MCP.Market

Kakunin MCP server

by nqzai·io.github.nqzai/kakunin·v0.2.3·1 stars
No reviews yet

X.509 identity, risk scoring, and audit logging for AI agents. MiCA + EU AI Act compliant.

B82/100grade B
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
B82/100

full report

Adoption
Growing

1 stars58 downloads/wk

Reviews

Write one

Nobody has reviewed Kakunin yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Kakunin tools (3)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • audit_log_append

    Append a behavioral event to this agent's immutable audit log. Use this to voluntarily record actions \u2014 transactions, data operations, API calls. Returns the risk score for the event and a transaction ID for traceability. High-risk events (score >= 0.85) automatically trigger a certificate revocation check.

  • check_risk_score

    Retrieve this agent's rolling 30-day risk score, risk band (low/medium/high), and drift trend. Returns actionable guidance \u2014 use this to decide whether to self-throttle, escalate to a human, or proceed normally.

  • verify_agent_scope

    Check whether this agent is authorised to perform a specific action or call a specific endpoint. Verifies the active X.509 certificate, permitted_actions scope, financial limits, and revocation status. Call this BEFORE executing any action that might exceed scope \u2014 not after.

Public scan report

scanner v0.1.9 · 2026-09-26 · same rubric, same numbers if you re-run it

no findings
  • Code scan3 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 19 days ago15/15
  • Maintainer identityregistry namespace matches repository owner7/10
Overall 82/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Kakunin compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
82/100
higher than 63% of 48,255 servers
Tools
3
the typical server has 7
Tools that change things
0%
typical: 0%. Fewer write tools means less an agent can break
GitHub stars
1
more than 65% of 28,688 servers
Downloads a week
58
more than 48% of 12,191 servers with a package

What its tools let an agent do: 3 read

Install Kakunin in Claude Code, Cursor or VS Code

Runs npx -y @kakunin/mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add kakunin -- npx -y @kakunin/mcp
Add to Cursor

What the publisher says

From the Kakunin repository's README, as published. We do not edit it. Read it on GitHub

@kakunin/mcp — MCP server for AI agent identity & compliance

Model Context Protocol server for the Kakunin AI agent compliance API. Lets AI agents self-verify scope, check their own risk score, and log behavioral events — all from within Claude, Cursor, or any MCP-compatible runtime.

npx @kakunin/mcp

Tools

verifyagentscope

Check whether this agent is authorised to perform an action before executing it. Verifies the active X.509 certificate, permitted_actions scope, financial limits, and revocation status.

{
  "action": "initiate EUR/USD trade on euronext for 50000 USD",
  "venue": "euronext",
  "amount_usd": 50000
}

Returns { allowed: true|false, reason, certificatestatus, permittedactions }.

checkriskscore

Retrieve the agent's rolling 30-day risk score, band (low/medium/high), drift trend, and actionable guidance. No input required.

auditlogappend

Append a behavioral event to the agent's immutable audit log. Returns risk score + transaction ID. Events scoring ≥ 0.85 auto-trigger a certificate revocation check.

{
  "action_type": "transaction_initiated",
  "details": { "amount_usd": 50000, "venue": "NYSE" }
}

Setup

Prerequisites: Node ≥ 18, Kakunin API key + Agent ID from kakunin.ai/dashboard.

Claude Desktop

Add to ~/Library/Application Support/Claude/claudedesktopconfig.json:

{
  "mcpServers": {
    "kakunin": {
      "command": "npx",
      "args": ["-y", "@kakunin/mcp"],
      "env": {
        "KAKUNIN_API_KEY": "kak_live_...",
        "KAKUNIN_AGENT_ID": "agt_..."
      }
    }
  }
}

Environment variables

Sandbox mode

Use a kaktest... key for development — hits the sandbox CA, no cost, 100 free certs/day.

Full docs at docs.kakunin.ai.

Contributors

<!-- ALL-CONTRIBUTORS-BADGE:START - Do not remove or modify this section --> <!-- ALL-CONTRIBUTORS-BADGE:END -->

Thanks to everyone who contributes (emoji key) — code and non-code alike:

<!-- ALL-CONTRIBUTORS-LIST:START - Do not remove or modify this section --> <!-- prettier-ignore-start --> <!-- markdownlint-disable --> <!-- markdownlint-restore --> <!-- prettier-ignore-end --> <!-- ALL-CONTRIBUTORS-LIST:END -->

Contributions of any kind are welcome — this project follows the all-contributors spec.

Nothing above is checked by us. What we check is on the safety report.

Kakunin: common questions

Is Kakunin MCP server safe?
Mostly: it is graded B (82/100). Read the Kakunin safety report
How do I install Kakunin?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Kakunin need an API key?
Yes. The registry entry asks for KAKUNIN_API_KEY.
Is Kakunin maintained?
The last commit was 58 days ago (2026-09-07). The latest release is v0.2.3.
How does Kakunin compare with other MCP servers?
safety score 82/100 (higher than 63% of 48,255 servers); tools 3 (the typical server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.