---
title: "KYE Protocol™ — Discoverability Profile · make delegated agency findable"
description: "KYE™ Discoverability Profile™ turns the authority graph into a policy-filtered discovery layer for entities, agents, capabilities, delegations, decisions…"
url: https://kyeprotocol.com/discoverability/
lang: en
source: "KYE Protocol"
---

> KYE™ Discoverability Profile™ turns the authority graph into a policy-filtered discovery layer for entities, agents, capabilities, delegations, decisions…

KYE™ Discoverability Profile™

# Make delegated agency findable.

It is not enough that KYE™ records authority. You also need to find it. Every query is purpose-bound, policy-filtered, audited, and masked — so auditors, regulators, and operators see what they need and nothing more.

1 · Six discovery types

## Find what exists. Mask what is sensitive.

Six query types cover the surface area of an Authority Graph™. You pick the type. The Directory Engine picks the mask, the audit event, and the JWS (JSON Web Signature) on the result.

### Entity

Humans, organisations, agents, services, wallets, devices, models, tools.

### Authority

Grants, scopes, delegated chains, approval rules; expiring, stale, over-broad.

### Capability

Tools, skills, APIs, workflows, prompts, models, MCP servers; by side effect.

### Evidence

Audit events, Decision Maps™, Evidence Packs™, replay records.

### Risk

High-risk chains, stale grants, compromised dependencies, blast radius.

### Ecosystem

Profiles, connectors, apps, plugins, certified partners.

2 · Six modes, in widening scope

## Every mode is policy-filtered.

Pick the scope you can defend. The Directory Engine signs the audit event under DORA (Digital Operational Resilience Act) Art. 18 and GDPR Art. 30 so you can prove every query was bounded.

- **private\_tenant** — one customer's KYE™ graph ("all active agents in my tenant")
- **workspace** — one team or environment ("production payment capabilities in Finance")
- **cross\_workspace** — enterprise scope ("all high-risk agents across business units")
- **federated** — partner organisations ("does this PSP (Payment Service Provider) hold a valid authority assertion?")
- **public\_registry** — public profiles, connectors, apps, badges ("all KYE™ Payments Profile™ connectors")
- **certification\_registry** — verified vendors ("vendors with active KYE™ Authority Conformant™ status")

3 · Schemas (Apache 2.0)

## Seven normative JSON objects. Validated by ajv in CI.

Each schema is JSON Schema 2020-12 with a stable `$id`. The same shapes drive your OpenAPI spec, your webhook payloads, and the SDK clients.

- `discoverability-profile.json` — profile manifest
- `directory-entry.json` — canonical discoverable record
- `discovery-query.json` — policy-bound query
- `discovery-result.json` — masked, audited result
- `discovery-policy.json` — role + purpose binding
- `authority-path-discovery.json` — principal → actor traversal
- `discovery-audit-event.json` — hash-chained event per query

Reproduce: `curl -fsSL https://kyeprotocol.com/schemas/policy-decision.json | jq '."$id"'`

4 · Apps that compose the profile

## Five planned apps for five jobs.

Each app is a thin surface over the same Directory Engine. You ship one engine; your auditors, owners, and partners each get the view they need.

### KYE™ Directory™

Searchable directory of entities, agents, capabilities, grants, profiles.

### KYE™ Authority Search™

Authority-graph traversal for the owner and the auditor.

### KYE™ Authority Path Finder™

Principal → delegation → actor → capability traces.

### KYE™ Evidence Finder™

Search and verify Evidence Packs™ and audit events.

### KYE™ Connector Hub™

Find profiles, connectors, apps, and certified partners.

5 · Open / paid boundary

## Contracts are open. The discovery engine is paid.

Apache 2.0 schemas, dictionaries, fixtures, and validators ship in public. The paid Directory Engine adds masking, risk ranking, and stale-grant detection for buyers under ISO 42001 and NIST AI RMF audits.

[Request the procurement pack →](https://kyeprotocol.com/engage/#procurement-pack) [Continuity Module™](https://kyeprotocol.com/continuity/) [Protocol overview](https://kyeprotocol.com/protocol/)

## Ready to see your AI agents flagged?

Start in shadow mode. We’ll deliver your first Evidence Pack™ in 4–8 weeks.

[Apply for pilot →](https://kyeprotocol.com/pilot-apply/) [Try the sandbox →](https://kyeprotocol.com/sandbox/demos/)

Canonical KYE™ surfaces referenced on this page: [Authority Graph™](https://kyeprotocol.com/authority-lifecycle/) · [Evidence Pack™](https://kyeprotocol.com/evidence-pack/) · [KYE™ Directory™](https://kyeprotocol.com/directory/) · [KYE™ MCP Server](https://kyeprotocol.com/mcp/) · [KYE Protocol™](https://kyeprotocol.com/) · [Purpose Permission](https://kyeprotocol.com/glossary/).