and is not disclosed in this repository.

kye.conformance.pack.build

Build a Conformance Pack for the sandbox tenant. Signed manifest of every artefact a regulator would need.

Ready to mount the same tools against your real agents?

The MCP server is published as @kye/mcp-server on npm. Configure it with your tenant credentials after pilot onboarding. Apply for pilot →.