kakunin-mcp
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| KAKUNIN_API_KEY | Yes | API key (kak_live_... or kak_test_...) | |
| KAKUNIN_AGENT_ID | Yes | Agent ID the server acts on behalf of | |
| KAKUNIN_BASE_URL | No | Override API base (default: https://kakunin.ai) |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {
"listChanged": true
} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| verify_agent_scopeA | Check whether this agent is authorised to perform a specific action or call a specific endpoint. Verifies the active X.509 certificate, permitted_actions scope, financial limits, and revocation status. Call this BEFORE executing any action that might exceed scope — not after. |
| check_risk_scoreA | Retrieve this agent's rolling 30-day risk score, risk band (low/medium/high), and drift trend. Returns actionable guidance — use this to decide whether to self-throttle, escalate to a human, or proceed normally. |
| audit_log_appendA | Append a behavioral event to this agent's immutable audit log. Use this to voluntarily record actions — transactions, data operations, API calls. Returns the risk score for the event and a transaction ID for traceability. High-risk events (score >= 0.85) automatically trigger a certificate revocation check. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
TDQS
Scored across 3 tools
Each tool serves a distinct, non-overlapping purpose: logging events, checking risk, and verifying authorization. No ambiguity between them.
All tools follow a consistent verb_noun pattern in snake_case (append, check, verify), making the set predictable and easy to understand.
With only 3 tools, the server is tightly scoped to essential agent monitoring and authorization functions, avoiding unnecessary bloat.
The tool surface covers the key lifecycle for agent self-management: logging actions, assessing risk, and verifying scope before execution. No obvious gaps.