Skyfire MCP integration

The seller key, not the buyer's. Charge Skyfire Token is a seller-side operation: the buyer creates the token and calls your service with it, you deliver, then you charge. A 401 means an invalid or expired token or the wrong key, and a 402 means the charge exceeded the token's value.

A KYA token identifies the agent, a PAY token authorises spend, and a KYA+PAY token does both in one. Lyro picks based on what the seller requires, and runs Introspect Skyfire Token before the call when there has been a delay, so an expired token does not waste the request.

It can. Set Agent Source IP Addresses registers the IP addresses an agent's requests originate from, and it is done before tokens are created rather than after a call is rejected. That allowlist is what keeps a leaked credential from being usable somewhere else.

Get Skyfire Token Charges audits the charges made against a specific token, showing exactly what each seller took and when. Set against the token's authorised value, that answers the reconciliation question - a five dollar authorisation and what was actually drawn against it - from the record rather than an invoice.