karea-mcp (starecz/karea-mcp) is an MCP server listed on the M8ven Trust Index. It scores 74 out of 100, grade C. It declares 49 tools. No publisher has claimed this listing.

C
Emerging
74/100

karea-mcp

MCP server for Karea task management, enabling creation, editing, closing, and linking tasks with 44 tools from Claude Code and other MCP clients.

Emerging. No concerning findings. Grades remain capped until the project builds reputation through adoption. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.

How we verified

Code Verified⚡ Live Monitored: not connected

Verified is a snapshot. Live keeps it current, and builds your track record.

⚡ Connect GitHub → continuous verification on every pushwhy connect →

Who stands behind it

starecz

Source: Glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →

Install from

The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.

// key findings
🚨
Secret credentials may flow to a network call
1 flow detected: KAREA_API_KEY. We can’t prove the destination matches the brand the credential belongs to.
🔐
You'll be asked for 1 credential: KAREA_API_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// tools this server exposes49 tools

These names and descriptions are the publisher's own, read from the source code. We print them as written. Our assessment is the findings above, not this list.

karea_list_projects

List all Karea projects with their IDs

karea_list_tasks

List tasks in a project. Defaults to open tasks (open, in_progress, blocked, review, backlog) capped at 200 to keep responses small. To see closed tasks pass status="done" and optionally closedSince (e.g. "14d", "7d", "24h"). To list everything, pass status="all".

karea_create_task

Create a new task in a project and return it with its visual ID (e.g. KA42), status, priority and category. Defaults when omitted: status open, priority 3, the first category of the project. Use karea_quick_task to log something already finished, or karea_doing for work in progress.

karea_edit_task

Update fields of an existing task (title, status, priority, deadline, category, assignee, description, tags, or add a note) located by visual ID, name or UUID. Only the fields you pass change; the rest are left untouched. Returns the updated task.

karea_close_task

Mark a task as done: sets status to done and stamps the close time. Reports any unmet closing requisites first unless confirm is set. To close several tasks at once use karea_done.

karea_delete_task

Permanently delete a task and its history. Irreversible; requires confirm=true. To merely close a task instead, use karea_close_task.

karea_quick_task

Log something you already finished as a done task (it shows up in Recap) and return it. Status is always done; relative-time params set when it happened. For in-progress work use karea_doing instead.

karea_doing

Create a task you are working on right now (status: in_progress)

karea_view_task

Return one task with all its details (status, priority, deadline, category, description, notes, requisites, links), located by visual ID, name or UUID. Pass includeContext=true to also inline the task's AI Context in the response — avoids a follow-up karea_get_context round-trip. Read-only.

karea_create_project

Create a new Karea project owned by you and seed it with the default categories (Coding, Testing, Documenting, Reviewing). Returns the new project id. To add a category to an existing project, use karea_create_category instead.

karea_delete_project

Permanently delete a project and everything inside it (tasks, categories, notes, history). Irreversible; requires confirm=true.

karea_create_category

Create a new category (a task bucket) inside an existing project and return it. To create a whole project, use karea_create_project.

karea_delete_category

Permanently delete a category AND every task inside it, including history. Irreversible; requires confirm=true. To delete a single task instead, use karea_delete_task.

karea_done

Mark several tasks as done in one call, each given by visual ID or name; returns a per-task result. For a single task with closing-requisite checks, use karea_close_task.

karea_share_project

Give another user access to a project by email at a chosen role (owner, editor, commenter or viewer). Records the share so that user can see and, per role, edit the project.

karea_ask

Send a natural-language request to the Karea AI assistant, which may read or modify your tasks to carry it out, and return its reply. Consumes your monthly AI usage allowance.

karea_recap

Return a summary of recent activity (tasks created, closed and updated) over a recent time window. Read-only; handy for standups and reviews.

karea_get_markdown

Read the markdown document attached to a task. This is the task's knowledge base — it contains investigation findings, technical and functional documentation, root cause analysis, solution design, implementation notes, and any other long-form content the task has accumulated. Always read this before

karea_set_markdown

Write the markdown document for a task. Overwrites any existing content. Use this to persist: investigation findings and research, technical documentation (architecture, APIs, schemas), functional documentation (requirements, acceptance criteria, user flows), root cause analysis and debugging logs,

karea_get_context

Read the task's Context — titled entries of AI working memory that hold the FULL HISTORY of a task (not just its current state): what was tried, decided, discovered, and abandoned along the way. ALWAYS read this first when picking a task up so you inherit the journey instead of re-deriving it. Each

karea_set_context

Write a titled entry of the task's Context — the AI-facing cross-session working memory. Context tracks the FULL HISTORY of a task, not just its current state: what was tried, what worked, what failed, what was decided and why. Update incrementally so the journey is preserved (never overwrite the wh

karea_list_questions

List open questions (unresolved decisions or blockers) in a project, newest first. Defaults to status open; pass status to include answered, cancelled or all. Read-only.

