Kanonik

ai.kanonikPublished by kanonik.aiOfficial publisherv1.0.0Updated Oct 24, 2026

Governance runtime for compliance: verified, human-approved writes to a tamper-evident record.

VerifiedStreamable HTTPWeb executableSecurity & MonitoringBusiness & Commerce

Overview

AI-generated overview

Kanonik is a remote governance runtime that lets an AI draft, assess and record compliance work under human-approved, tamper-evident writes.

What you can do
Draft and revise policies and procedures against a loaded compliance framework, such as ISO 27001:2022, SOC 2, GDPR, NIST CSF 2.0 or HIPAA, and produce a Statement of Applicability or equivalent artifact for the framework in scope. Assess internal controls and record the evidence behind each judgement. Find gaps between what a framework requires and what the workspace actually has. Build an audit trail an assessor can verify independently. Every write is checked by a server-side Verifier and gated behind a human approval before it reaches the record.
When to use it
Use it when compliance work needs to be defensible: drafting or revising policies, assessing controls, running gap analyses, or assembling audit evidence and statements of applicability for a recognised framework. It suits teams that want AI assistance but require a human-approved, tamper-evident record of every change.
Requirements
A remote MCP endpoint at app.kanonik.ai, reached over streamable HTTP; no local package or process. A Kanonik account is required, with OAuth 2.1 sign-in through a browser on first use. The workspace supplies the compliance framework in scope. Network access to the Kanonik endpoint and auth service is needed.
Before you install
The server reads and proposes changes to your compliance record, so scope matters: kanonik:read, kanonik:propose and kanonik:commit grant increasing access. Writes only land after a signed single-use approval token and a human click, and the AI cannot approve its own work. OAuth tokens are held by the client, not the plugin. Kanonik states it holds no credentials to your source systems such as GitHub, Jira or your identity provider.

Installation

In SourceWeft

  1. Open Kanonik in the dashboard and add it to a workspace.
  2. Connect the required credentials. They are stored privately and never shown on public pages.
  3. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/ai.kanonik%2Fkanonik/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config. The client completes OAuth sign-in on first connect.

{
  "mcpServers": {
    "kanonik": {
      "type": "http",
      "url": "https://app.kanonik.ai/mcp"
    }
  }
}

README

Kanonik

Governance runtime for compliance work, connected to Grok over MCP.

Kanonik gives your AI a typed compliance model to work in, a tamper-evident record of everything it does, a server-side Verifier that checks its work, and a human-approval gate in front of every write. Your AI does the reasoning. Kanonik makes the result defensible.

What you can do with it

Ask your AI to work on your compliance program in plain language:

  • Draft and revise policies and procedures against a loaded framework
  • Assess internal controls and record the evidence behind each judgement
  • Find the gaps between what a framework requires and what you actually have
  • Build an audit trail an assessor can verify independently
  • Produce a Statement of Applicability, or the equivalent artifact for your framework

The framework in scope comes from your workspace. Kanonik runs ISO 27001:2022, SOC 2, GDPR, NIST CSF 2.0 and HIPAA today. Nothing in the plugin is specific to any one of them.

Installing

/marketplace

Then pick Kanonik. Or from the CLI:

grok plugin install kanonik --trust

On first use your AI connects to https://app.kanonik.ai/mcp and a browser window opens for sign-in. You will need a Kanonik account; sign up at kanonik.ai.

What this plugin contains

One file that tells Grok where the Kanonik MCP server lives:

json
{  "mcpServers": {    "kanonik": { "type": "http", "url": "https://app.kanonik.ai/mcp" }  }}

That is the whole plugin. There is no bundled code, no install script, no hook, and no local process. Everything runs server-side at Kanonik.

Permissions and data

  • Network. One endpoint, https://app.kanonik.ai/mcp. Nothing else.
  • Authentication. OAuth 2.1 with Dynamic Client Registration and PKCE, against https://auth.kanonik.ai. Tokens are held by your Grok client. The plugin holds no credential and ships no secret.
  • Scopes. kanonik:read to read your compliance record, kanonik:propose to draft changes, kanonik:commit to submit them for approval.
  • Writes. No change reaches your record without a signed single-use approval token and a human clicking to approve it. Your AI cannot approve its own work.
  • Your other systems. Kanonik never holds credentials to your source systems. If your AI reads from GitHub, Jira, or your identity provider, it does so through its own connections, not through Kanonik.

Links

License

See LICENSE. The Kanonik service itself is proprietary; this repository contains only the connection manifest and documentation for it.

Source: README.md at commit 6ea4498

Tools

0
This server asks you to sign in, so SourceWeft could not read its tools without an account and has not indexed them. What a connected account sees can depend on that account and its permissions.

Version history

1
  1. v1.0.0LatestSep 16, 2026

Score

85% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts