K-Work Trust
Korean business record validation and workflow safety gates for AI agents.
Install
Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).
claude mcp add --transport http k-work-trust 'https://k-work-trust-api.fly.dev/mcp' --header 'Authorization: <Bearer KWT API key issued through the public self-serve signup flow. Optional for initialize/tools/list and required for tools/call.>'
{
"mcpServers": {
"k-work-trust": {
"type": "http",
"url": "https://k-work-trust-api.fly.dev/mcp",
"headers": {
"Authorization": "<Bearer KWT API key issued through the public self-serve signup flow. Optional for initialize/tools/list and required for tools/call.>"
}
}
}
}
Documentation
From the project's README on GitHub, refreshed weekly. Links open on GitHub.
Contents
K-Work Trust Public Demo
K-Work Trust is a remote MCP/API trust gate for AI agents before they write Korean business workflow records.
It helps an external AI agent inspect whether it should continue, pause, retry, stop, or escalate before registering vendors, checking invoice readiness, releasing payment or invoice steps, updating CRM, or touching ecommerce back-office records.
Public Demo
- Demo page: https://k-work-trust-api.fly.dev/agent-demo
- Remote MCP endpoint: https://k-work-trust-api.fly.dev/mcp
- Readiness: https://k-work-trust-api.fly.dev/v1/agent/readiness
- Agent manifest: https://k-work-trust-api.fly.dev/.well-known/k-work-trust-agent.json
- Skill instructions: https://k-work-trust-api.fly.dev/skill.md
- OpenAPI: https://k-work-trust-api.fly.dev/openapi.json
What To Test
- Read the public readiness endpoint.
- Read the agent manifest, skill instructions, and OpenAPI.
- Use
POST https://k-work-trust-api.fly.dev/mcpif your client supports MCP Streamable HTTP. - Use provisional signup if your agent has no inbox, or email-verified signup if it can read email.
- Call
/v1/auth/whoamibefore spending quota. - Run one synthetic
/v1/vendor-onboarding/validatecall. - Report only non-secret debugging fields.
Safe Reporting Fields
request_id- endpoint called
- HTTP status
- response
statusanddecision - first blocked step
- confusing or missing response field
Do not post API keys, proof solutions, email verification codes, private customer records, production screenshots, or sensitive business data.
Synthetic Payload
See examples/synthetic-vendor.json. It is fake test data and is safe to copy into a local agent experiment.
Minimal Metadata Fetch
node examples/fetch-public-metadata.js
The script reads public metadata only. It does not require an API key.
Remote MCP
Remote MCP supports initialize, tools/list, and tools/call over JSON-response Streamable HTTP. initialize and tools/list are public for discovery; MCP tools/call uses the same API key, quota, official-source, and abuse-guard policies as protected REST workflow calls.
Product Gates
validate_vendor_onboarding: decide whether a Korean vendor/customer record can be registered.validate_payment_or_invoice_release: decide whether an agent can release a payment, invoice, settlement, or purchase step, or whether it must prepare a human review packet first.
Why This Exists
Mature KYB platforms are broad compliance systems for onboarding, UBO, sanctions, adverse media, and case review. K-Work Trust is narrower: a small agent-readable pre-action gate with stable JSON decisions, public MCP discovery, low-quota test keys, and Korean business-field logic.
The core response contract is meant for another agent to use directly:
decisionblocking_issueswarningsevidenceagent_next_action
Scope
This public demo repo intentionally excludes private operating memory, API usage logs, credentials, .env, local model files, and customer data. The production service enforces authentication, low beta quotas, and behavior-based abuse blocking for protected workflow calls.
Frequently asked questions
What is K-Work Trust?
Korean business record validation and workflow safety gates for AI agents.
How do I install K-Work Trust?
It runs as a remote server. In Claude Code: claude mcp add --transport http k-work-trust 'https://k-work-trust-api.fly.dev/mcp' --header 'Authorization: <Bearer KWT API key issued through the public self-serve signup flow. Optional for initialize/tools/list and required for tools/call.>'. For other clients, paste the JSON configuration from this page into their MCP settings.
Does K-Work Trust need an API key?
Yes. It expects Authorization, which you set in its configuration.
Is K-Work Trust open source?
Its code is public on GitHub, but the repository does not declare a standard license.
Who maintains K-Work Trust?
It is published by hycore220. AI.tn lists it but does not maintain or endorse it.
From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.