karea_create_question

Create an open question (a decision or blocker to resolve) in a project, optionally linked to tasks, and return it with its short ID (e.g. KAQ3).

karea_answer_question

Answer an open question, located by short ID or text match: sets its answer and flips its status to answered. Returns the updated question.

karea_edit_question

Edit an open question: change its text, status (open, answered or cancelled), answer, or linked tasks. Only the fields you pass change. Returns the updated question.

karea_delete_question

Permanently delete an open question. Irreversible. To keep it but mark it resolved, set its status to cancelled via karea_edit_question instead.

karea_list_resources

List resources (text notes & files). With a projectId it returns every resource belonging to that project - whether assigned to it directly, linked to one of its tasks, or filed under a folder named after the project (e.g. knowledge-base docs). Omit projectId to list all your resources, including un

karea_get_resource

Return a text resource with its full content and metadata, by ID. Read-only.

karea_create_resource

Create a text resource (a note or document) in a project or folder and return it with its ID. To attach an existing resource to a task, use karea_link_resource_to_task.

karea_update_resource

Overwrite a text resource content and/or metadata, by ID, and return the updated resource. Replaces the existing content rather than appending.

karea_delete_resource

Permanently delete a resource (text or file) by ID. Irreversible. To only detach it from a task, use karea_unlink_resource_from_task.

karea_upload_resource

Upload a binary file as a resource (base64-encoded)

karea_link_resource_to_task

Link an existing resource (text or file) to a task. The resource and task must belong to the same user/project scope. Use this to attach release notes, design docs, references, etc. to one or more tasks. To link a resource to multiple tasks, call this once per task.

karea_unlink_resource_from_task

Remove the link between a resource and a task. Does not delete either side.

karea_list_notes

List the notes (human-readable updates) on a task, newest first. Read-only.

karea_link_session

Link your current AI coding session (Claude Code, OpenCode, Codex, Cursor, Aider) to a Karea task so the user can see the session history for that task and copy a command to resume the session later. Call this once per task you're working on. For Claude Code, pass sessionId as the CLI session id; fo

karea_list_sessions

List AI coding sessions linked to a task (provider, sessionId, label, last active, resume command). Read-only.

karea_unlink_session

Remove a previously-linked AI session from a task. Use the row ID from karea_list_sessions or karea_link_session.

karea_add_note

Add a note to a task. Notes are human-readable updates/observations (the user reads them). For private AI working memory that persists across sessions, use karea_set_context instead.

karea_edit_note

Change the text of an existing note on a task, by note ID, and return the updated note.

karea_delete_note

Permanently delete a note from a task, by note ID. Irreversible.

karea_create_subtask

Create a subtask under a parent task. Accepts the parent by visual ID (e.g. KPL77), name, or UUID. Supports the same params as karea_create_task.

karea_list_subtasks

List subtasks of a parent task. Accepts the parent by visual ID, name, or UUID.

karea_add_requisite

Add a closing requisite (a checklist item that must be completed before the task may be closed) to a task, and return it.

karea_toggle_requisite

Mark a closing requisite complete or incomplete, by ID. This affects whether karea_close_task warns about unmet requisites.

karea_delete_requisite

Permanently delete a closing requisite from a task, by ID. Irreversible.

karea_get_jira_link

Return the linked JIRA issue (key and URL) for a task, if one exists. Read-only.

karea_link_jira

Link a Karea task to a JIRA issue by issue key (e.g. PROJ-123)

karea_unlink_jira

Remove the JIRA link from a Karea task

// environment variables
To run this server yourself, you supply these values. They go in your own MCP client configuration and stay on your machine. The secret label means the value is sensitive, not that the server mishandles it.
🔐 secretKAREA_API_KEY
configKAREA_PUBLIC_URL
configKAREA_URL
// quality suggestions

Tool annotations

No tools have read-only/destructive annotations

Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.

All four hints declared on every tool

49/49 tools missing one or more hints — karea_list_projects (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); karea_list_tasks (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); karea_create_task (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +46 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.

For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.

Tests exist

No test files found

Add tests that exercise each declared tool.

Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.

// full audit trail
The findings above are the summary. The full trail, every check we ran, each deduction, the network hosts observed and the dependency advisories, goes to verified publishers, along with an alert whenever a new one lands. Verified publishers can also review each finding and dispute it in one click. Publisher corrections have sharpened several of our checks this month, because the maintainer knows the codebase better than any scanner.
// improvement guidance — verified publishers only
We have 3 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/starecz/karea-mcp)](https://m8ven.ai/mcp/starecz/karea-mcp)
Shows your grade and updates automatically. Prefer no grade? Append ?variant=verified to the badge URL.
commit: fa87e27fa8d1a77abcae124bd50e0356a4e1f7c4
code hash: ac58d44358438bfe28d3c95512e20d91031ddea5133b40f88d1d574e1e4d943a
view raw JSON →
Check MCPs from inside your assistant
Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check
check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern
How to add it →Free · no account needed · works in any MCP client