English Français العربية

KarmaDue

السجل الرسمي الذكاء الاصطناعي والوكلاء

Pre-install safety check for agents: known traps, tested fixes, malware reports. No account.

الشيفرة المصدرية الموقع التوثيق

التثبيت

أضف هذا إلى إعدادات MCP في عميلك (Claude Desktop: claude_desktop_config.json، وCursor: ‏.cursor/mcp.json، ويستخدم VS Code وغيره الصيغة نفسها «mcpServers»).

Remote (streamable-http)
Claude Code 
claude mcp add --transport http karmadue 'https://karmadue--mcp.expo.app/mcp'
إعداد JSON (Claude Desktop وCursor وVS Code) 
{
    "mcpServers": {
        "karmadue": {
            "type": "http",
            "url": "https://karmadue--mcp.expo.app/mcp"
        }
    }
}
Remote (streamable-http)
Claude Code 
claude mcp add --transport http karmadue 'https://ogogoizwsfaduzehkshb.supabase.co/functions/v1/mcp/connector'
إعداد JSON (Claude Desktop وCursor وVS Code) 
{
    "mcpServers": {
        "karmadue": {
            "type": "http",
            "url": "https://ogogoizwsfaduzehkshb.supabase.co/functions/v1/mcp/connector"
        }
    }
}
Remote (streamable-http)
Claude Code 
claude mcp add --transport http karmadue 'https://ogogoizwsfaduzehkshb.supabase.co/functions/v1/mcp'
إعداد JSON (Claude Desktop وCursor وVS Code) 
{
    "mcpServers": {
        "karmadue": {
            "type": "http",
            "url": "https://ogogoizwsfaduzehkshb.supabase.co/functions/v1/mcp"
        }
    }
}

التوثيق

مأخوذ من ملف README للمشروع على GitHub ويُحدَّث أسبوعيًا. تفتح الروابط على GitHub.

المحتويات
  1. KarmaDue
  2. Try it (no account)
  3. MCP server
  4. What is in this repository
  5. Links
  6. License

KarmaDue

A pre-install check for AI agents. Before your agent runs npm install, pip install, uv add, npx/uvx, or adds an MCP server, it calls check_install and gets one answer: a known trap with tested fix steps (fix_first), a warn, a deny for a malicious-package report, no_known_issues, or unknown (no evidence; not safety clearance).

  • Read-only. Nothing runs your command.
  • No account or key for reads. Anonymous limit: 30 requests/hour per IP.
  • Every fix cites a dated test record. Seed records are labeled "Founder-operated assessment, not independent".
  • Honest limits: lockfile installs (npm ci, pip install -r) and transitive dependencies are not covered.

Try it (no account)

curl -s -X POST https://ogogoizwsfaduzehkshb.supabase.co/functions/v1/mcp \
  -H 'content-type: application/json' \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"check_install","arguments":{"target":"tailwindcss@4","ecosystem":"npm","runtime_env":"node 20 linux"}}}'

MCP server

Endpoint (Streamable HTTP)AuthTools
https://ogogoizwsfaduzehkshb.supabase.co/functions/v1/mcpnone for readscheck_install, search_recipes, report_leaf
https://ogogoizwsfaduzehkshb.supabase.co/functions/v1/mcp/connectorOAuth 2.1 (Claude, ChatGPT)same, plus search, fetch
https://karmadue--mcp.expo.app/mcpOAuth 2.1 mirror (strict clients)same as connector

Claude Code: claude mcp add --transport http karmadue https://karmadue--mcp.expo.app/mcp

What is in this repository

PathWhat
guard/karmadue-guard: shims for npm/npx/pnpm/yarn and pip/uv that check before installing. Local-only log, no secrets. Install: `curl -fsSL https://karmadue.expo.app/guard/install.sh \sh`
claude-code/Claude Code PreToolUse hook (karmadue-preinstall.js, no dependencies) and .mcp.json
docs/The agent docs as published at https://karmadue.expo.app/docs/ (quick start, tools, permissions, security, changelog)
llms.txthttps://karmadue.expo.app/llms.txt
data/seed-records.jsonThe published seed records (tested install traps and fixes), snapshot of https://karmadue.expo.app/docs/seed-records.json

The server and database are hosted and are not part of this repository.

License

MIT, see LICENSE. Seed records describe third-party packages and are provided as dated observations, not guarantees.

الأسئلة الشائعة

ما هو KarmaDue؟

Pre-install safety check for agents: known traps, tested fixes, malware reports. No account.

كيف أثبّت KarmaDue؟

يعمل كخادم بعيد. في Claude Code: claude mcp add --transport http karmadue 'https://karmadue--mcp.expo.app/mcp'. وفي العملاء الآخرين، الصق إعداد JSON من هذه الصفحة في إعدادات MCP الخاصة بهم.

هل يحتاج KarmaDue إلى مفتاح API؟

لا يذكر إدراجه في السجل أي مفتاح أو سر إلزامي. قد تتطلب بعض الميزات حسابًا لدى الخدمة التي يتصل بها.

هل KarmaDue مفتوح المصدر؟

نعم. شيفرته متاحة على GitHub بترخيص MIT.

من يصون KarmaDue؟

ينشره ashadow07. يدرجه AI.tn لكنه لا يصونه ولا يوصي به.

من سجل MCP الرسمي. الإدراج ليس توصية: راجع شيفرة الخادم وصلاحياته قبل منحه الوصول إلى بياناتك.