{"name":"io.github.codespar/mcp-konduto","slug":"codespar-mcp-konduto","title":null,"description":"MCP server for Konduto — Brazilian fraud prevention: order risk scoring, device intel, lists","url":"https://mcp.market/server/codespar-mcp-konduto","rating":null,"grade":"B","score":82,"certified":false,"status":"active","category":"ecommerce","tags":["ecommerce"],"presence":{"score":38,"stars":271,"forks":50,"downloads_week":null,"last_push_at":"2026-08-29T02:02:48.000Z","license":"MIT"},"uptime":null,"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/codespar/mcp-dev-latam","website":null,"version":"0.2.0-alpha.3","remotes":[],"packages":[{"registryType":"npm","identifier":"@codespar/mcp-konduto","version":"0.2.0-alpha.3","transport":{"type":"stdio"},"environmentVariables":[{"description":"Konduto API key (private key). Used as the Basic auth username with an empty password.","isRequired":true,"format":"string","isSecret":true,"name":"KONDUTO_API_KEY"},{"description":"Konduto API base URL. Defaults to https://api.konduto.com/v1.","format":"string","name":"KONDUTO_BASE_URL"}]}],"tools":[{"name":"add_to_allowlist","description":"Add a value to the Konduto allowlist (trusted). Future orders matching the value are auto-approved without full ML scoring. Use sparingly — allowlist overrides fraud signals.","write_action":false,"price_micros":0,"input_schema":null},{"name":"add_to_blocklist","description":"Add a value to the Konduto blocklist. Any future order matching the value is auto-declined. Useful for known-bad emails, IPs, tax IDs, or card BIN+last4 pairs observed in confirmed fraud.","write_action":false,"price_micros":0,"input_schema":null},{"name":"add_to_reviewlist","description":"Add a value to the Konduto reviewlist. Future orders matching the value are forced into manual review regardless of score. Useful for ambiguous signals that warrant human eyes.","write_action":false,"price_micros":0,"input_schema":null},{"name":"get_order","description":"Retrieve the current analysis state of an order. Returns decision (approved / declined / review / not_analyzed), numeric score, and recommendation. Useful when the initial response was 'review' or when polling after async re-scoring.","write_action":true,"price_micros":0,"input_schema":null},{"name":"query_allowlist","description":"Check whether a value is currently on the Konduto allowlist. Konduto's public docs explicitly support email; other dimensions are accepted by symmetry with the blocklist contract but only email is guaranteed.","write_action":false,"price_micros":0,"input_schema":null},{"name":"query_blocklist","description":"Check whether a value is currently on the Konduto blocklist.","write_action":false,"price_micros":0,"input_schema":null},{"name":"query_reviewlist","description":"Check whether a value is currently on the Konduto reviewlist. Konduto's public docs explicitly support email; other dimensions are accepted by symmetry with the blocklist contract but only email is guaranteed.","write_action":false,"price_micros":0,"input_schema":null},{"name":"remove_from_allowlist","description":"Remove a value from the Konduto allowlist. Future orders matching the value will once again undergo full ML scoring.","write_action":true,"price_micros":0,"input_schema":null},{"name":"remove_from_blocklist","description":"Remove a value from the Konduto blocklist.","write_action":true,"price_micros":0,"input_schema":null},{"name":"remove_from_reviewlist","description":"Remove a value from the Konduto reviewlist. Future orders matching the value will be scored normally instead of being forced into review.","write_action":true,"price_micros":0,"input_schema":null},{"name":"report_chargeback","description":"Report a confirmed chargeback for an order. Convenience wrapper around update_order_status with status='fraud' — the primary feedback signal Konduto's ML model uses to retrain on similar buyers. Call this as soon as the chargeback dispute is confirmed (not when first received).","write_action":false,"price_micros":0,"input_schema":null},{"name":"report_order_approved","description":"Report that an order was ultimately approved by the merchant. Convenience wrapper around update_order_status with status='approved'. Use after Konduto returned 'review' and a human approved the order, or when the merchant overrode a 'declined' recommendation.","write_action":true,"price_micros":0,"input_schema":null},{"name":"report_order_declined","description":"Report that an order was ultimately declined by the merchant. Convenience wrapper around update_order_status with status='declined'. Use after manual review concluded the order should be rejected, or when the acquirer declined the payment.","write_action":true,"price_micros":0,"input_schema":null},{"name":"send_order_for_analysis","description":"Submit an order to Konduto for fraud analysis. Returns a decision (approved / declined / review / not_analyzed), a numeric score, and a recommendation. Include as much signal as possible — billing + shipping, ip, items, payment, and (crucially) the visitor id captured by Konduto's browser JS SDK — to maximize decision quality.","write_action":true,"price_micros":0,"input_schema":null},{"name":"update_allowlist_entry","description":"Update an existing allowlist entry — typically to extend or shorten the expiration window. Konduto's docs recommend short windows (1-2 days) for allowlist entries since they bypass ML scoring entirely.","write_action":true,"price_micros":0,"input_schema":null},{"name":"update_blocklist_entry","description":"Update an existing blocklist entry — typically used to extend or shorten the expiration window (expires_at) without removing and re-adding the entry. The (type, value) pair must already exist on the blocklist.","write_action":true,"price_micros":0,"input_schema":null},{"name":"update_order_status","description":"Notify Konduto of the merchant's final status for an order. Feeds Konduto's ML model and is required for ongoing decision quality. Common transitions: new → approved, new → declined, approved → canceled, approved → fraud (when a chargeback is confirmed).","write_action":true,"price_micros":0,"input_schema":null},{"name":"update_reviewlist_entry","description":"Update an existing reviewlist entry — typically to extend or shorten the expiration window without removing and re-adding the entry.","write_action":true,"price_micros":0,"input_schema":null}],"scan":{"score":82,"grade":"B","scanned_at":"2026-09-26T21:19:14.230Z","report":{"scannerVersion":"0.1.9","scannedAt":"2026-09-26T21:19:14.191Z","components":{"code":{"score":25,"max":25,"notes":["6 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":6,"max":15,"notes":["static API keys via environment variables"]},"maintenance":{"score":15,"max":15,"notes":["last push 29 days ago"]},"identity":{"score":7,"max":10,"notes":["registry namespace matches repository owner"]}},"findings":[],"inputs":{"packages":[{"registryType":"npm","identifier":"@codespar/mcp-konduto","version":"0.2.0-alpha.3","found":true,"license":"MIT","hasInstallScripts":false,"dependencyCount":1,"publishedAt":"2026-06-22T18:41:04.985Z"}],"repo":{"found":true,"owner":"codespar","repo":"mcp-dev-latam","archived":false,"pushedAt":"2026-08-29T02:02:48Z","stars":271,"forks":50,"openIssues":10,"ownerType":"Organization","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/269058982?v=4","ownerCreatedAt":"2026-03-18T00:40:56Z","license":"MIT"},"icon":{"url":"https://avatars.githubusercontent.com/u/269058982?v=4&s=128","source":"github"},"presence":{"stars":271,"forks":50,"downloadsWeek":null,"license":"MIT","lastPushAt":"2026-08-29T02:02:48.000Z","score":38}}}},"grade_history":[],"reviews":[]}