Mnki MCP server
io.github.MNKIAgentOS/mnki-mcp·v0.3.0·1 starsMCP proxy that checks every tools/call against Agent Trust policy, with evidence, before it runs.
1 stars113 downloads/wk
Reviews
Write oneNobody has reviewed Mnki yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Mnki tools
No tool declarations could be read from the package source. They show once the server is installed.
Public scan report
scanner v0.1.10 · 2026-10-02 · same rubric, same numbers if you re-run it
- Code scan19 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitystatic API keys via environment variables6/15
- Maintenancelast push 11 days ago15/15
- Maintainer identityregistry namespace matches repository owner7/10
How Mnki compares
Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 82/100
- higher than 65% of 4,460 AI and agents servers
- GitHub stars
- 1
- more than 50% of 2,711 AI and agents servers
- Downloads a week
- 113
- more than 66% of 1,538 AI and agents servers with a package
Release history: 3 versions in the registry since 2026-09-17, latest 2026-09-20, typically one every 3 days.
Install Mnki in Claude Code, Cursor or VS Code
Runs npx -y mnki-mcp on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add mnki-mcp -- npx -y mnki-mcp
What the publisher says
From the Mnki repository's README, as published. We do not edit it. Read it on GitHub
Agent Trust
Prove what an autonomous AI agent is authorized to do. An open profile plus a reference implementation for agent identity, principal binding, delegation with attenuation, capability-based authorization, request proof-of-possession, authorization attestations, tamper-evident provenance, single-use permits, cross-organization revocation and declared effect paths — carried on JWS, OAuth/OIDC, SPIFFE/WIMSE, AuthZEN, OpenID Federation, MCP and A2A. No new cryptography, no new protocol.
No consequential agent action should be accepted because a process is running or a token is
valid. It should be accepted because the action is attributable, authorized, constrained,
current and verifiable.
npx mnki-cli demo # the 15-second story, no account: a €47,000 refund denied, €420 allowed
npx mnki-cli scan # find the MCP servers and API keys agents can use on this machine
npm install mnki-sdk # guard() any tool call
pip install mnki # same in PythonDevelop against the open verifier and SDKs for free; govern fleets with the hosted control plane at mnki.com — see COMMERCIAL.md for the boundary and TRADEMARK.md for name and badge use. Releases carry npm/PyPI provenance, SBOMs and cosign-signed checksums (SECURITY.md).
Apache-2.0.
Nothing above is checked by us. What we check is on the safety report.
Grade history
- 2026-09-19downgradeA → Bscore 82
- 2026-09-18restoreC → Ascore 85
Mnki: common questions
- Is Mnki MCP server safe?
- Mostly: it is graded B (82/100). Read the Mnki safety report
- How do I install Mnki?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Mnki need an API key?
- Yes. The registry entry asks for
MNKI_API_KEY. - Is Mnki maintained?
- The last commit was 44 days ago (2026-09-21). The latest release is v0.3.0.
- What can I use instead of Mnki?
- Servers from other publishers that do the same job: IWE (iwe.md) MCP server, paper-preflight MCP server and HOL Guard MCP server.
- How does Mnki compare with other AI and agents MCP servers?
- safety score 82/100 (higher than 65% of 4,460 AI and agents servers); github stars 1 (more than 50% of 2,711 AI and agents servers); downloads a week 113 (more than 66% of 1,538 AI and agents servers with a package). Full comparison.
Alternatives to Mnki
Same job from other publishers: the closest match first, then the best rated.
- IWE (iwe.md)Markdown knowledge base as agent memory. Runs against the notes directory it is started in.not reviewedEstablishedA
- paper-preflightChecks every LaTeX reference against Crossref, dblp, arXiv, DataCite, PubMed and OpenAlex. No LLM.not reviewedEstablishedA
- HOL GuardLocal-first AI agent security evidence and approval workflows through HOL Guard's stdio MCP server.not reviewedEstablishedA
- DecionisAuthorize consequential AI agent actions before executionnot reviewedEstablishedA
- Watch SkillWatch video and live sessions, keep timestamped evidence, and verify an agent's own work.not reviewedEstablishedB