Back to Directory/Monitoring & Observability

io.github.kakunin-ai/kakunin

X.509 identity, risk scoring, and audit logging for AI agents. MiCA + EU AI Act compliant.

Monitoring & ObservabilityTypeScriptv0.2.4

@kakunin/mcp — MCP server for AI agent identity & compliance

OpenSSF Scorecard kakunin-mcp MCP server

Model Context Protocol server for the Kakunin AI agent compliance API. Lets AI agents self-verify scope, check their own risk score, and log behavioral events — all from within Claude, Cursor, or any MCP-compatible runtime.

npx @kakunin/mcp

Tools

verify_agent_scope

Check whether this agent is authorised to perform an action before executing it. Verifies the active X.509 certificate, permitted_actions scope, financial limits, and revocation status.

{
  "action": "initiate EUR/USD trade on euronext for 50000 USD",
  "venue": "euronext",
  "amount_usd": 50000
}

Returns { allowed: true|false, reason, certificate_status, permitted_actions }.

check_risk_score

Retrieve the agent's rolling 30-day risk score, band (low/medium/high), drift trend, and actionable guidance. No input required.

audit_log_append

Append a behavioral event to the agent's immutable audit log. Returns risk score + transaction ID. Events scoring ≥ 0.85 auto-trigger a certificate revocation check.

{
  "action_type": "transaction_initiated",
  "details": { "amount_usd": 50000, "venue": "NYSE" }
}

Setup

Prerequisites: Node ≥ 18, Kakunin API key + Agent ID from kakunin.ai/dashboard.

Claude Desktop

Add to ~/Library/Application Support/Claude/claude_desktop_config.json:

{
  "mcpServers": {
    "kakunin": {
      "command": "npx",
      "args": ["-y", "@kakunin/mcp"],
      "env": {
        "KAKUNIN_API_KEY": "kak_live_...",
        "KAKUNIN_AGENT_ID": "agt_..."
      }
    }
  }
}

Environment variables

VariableRequiredDescription
KAKUNIN_API_KEY✅API key (kak_live_... or kak_test_...)
KAKUNIN_AGENT_ID✅Agent ID the server acts on behalf of
KAKUNIN_BASE_URLoptionalOverride API base (default: https://kakunin.ai)

Sandbox mode

Use a kak_test_... key for development — hits the sandbox CA, no cost, 100 free certs/day.

Full docs at docs.kakunin.ai.

Contributors

Thanks to everyone who contributes (emoji key) — code and non-code alike:

Contributions of any kind are welcome — this project follows the all-contributors spec.

Installation

Source-derived launch command. Check the maintainer’s required arguments and credentials before running:

bash
npx -y @kakunin/mcp

Set up in your AI client

Merge this template into ~/Library/Application Support/Claude/claude_desktop_config.json. Keep existing servers. Add any arguments, credentials, and permissions required by the maintainer; this template has not been install-tested.

json
{
  "mcpServers": {
    "io-github-kakunin-ai-kakunin": {
      "command": "npx",
      "args": [
        "-y",
        "@kakunin/mcp"
      ]
    }
  }
}

Restart Claude Desktop completely for changes to take effect. Confirm the server appears connected in the client’s tool list, then try a read-only example from its documentation.

Claude Desktop setup reference

Package

@kakunin/mcpnpm

Compatible MCP Clients

io.github.kakunin-ai/kakunin works with any MCP-compatible client. Copy the config snippet from the Configuration section above and add it to the file shown for your client, then restart the application.

  • Claude Desktop~/Library/Application Support/Claude/claude_desktop_config.jsonRestart Claude Desktop completely for changes to take effect.
  • Cursor~/.cursor/mcp.jsonRestart Cursor for changes to take effect.
  • VS Code.vscode/mcp.jsonReload VS Code window for changes to take effect.
  • Windsurf~/.codeium/windsurf/mcp_config.jsonRestart Windsurf for changes to take effect.
  • Claude Code.mcp.jsonSave at the project root, then start Claude Code in that project and review the MCP server approval prompt. Keep real credentials out of shared files.

Learn More