MCP playground

MCP server, live. Plug in Claude or GPT.

Live demoRun this demo at sandbox.kyeprotocol.com/mcp-playground.html; the same governed flow also runs in the terminal and the lab.

← Sandbox

Connect to the KYE™ sandbox MCP server from Claude Desktop, Cursor, Cline, or any other MCP-aware host. The sandbox endpoint mounts all 12 KYE™ tools against synthetic fixtures so you can prototype agent governance without touching real systems.

Plain Q&A

Short questions. Short answers.

Do I need to sign up? No.
Is this real? Yes. Real Workers. Real keys.
Can I see the source? Yes. The runtime is open.
Where does state go? Public sandbox DB. Resets daily.
Will it log my IP? No. Logs are scrubbed.
How many calls free? Up to 200 per hour.
Curl-friendly? Yes. Every endpoint.
Bring my own data? Yes. Drop a JSON. Try.

Plain take

Try every endpoint. Sign every reply. No signup.

Real Workers. Real signatures.
Public test keys. Public test data.
Reset state with one click.
Curl-friendly. SDK-friendly.

Endpoint

https://mcp.sandbox.kyeprotocol.com/v1/mcp

No auth required. Rate-limited to 60 requests / minute per source IP. State resets nightly at 03:00 UTC.

Quick start

Short read. Long shelf life.

Claude Desktop (claude_desktop_config.json)

~/Library/Application Support/Claude/claude_desktop_config.jsonjson

{
  "mcpServers": {
    "kye-sandbox": {
      "command": "npx",
      "args": ["-y", "@modelcontextprotocol/server-http", "https://mcp.sandbox.kyeprotocol.com/v1/mcp"]
    }
  }
}

Cursor / Cline (HTTP transport)

settings.json / cline.jsonjson

{
  "mcp.servers": {
    "kye-sandbox": {
      "type": "http",
      "url": "https://mcp.sandbox.kyeprotocol.com/v1/mcp"
    }
  }
}

Smoke-test from curl

bashterminal

curl -sS https://mcp.sandbox.kyeprotocol.com/v1/mcp \
  -H 'content-type: application/json' \
  -d '{
    "jsonrpc": "2.0",
    "id": 1,
    "method": "tools/list"
  }' | jq .

The 12 KYE™ MCP tools

Short take. Big idea.

kye.observed_action.ingest

Push a single observed_action into the sandbox stream. Returns a decision envelope and a fresh Evidence Pack ID.

kye.observed_action.batch_ingest

Push up to 1,000 observed_actions in one round-trip. Useful for backfill demos.

kye.evidence_pack.get

Fetch a signed Evidence Pack by ID. Verifies the COSE-Sign1 signature client-side.

kye.evidence_pack.verify

Submit a serialized pack and get a structured verification report (signature, ordered linkage, public-key lookup).

kye.authority_graph.search

Walk the authority graph from any KYEID. Returns the delegation chain up to the root principal.

kye.purpose_permission.list

List all PPs bound to the sandbox tenant. Filter by actor, allowed_action, or scope.

kye.purpose_permission.issue

Issue a new PP in the sandbox (local-only, wiped nightly). Useful for testing scope evolution.

kye.purpose_permission.revoke

Revoke a PP and cascade. Shows the consent receipts and downstream grants that get touched.

kye.authority_gap.list

List detected Authority Gaps for a scenario. Returns severity, action counts, and recommended Guards.

kye.guard_recommendation.simulate

Simulate applying a Guard Recommendation. Returns the projected change in allow/deny rates against the 30-day fixture stream.

kye.drift.score

Return the current drift score for an agent over a window. Indicates whether the action distribution has shifted meaningfully. The scoring method is part of the hosted engine and is not disclosed in this repository.

kye.conformance.pack.build

Build a Conformance Pack for the sandbox tenant. Signed manifest of every artefact a regulator would need.

Ready to mount the same tools against your real agents?

The MCP server is published as @kye/mcp-server on npm. Configure it with your tenant credentials after pilot onboarding. Apply for pilot →.

kye-sandbox mcp · live endpoint at mcp.sandbox.kyeprotocol.com ← All scenarios

Canonical KYE™ surfaces referenced on this page: Authority Graph™ · Evidence Pack™ · KYE™ Conformance Pack™ · KYE™ MCP Server.