Account creation with MCP

Figure 4 shows the workflow allowing AI agents to create accounts programmatically using the Skyfire token and the Model Context Protocol (MCP):

The Buyer Agent calls the Skyfire API (https://api.skyfire.xyz/api/v1/tokens) to generate a kya or kya+pay token.
If the API key is valid, the SKyfire agent identity provider generates a token according to the criteria defined in the request
The Agent sends the token to the seller’s "createAccount" or similar endpoint on their MCP-compatible server.
The bot manager or fraud detection engine protecting the website validate the token, extracts the agent and platform identity claims, classify the traffic and allows it to proceed to the protected web resource
The MCP server in front of the web server intercept the request, extract the user identity that the agent represents, calls the web API to create an account, and return the credentials
On subsequent requests, the agent sends both the kya token and the credentials to access the protected resources.
The bot manager or fraud detection engine once more validate the token, extracts the agent and platform identity claims, classify the traffic and allows it to proceed to the protected web resource

Fig. 4: Account creation through MCP server

Figure 4 shows the workflow allowing AI agents to create accounts programmatically using the Skyfire token and the Model Context Protocol (MCP):

The Buyer Agent calls the Skyfire API (https://api.skyfire.xyz/api/v1/tokens) to generate a kya or kya+pay token.
If the API key is valid, the SKyfire agent identity provider generates a token according to the criteria defined in the request
The Agent sends the token to the seller’s "createAccount" or similar endpoint on their MCP-compatible server.
The bot manager or fraud detection engine protecting the website validate the token, extracts the agent and platform identity claims, classify the traffic and allows it to proceed to the protected web resource
The MCP server in front of the web server intercept the request, extract the user identity that the agent represents, calls the web API to create an account, and return the credentials
On subsequent requests, the agent sends both the kya token and the credentials to access the protected resources.
The bot manager or fraud detection engine once more validate the token, extracts the agent and platform identity claims, classify the traffic and allows it to proceed to the protected web resource

Fig. 4: Account creation through MCP server