Config is the same across clients — only the file and path differ.
{
"mcpServers": {
"kyalabs-badge": {
"args": [
"@kyalabs/badge"
],
"command": "npx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Persistent identity for AI agents across merchant sites. Badge gives agents a credential they carry on every request — merchants verify it, trust accumulates across visits, and agents that build history earn better treatment over time.
Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.
npx -y '@kyalabs/badge' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Five weighted categories — click any category to see the underlying evidence.
No known CVEs.
Checked @kyalabs/badge against OSV.dev.
Click any tool to inspect its schema.
Be the first to review
Have you used this server?
Share your experience — it helps other developers decide.
Sign in to write a review.
Others in security / ai-ml
Persistent memory using a knowledge graph
Privacy-first. MCP is the protocol for tool access. We're the virtualization layer for context.
An open-source AI agent that brings the power of Gemini directly into your terminal.
Workspace template + MCP server for Claude Code, Codex CLI, Cursor & Windsurf. Multi-agent knowledge engine (ag-refresh / ag-ask) that turns any codebase into a queryable AI assistant.
MCP Security Weekly
Get CVE alerts and security updates for Badge MCP Server and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.
Persistent identity for AI agents across merchant sites. Badge gives agents a credential they carry on every request — merchants verify it, trust accumulates across visits, and agents that build history earn better treatment over time.
Framework-agnostic. Transport-agnostic. Zero runtime dependencies.
The SDK is the primary integration surface. Three methods cover the full lifecycle:
import { Badge } from "@kyalabs/badge-sdk";
const badge = await Badge.init();
const runId = badge.startRun();
await badge.declareVisit({
merchant: "store.example.com",
runId,
url: "https://store.example.com/cart",
});
await badge.reportOutcome({
merchant: "store.example.com",
runId,
outcome: "not_denied",
});
No signup. No API key. Badge.init() issues a guest pass on first run and caches it to disk. Identity survives process restarts.
npm install @kyalabs/badge-sdk
gp_v1_*) → badge token (kya_*) → authenticated identityio.kyalabs.common.identity Credential Provider, published schemas, ES256-signed JWTsFor MCP client users (Claude Desktop, Cursor, Windsurf), Badge also ships as an MCP tool server. The MCP server wraps the SDK — same identity model, same tokens, same scoring.
npx @kyalabs/badge
The SDK is the canonical integration path for platform builders and agent frameworks. The MCP server is a convenience wrapper for end users working within MCP clients.
MIT