Maintainer of this skill?
by crbnos
Open-source manufacturing ERP, MES and QMS. Quoting, MRP, inventory, shop floor, quality and lot/serial traceability on one Postgres schema, with a REST API and MCP server. Self-host or use Carbon Cloud.
# Add to your Claude Code skills
git clone https://github.com/crbnos/carbonLast scanned: 5/1/2026
{
"issues": [
{
"type": "npm-audit",
"message": "@aws-sdk/xml-builder: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@novu/node: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@vercel/react-router: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@vercel/static-config: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "ajv: ajv has ReDoS when using `$data` option",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "fast-xml-parser: fast-xml-parser XMLBuilder: XML Comment and CDATA Injection via Unescaped Delimiters",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "liquidjs: liquidjs has a Denial of Service via circular block reference in layout",
"severity": "high"
},
{
"type": "npm-audit",
"message": "nodemailer: Nodemailer: Email to an unintended domain can occur due to Interpretation Conflict",
"severity": "high"
},
{
"type": "npm-audit",
"message": "postcss: PostCSS has XSS via Unescaped </style> in its CSS Stringify Output",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "uuid: uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided",
"severity": "medium"
}
],
"status": "WARNING",
"scannedAt": "2026-05-01T06:37:38.871Z",
"semgrepRan": false,
"npmAuditRan": true,
"pipAuditRan": true
}See how carbon compares with popular alternatives.
carbon is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by crbnos. Open-source manufacturing ERP, MES and QMS. Quoting, MRP, inventory, shop floor, quality and lot/serial traceability on one Postgres schema, with a REST API and MCP server. Self-host or use Carbon Cloud. It has 2,780 GitHub stars.
carbon returned warnings in SkillsLLM's automated security scan. It has no critical vulnerabilities, but review the flagged issues in the Security Report section before adding it to your workflow.
Clone the repository with "git clone https://github.com/crbnos/carbon" and add it to your Claude Code skills directory (see the Installation section above).
carbon is primarily written in TypeScript. It is open-source under crbnos on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh carbon against similar tools.
No comments yet. Be the first to share your thoughts!
Requires a passing catalog security scan.
⚠️ Third-Party Software Notice
This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.
Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.
Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.
Manufacturing teams often run planning, production, quality and accounting in separate systems. That creates predictable problems:
Carbon puts ERP, MRP, MES and QMS in one Postgres database you can inspect, own and extend. Engineering, planning, production, quality and accounting update the same data, without synchronization jobs between separate product databases.
Carbon is an open-source alternative to NetSuite, Epicor, SAP Business One, Plex, Odoo and ERPNext. It supports complex assembly, contract manufacturing, configure-to-order and high-mix, low-volume production. See all comparisons.
| ERP — Inventory & Costing | Quotes, orders, purchasing, inventory, invoicing and actual job costs |
| MRP — Planning | Demand, supply planning, versioned BOMs and routings, finite-capacity scheduling |
| MES — Execution | Digital travelers, operator terminals, 3D instructions, barcode and labor capture |
| QMS — Quality | Inspections, FAI, nonconformance, CAPA, calibration and risk management |
| Traceability | Forward and backward lot and serial genealogy |
| Engineering | Multi-level BOMs, revisions, change orders, supersession and product configuration |
| Accounting | General ledger, journals, multi-entity, multi-currency and accounting integrations |
| Workflows | Rule-based automation with triggers, actions and run history |
| Maintenance & Assets | Scheduled maintenance, fixed assets and kanban replenishment |
| API, Webhooks & MCP | Typed REST operations, event-driven webhooks and a permission-aware MCP server |
| Custom Fields | Extend records without changing the core schema |
| Integrations | Onshape, SolidWorks, Paperless Parts, Linear, Jira, Slack, Ramp, Stripe and Zebra |
See the full roadmap for what's next.
Technical highlights
| Carbon Cloud | Managed application, database, updates and backups. Start a 30-day trial without a sales call. |
| Self-hosted | Run Carbon in your VPC, on-prem or air-gapped. See the self-hosting guide. |
| Develop locally | Run the application and supporting services from source. Follow Local Development. |
The Carbon API exposes the same manufacturing operations used by the application. Each operation validates its input, updates dependent records and enforces the authenticated identity's permissions. Operations are available through two interfaces with the same arguments:
POST https://app.carbon.ms/api/v1/{module}/{operation}, with a published OpenAPI spec for generating a typed client in any languageCreate a key under Settings → API Keys, then:
curl -X POST https://app.carbon.ms/api/v1/sales/getSalesOrders \
-H "Authorization: Bearer $CARBON_API_KEY" \
-H "Content-Type: application/json" \
-d '{ "args": { "limit": 10 } }'
Self-hosted deployments serve the same API at /api/v1. The Data API provides direct access to permitted tables and views when an operation is not available in the service layer.
API keys and MCP are included with Business and Enterprise plans. Using them in a self-hosted deployment requires a commercial license.
ERP and MES are React Router apps over a single Postgres database. Permissions (row-level security), computed totals and change events live in the database itself; background work runs through Inngest, which calls back into the ERP to execute jobs. The architecture guide follows one click all the way down.
Carbon is intended to be the