The __ONLY__ thing that karma needs is the hostname that has been put into the source-code that points to either a wallet or a seednode. Whoever controls that controls karma.
EVERYTHING ELSE CAN BE DONE BY ANYONE!!!! IF YOU HAVE SOME TECH/SERVICE JUST RUN IT!!!!! YOU DON'T NEED PERMISSION!!!!
*GASP* THERE CAN BE MORE THAN ONE MERCHANT API IMPLEMENTATION *GASP*
GO GO GO