Skip to main content
Glama

Score Event For Fraud Risk

fraud_score
Read-onlyIdempotent

Score a transaction or account event for fraud risk. Send whatever signals you have — all optional.

Returns a 0-1 fraud probability, a risk level, the exact risk factors that drove the score (each with its weight, direction and a human-readable detail), and a recommended decision (allow|review|deny).

Returns: dict with keys: fraud_probability (float), risk_level (str), decision (str), risk_score_points (float), risk_factors (list of {factor, weight, direction, detail}), decision_bands (dict).

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
amountNoThe transaction amount
is_torNoRequest originated from a Tor exit node
currencyNoISO 4217 currency code
event_idNoYour identifier for this event (echoed back; use with fraud_feedback)
avs_matchNoWhether the address-verification check matched
is_new_ipNoFirst time seeing this IP
ip_countryNoISO country code geolocated from the IP
card_countryNoISO country code of the payment instrument
cvv_providedNoWhether the CVV was provided
txn_count_1hNoNumber of transactions on this account in the last hour
is_new_deviceNoFirst time seeing this device
txn_count_24hNoNumber of transactions on this account in the last 24h
is_proxy_or_vpnNoRequest originated from a proxy/VPN/datacenter IP
account_age_daysNoAge of the account in days
prior_chargebacksNoNumber of prior chargebacks on this account
avg_txn_amount_30dNoThe account's avg transaction amount over the last 30 days (for amount-anomaly scoring)
distinct_cards_24hNoDistinct cards used on this account in 24h
distinct_countries_24hNoDistinct countries seen on this account in 24h

TDQS

A4.1/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, idempotentHint, and non-destructive behavior, so the bar for behavioral disclosure is lower. The description adds useful behavioral details: all signals are optional, and the output includes a fraud probability, risk level, decision, and per-factor breakdown. No contradiction with annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The core purpose and input flexibility are front-loaded, and the return structure is clearly laid out. There is minor redundancy between the prose return summary and the 'Returns:' dict-keys list, but the description remains appropriately sized for a tool with 18 parameters.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a read-only scoring tool with no required parameters and no output schema, the description adequately supplies the return contract and input expectations. It could additionally explain risk_level/decision_bands semantics or point to fraud_feedback, but the provided detail is sufficient for correct invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents all 18 parameters. The description adds only a general statement that all signals are optional, which is already implied by default nulls. There is no meaningful per-parameter semantic value added beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb and resource: 'Score a transaction or account event for fraud risk.' This clearly distinguishes it from the sentiment, toxicity, and PII siblings, and is also obviously different from fraud_feedback, which is about feedback rather than scoring.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives clear usage context: use it when you need a fraud risk score for a transaction or account event. 'Send whatever signals you have — all optional' also tells the agent when it is acceptable to call with partial data. It does not explicitly name alternatives or exclusions, but this is a distinctive tool among the siblings.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

TDQS

A3.6/5.0
Disambiguation4/5

Most tools map cleanly to distinct capabilities, and the descriptions make the intended use clear. A few adjacent pairs—extract_entities vs link_entities_to_wikidata and detect_pii vs detect_conversational_pii—require careful selection, but they are distinguishable by their stated outputs.

Naming Consistency4/5

Names are uniformly lowercase snake_case and mostly follow a verb_object pattern, such as analyze_*, detect_*, extract_*, summarize_text, and translate_text. A few outliers like aspect_sentiment, fraud_feedback, and knowledge_ingest break the verb-first feel, but the overall pattern remains predictable.

Tool Count3/5

At 22 tools, this is on the heavy side of the borderline range. Each tool has a distinct job, but the mix of core NLP, safety, fraud, health-checking, and knowledge-base management makes the surface feel sprawling rather than tightly scoped.

Completeness3/5

The core NLP coverage is broad: sentiment, toxicity, PII, entities, QA, summarization, translation, and groundedness are all present. However, the knowledge-base tools support ingest/list/query but no delete or update, creating a dead end when documents need correction or removal.

Resources