// SCAN REPORT

Karea

44 tools. 33 can modify or destroy data without limits.

7 destructive tools with no built-in limits. Policy required.

Last updated: 2 Jul 2026

33 can modify or destroy data

11 read-only

44 tools total

Community server · catalogue entry verified 02/07/2026

How to control Karea ↓

TOOL MAP

What Karea exposes to your agents

Read (11) Write / Execute (26) Destructive / Financial (7)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Karea tools

Destructive · High karea_delete_category The tool performs an irreversible deletion operation on a category object. Destructive · High karea_delete_note Deleting a note is a destructive action that permanently removes data and cannot be undone. Destructive · High karea_delete_project Deleting a project is an irreversible operation that destroys data and cannot be undone. Destructive · High karea_delete_question This tool permanently removes a question record from the task management system.

33 of Karea's 44 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Karea

PolicyLayer is an MCP gateway — it sits between your AI agents and Karea, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "karea_delete_category": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "karea_add_note": {
    "limits": [
      {
        "counter": "karea_add_note_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "karea_get_jira_link": {
    "limits": [
      {
        "counter": "karea_get_jira_link_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Karea — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON KAREA →

Instant setup, no code required.

FULL CATALOGUE

All 44 Karea tools

DESTRUCTIVE 7 tools

Destructive karea_delete_category Delete a category Destructive karea_delete_note Delete a note from a task Destructive karea_delete_project Delete a project Destructive karea_delete_question Delete an open question Destructive karea_delete_requisite Delete a closing requisite from a task Destructive karea_delete_resource Delete a resource Destructive karea_delete_task Delete a task (requires confirmation)

EXECUTE 1 tools

Execute karea_ask Send a natural language message to Karea AI

WRITE 25 tools

Write karea_add_note Add a note to a task Write karea_add_requisite Add a closing requisite to a task Write karea_answer_question Answer an open question Write karea_close_task Mark a task as done Write karea_create_category Create a new category in the current project Write karea_create_project Create a new project Write karea_create_question Create a new open question Write karea_create_resource Create a text resource Write karea_create_subtask Create a subtask under a parent task. Accepts the parent by visual ID (e.g. KPL77), name, or UUID. Supports th Write karea_create_task Create a new task Write karea_doing Create a task you are working on right now (status: in_progress) Write karea_done Mark multiple tasks as done at once Write karea_edit_note Edit an existing note on a task Write karea_edit_question Edit an open question Write karea_edit_task Edit an existing task Write karea_link_jira Link a Karea task to a JIRA issue by issue key (e.g. PROJ-123) Write karea_link_resource_to_task Link an existing resource (text or file) to a task. The resource and task must belong to the same user/project Write karea_quick_task Log something you already did Write karea_set_markdown Write the markdown document for a task. Overwrites any existing content. Use this to persist: investigation fi Write karea_share_project Share a project with another user Write karea_toggle_requisite Mark a closing requisite as complete or incomplete Write karea_unlink_jira Remove the JIRA link from a Karea task Write karea_unlink_resource_from_task Remove the link between a resource and a task. Does not delete either side. Write karea_update_resource Update a text resource Write karea_upload_resource Upload a binary file as a resource (base64-encoded)

READ 11 tools

Read karea_get_jira_link Get the JIRA link for a task Read karea_get_markdown Read the markdown document attached to a task. This is the task\ Read karea_get_resource Get a text resource content by ID Read karea_list_notes List notes on a task Read karea_list_projects List all Karea projects with their IDs Read karea_list_questions List open questions in a project Read karea_list_resources List resources (text notes & files) in a project Read karea_list_subtasks List subtasks of a parent task. Accepts the parent by visual ID, name, or UUID. Read karea_list_tasks List tasks in a project. Defaults to open tasks (open, in_progress, blocked, review, backlog) capped at 200 to Read karea_recap Get a recap of recent activity Read karea_view_task View full details of a task

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Karea

Can an AI agent delete data through the Karea MCP server? +

Yes. The Karea server exposes 7 destructive tools including karea_delete_category, karea_delete_note, karea_delete_project. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Karea? +

The Karea server has 25 write tools including karea_add_note, karea_add_requisite, karea_answer_question. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Karea.

How many tools does the Karea MCP server expose? +

44 tools across 3 categories: Destructive, Read, Write. 11 are read-only. 33 can modify, create, or delete data.

How do I enforce a policy on Karea? +

Register the Karea MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Karea tool call.

Deterministic rules across all 44 Karea tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON KAREA →

Instant setup, no code required.

44 Karea tools catalogued and risk-classified — across an index of 43,000+ MCP servers.