TanStack
Featured
router
TanStack Router is a type-safe, data-driven React router with built-in caching, prefetching, and nested layouts, while TanStack Start extends it into a full-stack SSR framework.
kakunin-core
Kakunin is an open-source compliance and identity platform for AI agents that issues X.509 certificates, scores behavior in real time, revokes credentials automatically when risk thresholds are exceeded, and produces regulator-ready evidence for frameworks like MiCA and the EU AI Act.
Stars
23
7-day growth
No data
Forks
1
Open issues
1
License
AGPL-3.0
Last updated
2026-07-09
AI repository intelligence
FR-AI / ANALYSISWhy it is worth attention
It uniquely combines cryptographic agent identity (X.509 certificates via AWS KMS) with real-time behavioral risk scoring and automated credential revocation, all designed to meet emerging AI regulations, and it is provided as open-source (AGPL-3.0) with a hosted trust anchor to ensure verifiability.
Who it is for
- Developers building AI agents that need compliance and identity infrastructure
- Compliance and security teams in organizations deploying autonomous AI systems
- Platform builders who want to integrate agent monitoring and credential management
- Regulators or auditors evaluating agent behavior and audit trails
Use cases
- Automatically revoke an agent's credentials when its behavior exceeds a risk threshold (e.g., going rogue)
- Generate regulator-ready compliance reports for AI agent operations under EU AI Act or MiCA
- Issue and manage X.509 certificates for AI agents to establish cryptographic identity
- Monitor and score agent behavior in real time to detect anomalies or policy violations
Strengths
- Real-time behavioral risk scoring tied directly to credential lifecycle (auto-revocation)
- Uses AWS KMS for secure key custody and X.509 certificate issuance, meeting enterprise security standards
- Open-source platform (AGPL-3.0) with Apache-2.0 SDKs, allowing flexibility in usage and integration
- Designed from the ground up to produce regulator-ready evidence for MiCA and EU AI Act compliance
Considerations
- Self-hosting the platform requires provisioning many external services (~50 environment variables), making it non-trivial
- The trust anchor (canonical certificate authority) is hosted and cannot be fully self-hosted, limiting full autonomy
- The AGPL-3.0 license may require source code distribution for those running a modified version as a network service
README quick start
Kakunin — AI Agent Compliance Platform
An agent goes rogue → risk climbs → the certificate auto-revokes. Try it live, no signup: kakunin.ai/compliance-demo
Kakunin is compliance and identity infrastructure for AI agents. It issues X.509 certificates to agents via AWS KMS, scores their behavior in real time, revokes credentials automatically when risk crosses threshold, and produces regulator-ready compliance evidence — built for MiCA and the EU AI Act.
This repository is the platform / control plane: the Next.js application, the certificate authority integration, the behavioral risk engine, the API surface, and the compliance-reporting pipeline. It is the source behind the hosted service at kakunin.ai.
Open source, hosted trust anchor. The code is AGPL-3.0. The canonical certificate authority and public verification endpoint run as a hosted service, because a trust anchor everyone can fork is not a trust anchor — any counterparty must be able to verify a Kakunin certificate against one authority. See Open Source vs Hosted.
🚀 Most developers should start with the SDKs
You don't need to self-host this platform to use Kakunin. The fastest way to add cryptographic identity, behavioral monitoring, and compliance to your AI agents is the lightweight, Apache-2.0 SDKs — they talk to the hosted service, with free sandbox keys.
| Language | Package | Install | License |
|---|---|---|---|
| TypeScript | @kakunin/sdk | npm install @kakunin/sdk | Apache-2.0 |
| Python | kakunin | pip install kakunin | Apache-2.0 |
TypeScript SDK → · Python SDK → · Docs →
Reach for this repo (Core) only when you need to run your own control plane. For everything else, the SDKs are the on-ramp.
What's here vs. the SDKs
The client libraries developers install live in their own repositories and are Apache-2.0:
| Repo | Package | |
|---|---|---|
| TypeScript SDK | kakunin-sdk-typescript | @kakunin/sdk |
| Python |
Description
AI agent compliance platform — X.509 identity via AWS KMS, real-time behavioral risk scoring, auto-revocation, and MiCA / EU AI Act compliance reporting. AGPL-3.0.
Related repositories
Similar projects matched by category, topics, and programming language.
vercel-labs
Featured
scriptc
scriptc compiles ordinary TypeScript into small, fast native executables without needing Node.js, V8, or any JavaScript runtime in the binary.
Jakubantalik
Featured
thinking-orbs
A React component library that renders six hand-tuned animated thought orb loading indicators on a plain 2D canvas, with two purpose-tuned sizes and automatic theme detection for AI and agent UIs.