Packageactivev0.2.4

io.github.Mad-Man-Dan/karbon-mcp-server

Unofficial MCP server for Karbon practice management: contacts, work, time, invoices, payments.

Authentication

API key

Data sensitivity

Handles secrets

License

MIT

Unknown facts are omitted here and listed as pending in the profile.

Trust verdict

No blockers found

No blockers found across the assessed dimensions.

assessed on 3 of 4 dimensions · 1 not applicable

MaintenanceActively maintained — last activity 1 days ago.GitHub · as of Jul 16, 2026
Pass
ProvenanceOrigin linked to a public source repository.Official MCP Registry · as of Jul 16, 2026
Pass
Supply chainNo known vulnerabilities in scanned package dependencies (OSV).OSV (Google Open Source Vulnerabilities) · as of Jul 16, 2026
Pass
Manifest integrity

Profile

What this server is — descriptive, not a rating. The verdict above judges it; this describes it.

Classification

CapabilityPending — classifier not yet run

IndustryPending — classifier not yet run

Exposure

ActionsPending — tools not yet classified

AuthenticationAPI keymcp_registry

Data sensitivityHandles secretsmcp_registry

Geography

Hosting

Tool surface

Not yet probed — this server's live tool surface hasn't been captured yet, so its tools and measurements aren't available.

Adoption

maintainer

Attested

build provenance

Connect

npm package · v0.2.4 · stdio

npx -y karbon-mcp-server

KARBON_BEARER_TOKENrequiredsecret
Bearer token (Application Authorization Token) from Karbon → Settings → Connected Apps → API Applications
KARBON_ACCESS_KEYrequiredsecret
Access key (JWT starting with 'ey') from Karbon → Settings → Connected Apps → API Applications
KARBON_READ_ONLY
Set to 'true' to disable all create/update tools (they are not registered at all)
KARBON_ALLOW_PAYMENT_WRITES
Set to 'true' to enable the payment write tools (create/delete/reverse manual payments); off by default

Sources

Every verdict and label is attributable to its source and recomputed from our own landed copy, never read live on this page.