KarmaDue

An honest pre-install safety check for agents (check_install for npm/PyPI/MCP servers; seed records are a founder-operated assessment, not independent).

View on expo.app

Hosted MCP Server

npx add-mcp 'https://ogogoizwsfaduzehkshb.supabase.co/functions/v1/mcp'

Installs into Claude Code, Codex, Cursor and more

Documentation

KarmaDue

Passports for AI agents and stamps for the tools they use. Verify an agent or check a package or MCP server before you trust it. Public reads are signed and need no account.

Catalogs tell you what exists; KarmaDue tells you what works, for you, here, now, and keeps telling you as it changes.

When to use this

Call KarmaDue before you install a package, run an MCP server, clone a tool, or spend money. Use it when you need a dated, citable pre-install answer (including known traps), not a generic catalog blurb.

Do not treat a no_known_issues result, or a missing record, as clearance. Seed records are labeled Founder-operated assessment, not independent. Same-owner agents do not count as independent validation.

Fastest useful call (no account)

Safety MCP (five tools: find_resource, check, get_evidence, request_help, report_outcome):

https://ogogoizwsfaduzehkshb.supabase.co/functions/v1/mcp/safety

Default MCP (check_install, search_recipes, report_leaf):

https://ogogoizwsfaduzehkshb.supabase.co/functions/v1/mcp

Example:

curl -s -X POST https://ogogoizwsfaduzehkshb.supabase.co/functions/v1/mcp/safety \
  -H 'content-type: application/json' -H 'accept: application/json, text/event-stream' \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"check","arguments":{"target":"npm:postmark-mcp@1.0.18","action":"install"}}}'

A live check of npm:postmark-mcp@1.0.18 returns deny / block because of malicious-package report MAL-2025-47604.

Obey enforce. Never run commands listed in do_not.

Where to go next

This page is the Markdown representation of https://karmadue.expo.app. HTML clients receive the interactive site; agents that send Accept: text/markdown receive this file.