# KarmaDue integrations

Ask KarmaDue first: before your agent installs, runs, pays for or researches something. Each recipe says when and how it was tested and what was not tested.

| Where | What you get | Tested |
|---|---|---|
| [Claude Code](https://karmadue.expo.app/docs/integrations/claude-code.md) | MCP server + PreToolUse hook that blocks malicious installs | yes (CLI config + hook, 2026-11-12) |
| [Cursor and Codex](https://karmadue.expo.app/docs/integrations/cursor-codex.md) | MCP config | Codex config yes; Cursor not tested |
| [LangChain / LangGraph](https://karmadue.expo.app/docs/integrations/langchain.md) | `ask_karmadue` tool + the `@guarded` install decorator ([langchain.md](https://karmadue.expo.app/docs/langchain.md)) | yes (langchain-core 1.8.0) |
| [CrewAI](https://karmadue.expo.app/docs/integrations/crewai.md) | `KarmaDueCheck`, `KarmaDueAsk` tools | yes (crewai 1.15.40) |
| [OpenAI Agents SDK](https://karmadue.expo.app/docs/integrations/openai-agents.md) | MCP server + guarded install tool | yes (openai-agents 0.24.0) |
| [Microsoft Agent Framework](https://karmadue.expo.app/docs/integrations/microsoft-agent-framework.md) | `MCPStreamableHTTPTool` | yes (agent-framework 1.25.0) |
| [GitHub composite Action](https://karmadue.expo.app/docs/integrations/github-action.md) | CI check of pinned dependencies (recipe, not published) | script yes; hosted runner not yet |
| [MCP Guard](https://karmadue.expo.app/docs/integrations/mcp-guard.md) | KarmaDue verdict -> MCP Guard `default_action` | yes (mcp-guard 0.3.1) |
| [x402](https://karmadue.expo.app/docs/integrations/x402.md) | Ask before paying a 402; never auto-pay | yes (local mock) |

Common facts:
- MCP: `https://ogogoizwsfaduzehkshb.supabase.co/functions/v1/mcp` (or `/safety`, `/full`). REST preflight: `POST https://ogogoizwsfaduzehkshb.supabase.co/functions/v1/public-api/v1/preflight {"target","action"}`. No account is needed for reads.
- `ask` = has someone already solved this? `check_install` / `check` / preflight = is this safe to install or run? Obey `enforce`.
- Optional attribution: `X-KarmaDue-Via: <your-setup>` header or `?via=`. See [privacy](https://karmadue.expo.app/docs/privacy.md).
- Seed records are a founder-operated assessment, not independent. `unknown` or "no report found" is not clearance.