Kanonik MCP server
{
"mcpServers": {
"kanonik": {
"type": "http",
"url": "https://app.kanonik.ai/mcp"
}
}
}{
"mcpServers": {
"kanonik": {
"type": "http",
"url": "https://app.kanonik.ai/mcp"
}
}
}{
"mcpServers": {
"kanonik": {
"type": "http",
"url": "https://app.kanonik.ai/mcp"
}
}
}{
"servers": {
"kanonik": {
"type": "http",
"url": "https://app.kanonik.ai/mcp"
}
}
}{
"mcpServers": {
"kanonik": {
"type": "http",
"url": "https://app.kanonik.ai/mcp"
}
}
}file .mcp.json (in your project root)file claude_desktop_config.jsonfile ~/.cursor/mcp.jsonfile .vscode/mcp.jsonfile ~/.codeium/windsurf/mcp_config.jsonversion 1.0.0
What it does
Kanonik is an MCP server that provides a compliance governance runtime connected via Grok. It exposes a typed compliance model, a tamper-evident audit record, server-side verification, and a human-approval gate for all writes, targeting compliance teams and auditors working with frameworks such as ISO 27001, SOC 2, GDPR, NIST CSF 2.0, and HIPAA.
- Draft and revise compliance policies against a loaded framework such as ISO 27001 or SOC 2 using plain-language prompts.
- Assess internal controls and record evidence behind each judgement in a tamper-evident log that an external assessor can independently verify.
- Identify gaps between a compliance framework's requirements and existing controls, then produce artifacts such as a Statement of Applicability.
Before you enable it
An MCP server runs with whatever access you give it. Start with a development account rather than production, and check which tools the server exposes before you let an agent call them unattended.