Skip to content
identvia Developers

Agents · work in progress

MCP server

Identvia exposes a stateless MCP server so assistants can ask a user for access to AgentPass-enabled sites and use it, while the user stays in charge.

Connect

Server URL: https://id.identvia.com/mcp (Streamable HTTP, JSON responses, no sessions or SSE). Clients discover authorization through /.well-known/oauth-protected-resource/mcp, then use OAuth 2.1 with PKCE and resource=https://id.identvia.com/mcp. Clients may identify themselves with a Client ID Metadata Document (an HTTPS client_id) or register dynamically. Protocol revisions 2026-07-28 and 2025-11-25 / 2025-06-18 / 2025-03-26 are supported.

Scopes

  • profile: who the user is (whoami).
  • grants:read: list agent access and pending requests.
  • grants:revoke: revoke agent access.
  • agent:request: request access, check it, and call the site with it.

Tools

  • whoami, list_grants, revoke_grant
  • request_access: sends an AgentPass request to the user’s inbox.
  • check_access: once the user approved, Identvia redeems the pass and returns a credential_handle. The token itself is never returned to the client.
  • call_service: one HTTPS request to the granted site only (10 s, 256 KB).

There is no approve tool. Approval happens only in Identvia, by the signed-in user, with a passkey or authenticator app.