io.github.nqzai/kakunin
X.509 identity, risk scoring, and audit logging for AI agents. MiCA + EU AI Act compliant.
Install
Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).
@kakunin/mcpclaude mcp add kakunin -e 'KAKUNIN_API_KEY=<your kakunin_api_key>' -e 'KAKUNIN_AGENT_ID=<KAKUNIN_AGENT_ID>' -- npx -y @kakunin/mcp@0.2.3
{
"mcpServers": {
"kakunin": {
"command": "npx",
"args": [
"-y",
"@kakunin/mcp@0.2.3"
],
"env": {
"KAKUNIN_API_KEY": "<your kakunin_api_key>",
"KAKUNIN_AGENT_ID": "<KAKUNIN_AGENT_ID>"
}
}
}
}
Environment variables
KAKUNIN_API_KEYsecret Kakunin API key (kak_live_... or kak_test_...). Obtain at https://kakunin.ai/dashboard.KAKUNIN_AGENT_IDID of the agent this MCP server acts on behalf of (agt_...).
Documentation
From the project's README on GitHub, refreshed weekly. Links open on GitHub.
Contents
@kakunin/mcp — MCP server for AI agent identity & compliance
Model Context Protocol server for the Kakunin AI agent compliance API. Lets AI agents self-verify scope, check their own risk score, and log behavioral events — all from within Claude, Cursor, or any MCP-compatible runtime.
npx @kakunin/mcp
Tools
verify_agent_scope
Check whether this agent is authorised to perform an action before executing it. Verifies the active X.509 certificate, permitted_actions scope, financial limits, and revocation status.
{
"action": "initiate EUR/USD trade on euronext for 50000 USD",
"venue": "euronext",
"amount_usd": 50000
}
Returns { allowed: true|false, reason, certificate_status, permitted_actions }.
check_risk_score
Retrieve the agent's rolling 30-day risk score, band (low/medium/high), drift trend, and actionable guidance. No input required.
audit_log_append
Append a behavioral event to the agent's immutable audit log. Returns risk score + transaction ID. Events scoring ≥ 0.85 auto-trigger a certificate revocation check.
{
"action_type": "transaction_initiated",
"details": { "amount_usd": 50000, "venue": "NYSE" }
}
Setup
Prerequisites: Node ≥ 18, Kakunin API key + Agent ID from kakunin.ai/dashboard.
Claude Desktop
Add to ~/Library/Application Support/Claude/claude_desktop_config.json:
{
"mcpServers": {
"kakunin": {
"command": "npx",
"args": ["-y", "@kakunin/mcp"],
"env": {
"KAKUNIN_API_KEY": "kak_live_...",
"KAKUNIN_AGENT_ID": "agt_..."
}
}
}
}
Environment variables
| Variable | Required | Description |
|---|---|---|
KAKUNIN_API_KEY | ✅ | API key (kak_live_... or kak_test_...) |
KAKUNIN_AGENT_ID | ✅ | Agent ID the server acts on behalf of |
KAKUNIN_BASE_URL | optional | Override API base (default: https://kakunin.ai) |
Sandbox mode
Use a kak_test_... key for development — hits the sandbox CA, no cost, 100 free certs/day.
Full docs at docs.kakunin.ai.
Contributors
Thanks to everyone who contributes (emoji key) — code and non-code alike:
Contributions of any kind are welcome — this project follows the all-contributors spec.
Frequently asked questions
What is io.github.nqzai/kakunin?
X.509 identity, risk scoring, and audit logging for AI agents. MiCA + EU AI Act compliant.
How do I install io.github.nqzai/kakunin?
It runs on your machine. In Claude Code: claude mcp add kakunin -e 'KAKUNIN_API_KEY=<your kakunin_api_key>' -e 'KAKUNIN_AGENT_ID=<KAKUNIN_AGENT_ID>' -- npx -y @kakunin/mcp@0.2.3. For other clients, paste the JSON configuration from this page into their MCP settings.
Does io.github.nqzai/kakunin need an API key?
Yes. It expects KAKUNIN_API_KEY, which you set in its configuration.
Is io.github.nqzai/kakunin open source?
Yes. Its code is on GitHub under the Apache-2.0 license.
Who maintains io.github.nqzai/kakunin?
It is published by nqzai. AI.tn lists it but does not maintain or endorse it.
From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.