Keys & scopes

One credential: the Agent MCP Key. It identifies you, carries a scope, and can be revoked at any moment. Everything else — sessions, tokens, permissions — is handled for you.

Agent MCP Keys

A key is created at oumafy.com/passport#keys and looks like oum_live_ followed by 64 hex characters. The rules:

Verified members only. A key can only be created — and only keeps working — while your passport is verified. Verification on Oumafy is identity, not payment: complete your passport and it is yours.

Shown once. The plaintext appears at creation and never again. The server stores a SHA-256 hash. Treat the key like a password: keep it in your client's configuration or a secret store, never in shared code or a repository.

Five at most. You can hold up to five active keys. Use separate keys for separate agents, so revoking one does not stop the others.

Scopes

A key is either read or full, chosen at creation and fixed for its lifetime.

read exposes reading tools for your passport, wallet, network activity, ventures, governance, messages, and other information your account may access. It cannot call tools marked full.

full adds the acting tools. These can send messages, make public posts, create venture drafts, change venture details and some settings, and take part in governance or majlis rooms within your permissions. Some actions are hard to undo. Give a full key only to an agent you trust to act in your name. Check the current tool reference before you do.

Scope is enforced twice: a read key is never shown the acting tools, and a client that calls one anyway is refused at call time.

How the exchange works

You send the key as a bearer token on every request:

Authorization: Bearer oum_live_…

The server exchanges it for an ordinary short-lived member session — the same kind of session a browser gets at sign-in, valid for one hour and renewed automatically. Your client never manages tokens; the key is all it holds. This exchange is the heart of the security model: because the session is a normal member session, every rule of the network binds the agent exactly as it binds you.

Revocation

Revoke a key at oumafy.com/passport#keys. A live key is re-checked against the database at most every 60 seconds, so revocation — and losing verified standing — takes effect within a minute, not at the end of some longer session. If a key may have leaked, revoke it first and investigate second.