{
 "id": "kyapay-token",
 "name": "KYAPay Token",
 "acronym": "KYAPay",
 "aliases": [
  "KYAPay",
  "draft-skyfire-oauth-kyapay-token",
  "draft-skyfire-kyapayprofile"
 ],
 "collisions": [
  "KYA-OS (DIF identity layer for MCP, tracked as kya-os, unrelated)"
 ],
 "step": "pay",
 "parties": [
  "agent-site",
  "agent-payment"
 ],
 "form": "document-format",
 "track": "ietf",
 "scope": "payments",
 "question": "How can an authorization or resource server from one vendor check which agent is calling and accept its payment token, when the token was issued by another vendor?",
 "analog": "A signed ID card and a payment card in one envelope, readable by any shop",
 "origin": {
  "org": "Skyfire Systems",
  "date": null
 },
 "governance": "Individual Internet-Draft, not adopted by an IETF working group; authors Ankit Agarwal (Skyfire Systems) and Michael B. Jones (Self-Issued Consulting); header area Web Authorization Protocol (OAuth)",
 "native_status": "Active Internet-Draft, individual submission, intended status Standards Track; -02 dated 2026-10-02, expires 2027-04-05; replaces draft-skyfire-kyapayprofile",
 "phase": "draft",
 "implementation": "shipping",
 "adoption": {
  "level": "unmeasured",
  "by": null,
  "probe_run": null
 },
 "version": {
  "label": "draft-skyfire-oauth-kyapay-token-02",
  "date": "2026-10-02"
 },
 "spec_url": "https://datatracker.ietf.org/doc/draft-skyfire-oauth-kyapay-token/",
 "discovery": {
  "mechanism": "tokens are presented to the resource server; verifiers fetch the issuer's signing keys (Skyfire publishes its own at app.skyfire.xyz/.well-known/jwks.json)",
  "path": null
 },
 "probe": {
  "method": "GET",
  "path": "none — tokens are presented per request by the agent",
  "parse": "No artefact at a fixed path on the resource server; a verifier would check the token's typ (kya+jwt, pay+jwt or kya-pay+jwt) against the issuer's JWKS.",
  "on_absent": "Not probeable from a resource server's origin."
 },
 "evidence": [
  {
   "claim": "Datatracker lists draft-skyfire-oauth-kyapay-token-02, 'KYAPay Token', as an Active individual Internet-Draft by Ankit Agarwal (Skyfire Systems Inc.) and Michael B. Jones (Self-Issued Consulting), intended Standards Track, last updated 2026-10-01, replacing draft-skyfire-kyapayprofile.",
   "label": "VERIFIED",
   "url": "https://datatracker.ietf.org/doc/draft-skyfire-oauth-kyapay-token/",
   "date": "2026-10-01"
  },
  {
   "claim": "The -02 text, dated 2 October 2026 and expiring 5 April 2027, defines the kya+jwt, pay+jwt and kya-pay+jwt token types and settlement types including visa_vic and mastercard_scof.",
   "label": "VERIFIED",
   "url": "https://datatracker.ietf.org/doc/html/draft-skyfire-oauth-kyapay-token-02",
   "date": "2026-10-02"
  },
  {
   "claim": "Skyfire's JWKS endpoint returns live signing keys (HTTP 200).",
   "label": "VERIFIED",
   "url": "https://app.skyfire.xyz/.well-known/jwks.json",
   "date": "2026-10-20"
  }
 ],
 "last_verified": "2026-10-20",
 "dispute": null,
 "summary_md": "KYAPay Token defines JWT profiles that let an agent show who it is and pay in one step [2]. There are three token types: `kya+jwt` for agent identity, `pay+jwt` for payment and `kya-pay+jwt` for both together [2]. The aim is for authorization and resource servers from different vendors to verify the agent and accept its payment without a bilateral integration. The draft lists settlement types, including card schemes such as `visa_vic` and `mastercard_scof` [2].\n\nIt is an individual Internet-Draft from Skyfire, co-authored by Michael B. Jones, and has not been adopted by an IETF working group [1]. Revision -02 is dated 2026-10-02 and replaces the earlier draft-skyfire-kyapayprofile [1][2]. Skyfire publishes live signing keys for its tokens [3]. It lives under Pay because of the combined token and settlement types, but it does Identify work too.",
 "history": [
  {
   "date": "2026-10-20",
   "note": "added from gap scout 2026-10-20; verified against the datatracker record and -02 text of draft-skyfire-oauth-kyapay-token, and Skyfire's live JWKS"
  }
 ],
 "part_of": null,
 "group": null,
 "watch": [
  {
   "type": "ietf",
   "doc": "draft-skyfire-oauth-kyapay-token"
  }
 ],
 "use_cases": [
  "accept-agent-payments",
  "prove-agent-identity",
  "agent-checkout"
 ],
 "audience": [
  "platform",
  "agent-builder",
  "site-owner"
 ],
 "pairs_with": [
  "x402",
  "ap2",
  "kya-os"
 ],
 "prerequisites": [],
 "freshness": "current"
}