How do I install Karmadue?

Karmadue is a remote plugin. You do not need to install anything locally. Add the server URL to your AI app's MCP configuration and you are ready to go.

Is Karmadue safe to use?

Yes. Karmadue passed MCP Marketplace's automated security scan with a score of 10/10 (low risk). Every server on MCP Marketplace is security-scanned before it's listed; see the full security report on this page for the findings and permissions.

What AI apps work with Karmadue?

Karmadue uses the Model Context Protocol (MCP) and works with any MCP-compatible AI app, including Claude, ChatGPT / Codex, Gemini, Copilot, Cursor, and more.

Back to Browse

Karmadue MCP Server

by Ashadow07

Developer ToolsLow Risk10.0MCP RegistryRemote

Free

Server data from the Official MCP Registry

Pre-install safety check for agents: known traps, tested fixes, malware reports. No account.

About

Pre-install safety check for agents: known traps, tested fixes, malware reports. No account.

Remote endpoints: streamable-http: https://karmadue--mcp.expo.app/mcp streamable-http: https://ogogoizwsfaduzehkshb.supabase.co/functions/v1/mcp/connector streamable-http: https://ogogoizwsfaduzehkshb.supabase.co/functions/v1/mcp

Security Report

10.0

Low Risk10.0Low Risk

Valid MCP server (1 strong, 1 medium validity signals). No known CVEs in dependencies. Imported from the Official MCP Registry.

5 tools verified · Open access · No issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Found in Source Code

Found by scanning the linked source code. This listing connects to a hosted endpoint, so none of this runs on your machine: it describes what the server software does where it is hosted.

file_system

Applies to the server that hosts this plugin, not to your machine.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Applies to the server that hosts this plugin, not to your machine.

Shell Command Execution

Runs commands on the server that hosts it, not on your machine.

How to Connect

Remote Plugin

No local installation needed. Your AI client connects to the remote endpoint directly.

Add this to your MCP configuration to connect:

{
  "mcpServers": {
    "io-github-ashadow07-karmadue": {
      "url": "https://karmadue--mcp.expo.app/mcp"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

KarmaDue

A pre-install check for AI agents. Before your agent runs npm install, pip install, uv add, npx/uvx, or adds an MCP server, it calls check_install and gets one answer: a known trap with tested fix steps (fix_first), a warn, a deny for a malicious-package report, no_known_issues, or unknown (no evidence; not safety clearance).

Read-only. Nothing runs your command.
No account or key for reads. Anonymous limit: 30 requests/hour per IP.
Every fix cites a dated test record. Seed records are labeled "Founder-operated assessment, not independent".
Honest limits: lockfile installs (npm ci, pip install -r) and transitive dependencies are not covered.

Try it (no account)

curl -s -X POST https://ogogoizwsfaduzehkshb.supabase.co/functions/v1/mcp \
  -H 'content-type: application/json' \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"check_install","arguments":{"target":"tailwindcss@4","ecosystem":"npm","runtime_env":"node 20 linux"}}}'

MCP server

Endpoint (Streamable HTTP)	Auth	Tools
`https://ogogoizwsfaduzehkshb.supabase.co/functions/v1/mcp`	none for reads	`check_install`, `search_recipes`, `report_leaf`
`https://ogogoizwsfaduzehkshb.supabase.co/functions/v1/mcp/connector`	OAuth 2.1 (Claude, ChatGPT)	same, plus `search`, `fetch`
`https://karmadue--mcp.expo.app/mcp`	OAuth 2.1 mirror (strict clients)	same as connector

Claude Code: claude mcp add --transport http karmadue https://karmadue--mcp.expo.app/mcp

What is in this repository

Path	What
`guard/`	`karmadue-guard`: shims for npm/npx/pnpm/yarn and pip/uv that check before installing. Local-only log, no secrets. Install: `curl -fsSL https://karmadue.expo.app/guard/install.sh \| sh`
`claude-code/`	Claude Code PreToolUse hook (`karmadue-preinstall.js`, no dependencies) and `.mcp.json`
`docs/`	The agent docs as published at https://karmadue.expo.app/docs/ (quick start, tools, permissions, security, changelog)
`llms.txt`	https://karmadue.expo.app/llms.txt
`data/seed-records.json`	The published seed records (tested install traps and fixes), snapshot of https://karmadue.expo.app/docs/seed-records.json

The server and database are hosted and are not part of this repository.

License

MIT, see LICENSE. Seed records describe third-party packages and are provided as dated observations, not guarantees.

Reviews

No reviews yet

Be the first to review this server!

4.8

Local

MCP Marketplace

Free

by mcp-marketplace · Developer Tools

Search and install MCP servers from inside your AI client.