mcp-konduto — Claude Code MCP server: Konduto fraud checks
An MCP server that lets your agent submit orders to Konduto for fraud scoring, read the verdict and manage the provider's lists. Useful when antifraud work happens from a chat.
claude mcp add --env KONDUTO_API_KEY=<KONDUTO_API_KEY> --env KONDUTO_BASE_URL=<KONDUTO_BASE_URL> --transport stdio konduto -- npx -y @codespar/mcp-kondutoWhat mcp-konduto does
Eighteen tools come with the server. The agent can push an order for analysis, fetch where that analysis stands, tell Konduto the merchant's final decision, report a confirmed chargeback, and run add-query-update-remove cycles across three lists: blocklist, allowlist and reviewlist.
Requests authenticate with HTTP Basic, the API key standing in for the username with an empty password. Pass the raw key in KONDUTO_API_KEY; the base64 step happens inside the server. No key means no API access. The endpoint defaults to https://api.konduto.com/v1 and can be pointed elsewhere through KONDUTO_BASE_URL.
Behavioral signals arrive as a visitor id captured by Konduto's browser JS SDK on your checkout page. Chargeback feedback has no dedicated endpoint: you call update_order_status with fraud, and that is how the model learns. The package is at 0.1.0-alpha.1 — the order and list methods are checked against the public documentation, a few others follow the standard REST pattern used by Konduto's own client libraries.
What it helps with
- send an order to Konduto for scoring without leaving the agent
- check the current verdict on a specific order
- push the merchant's final status back to Konduto
- block an e-mail, IP or card BIN+last4 seen in confirmed fraud
- allow a trusted value so it skips manual review
Example prompts for the agent
- Send order
order-1042to Konduto for analysis and show me the verdict - Is
[email protected]on the Konduto blocklist? - Set order
order-1042tofraud, the chargeback is confirmed
How to install mcp-konduto
Platform CLI
claude mcp add --env KONDUTO_API_KEY=<KONDUTO_API_KEY> --env KONDUTO_BASE_URL=<KONDUTO_BASE_URL> --transport stdio konduto -- npx -y @codespar/mcp-kondutoReplace <…> with your own values
Platform CLI
codex mcp add konduto --env KONDUTO_API_KEY=<KONDUTO_API_KEY> --env KONDUTO_BASE_URL=<KONDUTO_BASE_URL> -- npx -y @codespar/mcp-kondutoReplace <…> with your own values
Config file
{
"mcpServers": {
"konduto": {
"command": "npx",
"args": [
"-y",
"@codespar/mcp-konduto"
],
"env": {
"KONDUTO_API_KEY": "<KONDUTO_API_KEY>",
"KONDUTO_BASE_URL": "<KONDUTO_BASE_URL>"
}
}
}
}Replace <…> with your own values
Config file
{
"servers": {
"konduto": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@codespar/mcp-konduto"
],
"env": {
"KONDUTO_API_KEY": "<KONDUTO_API_KEY>",
"KONDUTO_BASE_URL": "<KONDUTO_BASE_URL>"
}
}
}
}Replace <…> with your own values
Platform CLI
gemini mcp add -e KONDUTO_API_KEY=<KONDUTO_API_KEY> -e KONDUTO_BASE_URL=<KONDUTO_BASE_URL> konduto npx -y @codespar/mcp-kondutoReplace <…> with your own values
Step by step, with commands for each platform: How to add an MCP server to Claude Code, Codex, Cursor, VS Code, Gemini CLI and more
Questions about mcp-konduto
How do I install mcp-konduto in Claude Code?
Run claude mcp add mcp-konduto -e KONDUTO_API_KEY=<KONDUTO_API_KEY> -- npx -y @codespar/mcp-konduto. The longer form with explicit transport and base URL: `claude mcp add --env KONDUTO_API_KEY=<KONDUTO_API_KEY> --env KONDUTO_BASE_URL=<KONDUTO_BASE_URL> --transport stdio konduto -- npx -y @codespar/mcp-konduto`.
What does mcp-konduto do?
It exposes the Konduto antifraud API to an agent: order submission for scoring, verdict lookup, final status updates, chargeback feedback and three managed lists.
What do I need before it will work?
A Konduto API key in KONDUTO_API_KEY, plus a visitor id from the browser JS SDK on your checkout page if you want behavioral signals attached to the order.
