# mcp-konduto

An MCP server that lets your agent submit orders to Konduto for fraud scoring, read the verdict and manage the provider's lists. Useful when antifraud work happens from a chat.

- MCP server · `type=mcp` · Claude Code, Codex, Cursor, GitHub Copilot, Windsurf (Devin Desktop), Cline, Zed, Gemini CLI · ★ 274
- Author: codespar
- License: MIT · policy=link-only · description only; the file stays with the author
- Source: https://github.com/codespar/mcp-dev-latam/tree/HEAD/packages/fraud/konduto
- Updated: 2026-09-27
- HTML: https://affpapa.org/en/nevibecode/mcp/mcp-konduto

## What it does

Eighteen tools come with the server. The agent can push an order for analysis, fetch where that analysis stands, tell Konduto the merchant's final decision, report a confirmed chargeback, and run add-query-update-remove cycles across three lists: blocklist, allowlist and reviewlist.

Requests authenticate with HTTP Basic, the API key standing in for the username with an empty password. Pass the raw key in `KONDUTO_API_KEY`; the base64 step happens inside the server. No key means no API access. The endpoint defaults to `https://api.konduto.com/v1` and can be pointed elsewhere through `KONDUTO_BASE_URL`.

Behavioral signals arrive as a `visitor` id captured by Konduto's browser JS SDK on your checkout page. Chargeback feedback has no dedicated endpoint: you call `update_order_status` with `fraud`, and that is how the model learns. The package is at `0.1.0-alpha.1` — the order and list methods are checked against the public documentation, a few others follow the standard REST pattern used by Konduto's own client libraries.

## Requirements
- Needs: Node.js (commands run via npx)
- Environment variables: `KONDUTO_API_KEY`, `KONDUTO_BASE_URL` — keys and tokens: ask the human for the values, never commit them or put them in shared files.

## Install

### Claude Code (native platform)

**Platform CLI**
```bash
claude mcp add --env KONDUTO_API_KEY=<KONDUTO_API_KEY> --env KONDUTO_BASE_URL=<KONDUTO_BASE_URL> --transport stdio konduto -- npx -y @codespar/mcp-konduto
```
Replace <…> with your own values

### Codex

**Platform CLI**
```bash
codex mcp add konduto --env KONDUTO_API_KEY=<KONDUTO_API_KEY> --env KONDUTO_BASE_URL=<KONDUTO_BASE_URL> -- npx -y @codespar/mcp-konduto
```
Replace <…> with your own values

### Cursor

**Config file**
File `.cursor/mcp.json`:
```json
{
    "mcpServers": {
        "konduto": {
            "command": "npx",
            "args": [
                "-y",
                "@codespar/mcp-konduto"
            ],
            "env": {
                "KONDUTO_API_KEY": "<KONDUTO_API_KEY>",
                "KONDUTO_BASE_URL": "<KONDUTO_BASE_URL>"
            }
        }
    }
}
```
Replace <…> with your own values

### GitHub Copilot

**Config file**
File `.vscode/mcp.json`:
```json
{
    "servers": {
        "konduto": {
            "type": "stdio",
            "command": "npx",
            "args": [
                "-y",
                "@codespar/mcp-konduto"
            ],
            "env": {
                "KONDUTO_API_KEY": "<KONDUTO_API_KEY>",
                "KONDUTO_BASE_URL": "<KONDUTO_BASE_URL>"
            }
        }
    }
}
```
Replace <…> with your own values

### Gemini CLI

**Platform CLI**
```bash
gemini mcp add -e KONDUTO_API_KEY=<KONDUTO_API_KEY> -e KONDUTO_BASE_URL=<KONDUTO_BASE_URL> konduto npx -y @codespar/mcp-konduto
```
Replace <…> with your own values

## When to use it
- send an order to Konduto for scoring without leaving the agent
- check the current verdict on a specific order
- push the merchant's final status back to Konduto
- block an e-mail, IP or card BIN+last4 seen in confirmed fraud
- allow a trusted value so it skips manual review

## Example prompts
- Send order `order-1042` to Konduto for analysis and show me the verdict
- Is `fraud@example.com` on the Konduto blocklist?
- Set order `order-1042` to `fraud`, the chargeback is confirmed

## Similar
- [REA](https://affpapa.org/en/nevibecode/mcp/rea.md) — MCP server · ★ 386989
- [World Monitor](https://affpapa.org/en/nevibecode/mcp/world-monitor.md) — MCP server · ★ 89408
- [mcp](https://affpapa.org/en/nevibecode/mcp/kubeshark-mcp.md) — MCP server · ★ 12109
- [Robin: AI-Powered Dark Web OSINT](https://affpapa.org/en/nevibecode/mcp/robin-ai-powered-dark-web-osint.md) — MCP server · ★ 7658
- [jshookmcp](https://affpapa.org/en/nevibecode/mcp/jshookmcp.md) — MCP server · ★ 2061
- [OpenOSINT](https://affpapa.org/en/nevibecode/mcp/openosint.md) — MCP server · ★ 1802

From the same set: [codespar/mcp-dev-latam](https://affpapa.org/en/nevibecode/by/codespar/mcp-dev-latam.md) — 40 cards

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md