# Carma

**Canonical:** https://apis.io/providers/carma/  
**Website:** https://carma.com.au/  
**APIs profiled:** 0

Carma is an Australian online used-car retailer that lets consumers buy, sell, and trade in pre-owned vehicles entirely online. Every car is inspected and reconditioned, and the platform bundles financing through partner lenders, home delivery, trade-in valuations, a 7-day money-back guarantee, a 3-month warranty, and NRMA roadside assistance as an alternative to the traditional dealership experience. Backed by General Catalyst since 2022, Carma is headquartered in Sydney, Australia. This API Evangelist profile was surfaced as a General Catalyst portfolio company and enriched from Carma's public web surface; Carma publishes no public developer API at this time.

## Kin Score — 13.4 / 100 (emerging)

Scored 2026-08-20 under rubric 0.12.0. Trend: flat (+1.1 from 12.3).

| Facet | Score |
|---|---|
| Discoverability | 68.5 |
| Contract Quality | 0.0 |
| Governance | 0.0 |
| Contract Governance | 0.0 |
| Operational Transparency | 10.5 |
| Developer Ergonomics | 4.8 |
| Commercial Clarity | 21.1 |
| Access Clarity | 21.1 |

## Agent readiness — 2.6 (human-only)

| Dimension | Value |
|---|---|
| Spec Presence | no |
| Agentic Access | no |
| Reversibility Documented | no |
| MCP Server | no |
| Auth Clarity | no |
| Idempotency | no |
| Error Semantics | no |
| OpenAPI Examples | no |
| Rate Limit Signal | no |
| Event Surface Described | no |
| Agent Skills | no |
| Well Known Catalog | no |
| Consent Identity | yes |
| Agent Card | no |
| Dry Run Mode | no |

## Access

Unknown — onboarding: unknown, pricing: unknown, trial: no (confidence: low).

## Security (2)

- **Carma Domain Security** — TLSv1.3 · HSTS · DMARC
- **Carma Vulnerability Disclosure** — security.txt · contact published

## Tags

Company, Consumer, Automotive, Used Cars, Marketplace, E-Commerce, Car Finance, Australia

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/carma/). Scores are computed from the provider's own public artifacts under a published rubric.