KYA-PAY Token
The combined token: every identity claim from a kya token and every payment claim from a pay token.
A kya-pay token carries both sets of claims in a single JWT: the identity claims of a kya token and the payment claims of a pay token. A seller can verify who is behind the agent and charge for the request from the same token, which is what makes a guest checkout possible for an agent.
The header typ is kya-pay+jwt. Verify the signature and the common claims the same way as any Skyfire token; see Common Token Claims.
Claims
A kya-pay token contains the union of the two claim sets. Nothing is defined only for kya-pay.
| Claim group | Claims | Defined on |
|---|---|---|
| Common | iss, iat, exp, jti, sub, aud, env, ssi, btg, and the others shared by every token type | Common Token Claims |
| Identity | hid, apd (optional), aid, scope (optional) | KYA Token |
| Payment | val, amt, cur, stp, sti, spr (optional), sps (optional), mnr (optional) | PAY Token |
How sellers use it
- Verify the signature and the common claims.
- Read the identity claims to decide whether to serve the request:
hidfor the human principal,aid.idfor the agent, andapdfor the organization the agent acts for, when present. - Deliver, then charge the token with Charge Token. The chargeable amount is
amt, andvalis the same amount in the settlement network's units.
For the full validation checklist, see Verify and Extract Data from Tokens.
Updated 11 days ago
Did this page help you?