Konduto

v0.2.0-alpha.1API Keyalpha

BR fraud analytics — more API-first than ClearSale. Order analysis, blocklist/allowlist/review-list management, chargeback feedback via status updates. Bundle with ClearSale for score comparison or failover. Alpha on npm — 3 brief endpoints not in public docs; core verified against docs.konduto.com.

18 tools2 env vars🇧🇷 Brazilalpha — pending validation

Install

terminal

$ npm install @codespar/mcp-konduto@alpha

Quickstart

Add this entry to your claude_desktop_config.json (or any MCP-compatible client config).

claude_desktop_config.json

{
  "mcpServers": {
    "konduto": {
      "command": "npx",
      "args": [
        "-y",
        "@codespar/mcp-konduto@alpha"
      ],
      "env": {
        "KONDUTO_API_KEY": "<your_konduto_api_key>"
      }
    }
  }
}

After restart, your agent can call any of the 18 tools below — try send_order_for_analysis first.

Environment variables · 2

Required to authenticate the server. Stored encrypted when using CodeSpar managed hosting.

KONDUTO_API_KEY

requiredsecret

Konduto API key (private key). Used as the Basic auth username with an empty password.

KONDUTO_BASE_URL

optional

Konduto API base URL. Defaults to https://api.konduto.com/v1.

Available tools · 18

Each tool is independent — your agent loads only what it needs to reduce context and response time.

WRITEsend_order_for_analysis

Submit an order to Konduto for fraud analysis. Returns a decision (approved / declined / review / not_analyzed), a numeric score, and a recommendation. Include as much signal as possible — billing + shipping, ip, items, payment, and (crucially) the visitor id captured by Konduto's browser JS SDK — to maximize decision quality.

READget_order

Retrieve the current analysis state of an order. Returns decision (approved / declined / review / not_analyzed), numeric score, and recommendation. Useful when the initial response was 'review' or when polling after async re-scoring.

WRITEupdate_order_status

Notify Konduto of the merchant's final status for an order. Feeds Konduto's ML model and is required for ongoing decision quality. Common transitions: new → approved, new → declined, approved → canceled, approved → fraud (when a chargeback is confirmed).

WRITEreport_chargeback

Report a confirmed chargeback for an order. Convenience wrapper around update_order_status with status='fraud' — the primary feedback signal Konduto's ML model uses to retrain on similar buyers. Call this as soon as the chargeback dispute is confirmed (not when first received).

WRITEreport_order_approved

Report that an order was ultimately approved by the merchant. Convenience wrapper around update_order_status with status='approved'. Use after Konduto returned 'review' and a human approved the order, or when the merchant overrode a 'declined' recommendation.

READreport_order_declined

Report that an order was ultimately declined by the merchant. Convenience wrapper around update_order_status with status='declined'. Use after manual review concluded the order should be rejected, or when the acquirer declined the payment.

WRITEadd_to_blocklist

Add a value to the Konduto blocklist. Any future order matching the value is auto-declined. Useful for known-bad emails, IPs, tax IDs, or card BIN+last4 pairs observed in confirmed fraud.

READquery_blocklist

Check whether a value is currently on the Konduto blocklist.

Compatible frameworks

MCP is a protocol — any framework that speaks it can mount this server.

Claude Agent SDKAnthropic

OpenAI AgentsOpenAI

Vercel AI SDKVercel

LangChainLangChain

LlamaIndexLlamaIndex

CrewAICrewAI

MastraMastra

Any MCP clientProtocol

Frequently asked questions

All credentials are encrypted at rest in an isolated vault scoped per organization. OAuth2 tokens are automatically refreshed before expiry. Your agent code never sees raw secrets — it receives scoped, short-lived session tokens.