Kakunin logo

Kakunin

Verifies agent authorization, reports rolling risk, and records behavioral events through the Kakunin compliance API.

Install Kakunin

Pick your client, then add it in one click or paste the config.

STDIONode.js
~/Library/Application Support/Claude/claude_desktop_config.json
claude_desktop_config.json
{
  "mcpServers": {
    "kakunin-2": {
      "command": "npx",
      "args": [
        "-y",
        "@kakunin/mcp"
      ],
      "env": {
        "KAKUNIN_API_KEY": "YOUR_VALUE_HERE",
        "KAKUNIN_AGENT_ID": "YOUR_VALUE_HERE"
      }
    }
  }
}

Settings → Developer → Edit Config, merge this into mcpServers, then fully quit and reopen Claude Desktop.

Values are written into the snippet above so you can paste it as is. They never leave your browser.

We couldn’t confirm it starts correctly

The install command installed and started the server, which then stopped for configuration (such as an API key) that our sandbox does not have — expected for servers that connect to your account.

npx -y @kakunin/mcp

No response to initialize.

This is an experimental automated check and can have false negatives — missing environment variables, a slow cold install, etc. It doesn’t necessarily mean something’s wrong. Last checked 6d ago.

Overview

The kakunin MCP server connects MCP-compatible agents to the Kakunin AI agent compliance API for identity and behavioral controls. It verifies X.509 certificate status, action scopes, financial limits, and revocation status before an action; retrieves a rolling 30-day risk score; and appends events to an audit log. Reach for it when an agent needs pre-action authorization checks, risk visibility, and compliance event recording. It runs with Node.js through npx and requires a Kakunin API key and agent ID.

Use cases

  • Verify an agent’s authority before initiating a financial action
  • Inspect an agent’s rolling risk score and drift trend
  • Record behavioral events with transaction identifiers
  • Trigger revocation checks for high-scoring events

Key features

  • X.509 certificate and revocation checks
  • Action scope and financial limit verification
  • Rolling 30-day risk scoring
  • Immutable behavioral audit logging
  • Automatic checks for events scoring 0.85 or higher

Tools3

What Kakunin lets your agent do. Expand a tool for its parameters.

Self-reported~134 tokens of context

Security & health

What it can reach and how reliably it runs — from our own checks, not the maintainer’s claims.

ActiveLast checked 3d ago

Recent health check succeeded.

7/7 checks healthy over the last 40d

Supply-chain signal

No high-severity advisories surfaced by our automated scan.

Critical 0High 0Medium 0Low 0

Scanned 12d ago via OSV.dev · @kakunin/mcp (npm)

Adoption & maintenance

Factual signals from GitHub, npm, and our automated checks — not a rating.

GitHub stars1Stargazers on the source repository.
npm downloads213Package downloads in the last 30 days.
Last commit1mo agoMost recent push to the default branch.
Install checkRunsOur sandbox started it; it then asked for an API key or config.
Tools exposed3Callable tools this server registers over MCP.
Directory activity1 viewsConfig copies, upvotes, and views on AllMCPs.

How Kakunin works

What kakunin MCP server does

The kakunin MCP server gives an AI agent access to three Kakunin compliance operations. It can check whether a proposed action is authorized, retrieve the agent’s current risk information, and record behavioral events. The service acts for one configured Kakunin agent identified by KAKUNIN_AGENT_ID.

Authorization checks use the active X.509 certificate, the agent’s permitted actions, configured financial limits, and certificate revocation status. This makes verify_agent_scope suitable for checking a transaction or other operation before the agent carries it out. The tool returns an allow or deny result, an explanation, certificate status, and permitted actions.

The project description positions Kakunin around AI agent identity, risk scoring, audit logging, and MiCA plus EU AI Act compliance. The repository specifically documents connections to the Kakunin compliance API rather than to a transaction venue or other external system.

How it works

The server communicates with Kakunin using credentials supplied through environment variables. An MCP client starts the server with Node.js and exposes its tools to the agent. For an authorization request, the agent supplies an action description, a venue, and an amount in U.S. dollars. The Kakunin API evaluates those details against the configured identity and permissions.

check_risk_score needs no input. It returns a rolling 30-day score, a low, medium, or high band, a drift trend, and guidance. audit_log_append accepts an action type and detail object, then returns a risk score and transaction ID. Events with a score of at least 0.85 automatically cause a certificate revocation check.

Setup and configuration

Install requirements are Node.js 18 or newer, a Kakunin API key, and an agent ID obtained from the Kakunin dashboard. The documented launch command is:

Terminal
npx -y @kakunin/mcp

Configure the command as an MCP server in the client’s settings and provide KAKUNIN_API_KEY and KAKUNIN_AGENT_ID. KAKUNIN_BASE_URL can override the default API base URL, which is https://kakunin.ai.

For development, use a kak_test_... key. The sandbox uses a sandbox certificate authority, does not incur cost, and includes 100 certificates per day. Production keys use the kak_live_... format.

Tools and capabilities

  • verify_agent_scope: checks certificate validity, action permissions, financial limits, and revocation status for a proposed action.
  • check_risk_score: returns the rolling 30-day risk score, risk band, drift direction, and guidance without requiring parameters.
  • audit_log_append: records a behavioral event and returns its risk score and transaction ID.
  • Automatic revocation checking occurs for logged events scoring 0.85 or higher.

Limitations and notes

The kakunin MCP server requires a Kakunin API key and a specific agent ID; it is not a standalone identity or scoring system. The documented inputs and outputs cover authorization checks, risk retrieval, and audit events, but do not describe tools for issuing certificates, changing permissions, or managing agents.

Use sandbox credentials for development. The README identifies Claude Desktop and Cursor as example clients and states that the server can run in any MCP-compatible runtime.

Reviews

No reviews yet — be the first to share how it worked for you.

Frequently Asked Questions about Kakunin

kakunin is an MCP server that connects AI agents to the Kakunin compliance API. Its main tools verify agent scope using X.509 identity, permissions, financial limits, and revocation status; retrieve a rolling risk score; and append behavioral events to an audit log with a transaction ID.

Run `npx -y @kakunin/mcp` with Node.js 18 or newer. Configure that command in an MCP client and provide `KAKUNIN_API_KEY` plus `KAKUNIN_AGENT_ID` as environment variables.

Kakunin requires `KAKUNIN_API_KEY` and `KAKUNIN_AGENT_ID`. You can optionally set `KAKUNIN_BASE_URL` to replace the default `https://kakunin.ai` API base URL.

It also documents Claude Desktop and says the server can run in any MCP-compatible runtime.

Use a `kak_test_...` API key for sandbox development. Sandbox requests use the sandbox certificate authority, have no cost, and include 100 free certificates per day.

Related MCP servers

Add a badge to your READMEShow it’s listed — live SVG, Markdown or HTML.

AllMCPs Directory Badge

Full Badge Customizer

Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.

Badge Style:
Live Dynamic SVG PreviewKakunin AllMCPs Directory Badge
Markdown (GitHub README)
[![AllMCPs](https://allmcps.com/api/badge/kakunin-2?style=directory)](https://allmcps.com/mcp/kakunin-2)
HTML Embed
<a href="https://allmcps.com/mcp/kakunin-2"><img src="https://allmcps.com/api/badge/kakunin-2?style=directory" alt="Kakunin on AllMCPs" /></a>