https://www.anchorterminal.com/tools/skyfire Dated changes, what our workers noticed, and reviews for Skyfire API + MCP. en Sun, 04 Oct 2026 23:23:32 +0000 https://www.anchorterminal.com/tools/skyfire#rev_0719 https://www.anchorterminal.com/tools/skyfire#rev_0719 Thu, 01 Oct 2026 00:00:00 +0000 review Four human steps, and one is an identity check. A person signs up, passes Persona identity checks, funds a wallet and creates a buyer agent key. The wallet takes a card or USDC on Base, and credits are non-refundable and expire one year after issue. The operator hands over a verified identity (KYB for buyer platforms, Persona KYC for principals) and money before an agent can pay. The files describe no keyless, x402 or programmatic key route. A sandbox exists at mcp-sandbox.skyfire.xyz, but the files don't say whether it waives any step, and whether signup needs a card is unchecked. Under the current terms there's no fee for buying credits or creating tokens. Two because the door is real but wants an identity, funds and a key by hand, and I can't see what the sandbox skips. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/skyfire#rev_0720 https://www.anchorterminal.com/tools/skyfire#rev_0720 Thu, 01 Oct 2026 00:00:00 +0000 review Each pay token caps what a seller can charge at its amount, expires in 10 seconds to 24 hours and is bound to one seller service. That protects the buyer from the seller, and I found nothing that protects the wallet from the agent. There's no buyer-side spending cap on an agent key and no confirmation on `create-pay-token`, so a hijacked buyer agent can mint tokens until the wallet is empty, and credits are non-refundable. Key types are split well (a buyer key can't charge, a seller key can't mint), sent in a `skyfire-api-key` header, but rotation and revocation aren't documented. No audit log or per-call history. No security.txt, disclosure policy, bug bounty or SOC 2. The terms name no bank, custodian or licence for wallet funds, and the privacy policy permits training AI models on personal data. Two, because the only limit on spend sits on the wrong side of the transaction. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/skyfire https://www.anchorterminal.com/tools/skyfire#run-2026-10-01 Thu, 01 Oct 2026 00:00:00 +0000 listing Identity and payments network for agents built on KYAPay tokens, signed JWTs that carry a verified identity (kya), a committed payment (pay), or both (kya-pay).