# Credit Karma

**Canonical:** https://apis.io/providers/credit-karma/  
**Website:** https://www.creditkarma.com  
**APIs profiled:** 0

Credit Karma is an AI-powered personal finance platform founded in 2007 and owned by Intuit since 2020, serving more than 140 million members in the US, UK and Canada. It began as a free credit-score and credit-monitoring destination and has grown into a broad consumer finance marketplace spanning credit cards, personal and auto loans, mortgages, auto and home insurance, banking (checking, savings and credit-builder accounts), tax filing, and identity monitoring. Credit Karma monetizes through personalized recommendations and lead generation rather than a public developer or partner API; it maintains no external consumer-facing API program. It does run an active engineering culture with 29 public open-source repositories on GitHub (Thrift and GraphQL tooling), a coordinated vulnerability disclosure program via HackerOne, and SOC 2 / ISO 27001 security certifications.

## Kin Score — 10.9 / 100 (minimal)

Scored 2026-08-20 under rubric 0.12.0. Trend: flat (+1.1 from 9.8).

| Facet | Score |
|---|---|
| Discoverability | 68.5 |
| Contract Quality | 0.0 |
| Governance | 0.0 |
| Contract Governance | 0.0 |
| Operational Transparency | 2.6 |
| Developer Ergonomics | 2.4 |
| Commercial Clarity | 18.4 |
| Access Clarity | 18.4 |

Regulatory layer — **Insurance**: 24.2 (matched via tags).

## Agent readiness — 6.7 (agent-aware)

| Dimension | Value |
|---|---|
| Spec Presence | no |
| Agentic Access | no |
| Reversibility Documented | no |
| MCP Server | documented |
| Auth Clarity | no |
| Idempotency | no |
| Error Semantics | no |
| OpenAPI Examples | no |
| Rate Limit Signal | no |
| Event Surface Described | no |
| Agent Skills | no |
| Well Known Catalog | no |
| Consent Identity | yes |
| Agent Card | no |
| Dry Run Mode | no |

## Access

Unknown — onboarding: unknown, pricing: unknown, trial: no (confidence: low).

## MCP servers (1)

- **Credit Karma MCP Server** — Community MCP server for Credit Karma — natural-language access to transactions, spending, and accounts. Unofficial.

## Security (3)

- **Credit Karma Domain Security** — TLSv1.3 · DMARC
- **Credit Karma Vulnerability Disclosure** — Hackerone · security.txt · contact published
- **Credit Karma Trust Center** — SOC 2, ISO 27001

## Tags

Company, Fintech, Personal Finance, Credit Scores, Credit Monitoring, Lending, Consumer Finance, Insurance, Banking

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/credit-karma/). Scores are computed from the provider's own public artifacts under a published rubric.