Account

The principal is the stable identifier kotoba.cloud knows you by. It does not change when you replace a passkey or a wallet.

Linking a Google or GitHub account lets "Continue with Google" offer this account's passkey next time. A linked account names the account; it is not a way to sign in.

Unlinking does not affect signing in with a passkey or a wallet.

Card verification: register a credit or debit card to complete it (checkout.stripe.com). Prepaid and virtual cards are not accepted.

Document verification (Stripe Identity, verify.stripe.com) can be added. Card details and documents go to Stripe only; kotoba.cloud keeps the status, the expiry and an evidence reference. Verification expires after 365 days.

Each scope is approved on its own basis for research. An expired or suspended scope cannot run inference.

An organization is issued as a did:webvh DID; membership is managed with verifiable credentials (VC). The creator receives the owner role.

Invited members share API tokens, scopes and billing. Roles are owner / admin / member / billing.

Members are managed by the organization's identity provider (OpenID Connect: Google Workspace, Microsoft Entra ID, Okta and others). A member removed from the IdP loses organization access at the next re-authentication interval.

The IdP is not a way to sign in. Members first sign in with a passkey or a wallet, then authenticate with the organization's IdP to obtain membership. Roles are admin / member / billing; owner is never granted by an IdP.

Available to organizations on the Team / Enterprise plans. SAML is not supported yet.

The verified free research allowance is never charged. Paid capacity is bought without automatic top-up.

MCP-capable agents such as Claude Code read /mcp.json. The full guide is at /llms.txt and /ekyc.md. Tokens are revoked one by one from the list above; from that moment the API answers 401 token-revoked.