Skip to main content
Glama

DPX — Institutional Cross-Border Settlement

agent.kya_register

KYA — Know Your Agent. Three-tier registration model — compliance burden scales with settlement risk, no documents ever required. ANONYMOUS: agent name only, $1K/day cap, instant. REGISTERED: add ownerEntity + ownerEmail (self-attested, no verification), $25K/day cap, instant. VERIFIED: add ownerLei (active GLEIF LEI) — DPX calls the public GLEIF API, confirms ACTIVE status, and grants VERIFIED instantly. No documents, no manual review; LEI issuers (LOUs) have already done identity verification and DPX inherits it. VERIFIED agents get institutional caps (governed by mandate), FATF R.16 attestation on every settlement, and full AP2 mandate support. Legal basis: FATF R.16 originator = owner entity (not the agent); MiCA Art. 45/72 accepts LEI; GENIUS Act satisfied by entity attestation.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
nameYesHuman-readable name for this agent.
mandateNoOptional AP2-compatible spend mandate (REGISTERED/VERIFIED only). Caps are clamped to tier limits for REGISTERED agents.
ownerLeiNo20-char GLEIF LEI. Providing a valid active LEI instantly grants VERIFIED tier — no documents. Get your LEI at gleif.org.
frameworkNoAgent framework: "claude", "gpt-4o", "gemini", "custom", etc.
protocolsNoSupported protocols: ["x402", "ap2", "mcp", "a2a"].
publicKeyNoOptional public key for credential signature verification.
ownerEmailNoContact email. Required for REGISTERED tier ($25K/day cap). Self-attested, not verified.
ownerEntityNoOrganization or person that owns/operates this agent. Required for REGISTERED tier.

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault
agentIdNoUnique agent identifier (agt_...). Store this.
kyaLevelNo
kyaScoreNoTrust score 0–100.
tierCapsNomaxNotionalUsd and dailyCapUsd effective for this agent.
tierNoteNoExplanation of tier and how to upgrade.
leiVerifiedNotrue if LEI was confirmed via GLEIF API.
leiEntityNameNoLegal name from GLEIF record (VERIFIED only).

Schema Changelog

Changes observed during successful MCP inspections. Dates show when Glama detected each change.

  1. First observed

TDQS

A4.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description explains the instantaneous nature of registration, the GLEIF API verification call, and that no documents or manual review are involved. It also describes tier-specific caps and legal basis, adding meaningful context beyond the sparse annotations. No annotation contradiction exists (readOnlyHint=false, openWorldHint=true) and the description aligns with these hints.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is dense and information-rich, starting with the core concept and moving through tiers and legal reasoning. Every sentence adds value, but the single paragraph format could be improved with more structure (e.g., bullets or headings) for quicker scanning. It is appropriately sized given the complexity.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The tool is complex with three tiers, a nested mandate object, and regulatory implications. The description covers all essential decision points: tier selection criteria, daily caps, verification process, and legal acceptance. It also leverages the schema for parameter details and the output schema for return values, making the description complete for correct invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters5/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Although the input schema already covers all parameters with descriptions, the description adds crucial tier mapping: it explains how the presence or absence of ownerEntity, ownerEmail, and ownerLei determines the tier and associated caps. It also clarifies that the mandate is only for REGISTERED/VERIFIED and that caps are clamped to tier limits, which is not fully captured in the schema descriptions.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly identifies the tool as the agent registration entry point under the KYA model, with a specific action (register) and resource (agent). It distinguishes itself from sibling tools like agent.kya_verify by detailing the three tiers and their requirements, making the tool's purpose unmistakable.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides explicit guidance on which parameters to use for each registration tier (name alone for ANONYMOUS, + ownerEntity/ownerEmail for REGISTERED, + ownerLei for VERIFIED), effectively telling the agent how to select tier options. It does not, however, name alternative tools or explicitly state when not to use this tool, so it lacks full exclusion guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

TDQS

A3.6/5.0
Disambiguation2/5

Many tools have overlapping purposes, such as multiple stablecoin routing options (route vs stability.stablecoin_route), several compliance pre-checks (flow_check, policy.check, mercury.ach_authorize), and numerous FX/stability tools (oracle.stability, stability.corridor, market.fx, fx.rate). Even with detailed descriptions, the boundaries are subtle and an agent could easily select the wrong tool.

Naming Consistency3/5

The dot-separated namespace convention is mostly consistent and readable, but verb vs noun usage varies (e.g., settlement.execute vs batch_settle vs route). Subscription tools also mix forms (intelligence.subscribe vs intelligence.subscription.get/delete), showing minor inconsistency.

Tool Count1/5

81 tools is an extreme count for a settlement server. Even accounting for the broad 'institutional' scope, the volume overwhelms the core purpose and creates a heavy cognitive load for agents, far beyond the typical 3-15 well-scoped tool set.

Completeness3/5

The core settlement lifecycle is well-covered (quote, execute, track, receipt, batch), but there are notable gaps such as missing policy update/delete and no receipt retrieval (only create). While many tangential domains are over-covered, certain CRUD operations are absent, creating dead ends.