MCP.Market

Kanonik MCP server

online · 100% uptime
by kanonik.ai·ai.kanonik/kanonik·v1.0.0
No reviews yet

Governance runtime for compliance: verified, human-approved writes to a tamper-evident record.

A97/100grade A
Write a reviewRun it
What users say
No reviews yet
Be the first
Safety scan
A97/100

full report

Adoption
Growing

0 stars

Reviews

Write one

Nobody has reviewed Kanonik yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Kanonik tools

Tool list not cached yet. `describe` through the gateway fetches it live.

Public scan report

scanner v0.1.10 · 2026-10-29 · same rubric, same numbers if you re-run it

no findings
  • –Code scanremote-only server, no package to scann/a
  • Live reliabilityremote reachable in 540ms (auth required)20/20
  • –Tool poisoningtools not inspected (endpoint requires auth); not countedn/a
  • Auth qualityOAuth resource metadata advertised on 40115/15
  • Maintenancelast push 8 days ago15/15
  • Maintainer identityendpoint served from the registry-verified namespace domain8/10
Overall 97/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Kanonik compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
97/100
higher than 98% of 48,243 servers
Uptime
100%
of our recent checks; the typical remote server answers 100%
Response time
1,178 ms
faster than 9% of 30,027 servers

Install Kanonik in Claude Code, Cursor or VS Code

claude mcp add --transport http kanonik https://app.kanonik.ai/mcp
Add to Cursor

What the publisher says

From the Kanonik repository's README, as published. We do not edit it. Read it on GitHub

Kanonik

Governance runtime for compliance work, connected to Grok over MCP.

Kanonik gives your AI a typed compliance model to work in, a tamper-evident record of everything it does, a server-side Verifier that checks its work, and a human-approval gate in front of every write. Your AI does the reasoning. Kanonik makes the result defensible.

What you can do with it

Ask your AI to work on your compliance program in plain language:

  • Draft and revise policies and procedures against a loaded framework
  • Assess internal controls and record the evidence behind each judgement
  • Find the gaps between what a framework requires and what you actually have
  • Build an audit trail an assessor can verify independently
  • Produce a Statement of Applicability, or the equivalent artifact for your framework

The framework in scope comes from your workspace. Kanonik runs ISO 27001:2022, SOC 2, GDPR, NIST CSF 2.0 and HIPAA today. Nothing in the plugin is specific to any one of them.

Installing

/marketplace

Then pick Kanonik. Or from the CLI:

grok plugin install kanonik --trust

On first use your AI connects to https://app.kanonik.ai/mcp and a browser window opens for sign-in. You will need a Kanonik account; sign up at kanonik.ai.

What this plugin contains

One file that tells Grok where the Kanonik MCP server lives:

{
  "mcpServers": {
    "kanonik": { "type": "http", "url": "https://app.kanonik.ai/mcp" }
  }
}

That is the whole plugin. There is no bundled code, no install script, no hook, and no local process. Everything runs server-side at Kanonik.

Permissions and data

against https://auth.kanonik.ai. Tokens are held by your Grok client. The plugin holds no credential and ships no secret.

  • Network. One endpoint, https://app.kanonik.ai/mcp. Nothing else.
  • Authentication. OAuth 2.1 with Dynamic Client Registration and PKCE,

to draft changes, kanonik:commit to submit them for approval.

  • Scopes. kanonik:read to read your compliance record, kanonik:propose

token and a human clicking to approve it. Your AI cannot approve its own work.

  • Writes. No change reaches your record without a signed single-use approval

If your AI reads from GitHub, Jira, or your identity provider, it does so through its own connections, not through Kanonik.

  • Your other systems. Kanonik never holds credentials to your source systems.

Links

  • Site: kanonik.ai
  • Documentation: kanonik.ai/docs
  • Contact: kanonik.ai/contact

License

See LICENSE. The Kanonik service itself is proprietary; this repository contains only the connection manifest and documentation for it.

Nothing above is checked by us. What we check is on the safety report.

Kanonik: common questions

Is Kanonik MCP server safe?
Yes, by our scan: it is graded A (97/100). Read the Kanonik safety report
How do I install Kanonik?
It runs remotely at app.kanonik.ai. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
Does Kanonik need an API key?
No key to paste: it signs you in with OAuth when your client connects.
Is Kanonik maintained?
The last commit was 15 days ago (2026-10-21). The latest release is v1.0.0.
Is Kanonik up?
100% of our last 28 checks got an answer. We check remote servers about four times a day.
How does Kanonik compare with other MCP servers?
safety score 97/100 (higher than 98% of 48,243 servers); uptime 100% (of our recent checks; the typical remote server answers 100%); response time 1,178 ms (faster than 9% of 30,027 servers). Full comparison.