{"name":"io.github.The-Pixel-Boys/shield-kya","slug":"the-pixel-boys-shield-kya","title":null,"description":"KYA MCP gate: evaluate, ingest, request approval. Sole PEP is Shield.","url":"https://mcp.market/server/the-pixel-boys-shield-kya","rating":null,"grade":"B","score":77,"certified":false,"status":"active","category":"other","tags":[],"presence":{"score":33,"stars":1,"forks":0,"downloads_week":1267,"last_push_at":"2026-09-17T20:01:07.000Z","license":"MIT"},"uptime":null,"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/The-Pixel-Boys/shield-kya","website":null,"version":"0.1.29","remotes":[],"packages":[{"registryType":"npm","identifier":"@shield-agent/kya","version":"0.1.29","transport":{"type":"stdio"},"packageArguments":[{"value":"serve-mcp","type":"positional"},{"value":"--stdio","type":"positional"}],"environmentVariables":[{"description":"Control plane origin (e.g. http://127.0.0.1:8090 or hosted URL)","isRequired":true,"format":"string","name":"KYA_BASE_URL"},{"description":"API key for the control plane (required when auth is on)","isRequired":true,"format":"string","isSecret":true,"name":"KYA_API_KEY"},{"description":"Dual-plane host tag: ide (authoring) or runtime (production)","format":"string","default":"ide","name":"KYA_HOST"},{"description":"Registered agent principal id","format":"string","name":"KYA_AGENT_ID"}]}],"tools":[{"name":"kya.policy_evaluate","description":"Evaluate ALLOW | DENY | REQUIRE_APPROVE for an agent action at the tool boundary. Sole PEP is Shield KYA; missing APPROVED means no irreversible side effect.","write_action":false,"price_micros":0,"input_schema":null},{"name":"kya.request_approval","description":"Open a human approval request for a high-stakes side effect. Does not execute the side effect.","write_action":false,"price_micros":0,"input_schema":null},{"name":"kya.session_ingest","description":"Ingest an AgentEvent-compatible session observation for raise-only risk. Risk may only raise severity, never auto-ALLOW.","write_action":false,"price_micros":0,"input_schema":null}],"scan":{"score":77,"grade":"B","scanned_at":"2026-09-20T11:38:10.983Z","report":{"scannerVersion":"0.1.9","scannedAt":"2026-09-20T11:38:10.895Z","components":{"code":{"score":20,"max":25,"notes":["96 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":6,"max":15,"notes":["static API keys via environment variables"]},"maintenance":{"score":15,"max":15,"notes":["last push 3 days ago"]},"identity":{"score":9,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[{"id":"exec.eval","severity":"medium","component":"code","title":"eval / new Function used","evidence":".cursor-plugin/plugin.json: …ription\": \"Know Your Agent: fail-closed eval (ALLOW | DENY | REQUIRE_APPROVE), dual-pl…"}],"inputs":{"packages":[{"registryType":"npm","identifier":"@shield-agent/kya","version":"0.1.29","found":true,"license":"MIT","hasInstallScripts":false,"dependencyCount":4,"publishedAt":"2026-09-05T13:53:08.571Z","repositoryUrl":"git+https://github.com/The-Pixel-Boys/shield-kya.git","weeklyDownloads":1267}],"repo":{"found":true,"owner":"The-Pixel-Boys","repo":"shield-kya","archived":false,"pushedAt":"2026-09-17T20:01:07Z","stars":1,"forks":0,"openIssues":0,"ownerType":"Organization","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/203532879?v=4","ownerCreatedAt":"2025-03-16T14:08:39Z","license":"MIT"},"icon":{"url":null,"source":"none"},"presence":{"stars":1,"forks":0,"downloadsWeek":1267,"license":"MIT","lastPushAt":"2026-09-17T20:01:07.000Z","score":33}}}},"grade_history":[],"reviews":[]}