Skip to main content
Glama

Score Event For Fraud Risk

fraud_score
Read-onlyIdempotent

Score a transaction or account event for fraud risk. Send whatever signals you have — all optional.

Returns a 0-1 fraud probability, a risk level, the exact risk factors that drove the score (each with its weight, direction and a human-readable detail), and a recommended decision (allow|review|deny).

Returns: dict with keys: fraud_probability (float), risk_level (str), decision (str), risk_score_points (float), risk_factors (list of {factor, weight, direction, detail}), decision_bands (dict).

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
amountNoThe transaction amount
is_torNoRequest originated from a Tor exit node
currencyNoISO 4217 currency code
event_idNoYour identifier for this event (echoed back; use with fraud_feedback)
avs_matchNoWhether the address-verification check matched
is_new_ipNoFirst time seeing this IP
ip_countryNoISO country code geolocated from the IP
card_countryNoISO country code of the payment instrument
cvv_providedNoWhether the CVV was provided
txn_count_1hNoNumber of transactions on this account in the last hour
is_new_deviceNoFirst time seeing this device
txn_count_24hNoNumber of transactions on this account in the last 24h
is_proxy_or_vpnNoRequest originated from a proxy/VPN/datacenter IP
account_age_daysNoAge of the account in days
prior_chargebacksNoNumber of prior chargebacks on this account
avg_txn_amount_30dNoThe account's avg transaction amount over the last 30 days (for amount-anomaly scoring)
distinct_cards_24hNoDistinct cards used on this account in 24h
distinct_countries_24hNoDistinct countries seen on this account in 24h

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observed

TDQS

A4.1/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, idempotentHint, and non-destructive behavior, so the bar for behavioral disclosure is lower. The description adds useful behavioral details: all signals are optional, and the output includes a fraud probability, risk level, decision, and per-factor breakdown. No contradiction with annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The core purpose and input flexibility are front-loaded, and the return structure is clearly laid out. There is minor redundancy between the prose return summary and the 'Returns:' dict-keys list, but the description remains appropriately sized for a tool with 18 parameters.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a read-only scoring tool with no required parameters and no output schema, the description adequately supplies the return contract and input expectations. It could additionally explain risk_level/decision_bands semantics or point to fraud_feedback, but the provided detail is sufficient for correct invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents all 18 parameters. The description adds only a general statement that all signals are optional, which is already implied by default nulls. There is no meaningful per-parameter semantic value added beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb and resource: 'Score a transaction or account event for fraud risk.' This clearly distinguishes it from the sentiment, toxicity, and PII siblings, and is also obviously different from fraud_feedback, which is about feedback rather than scoring.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives clear usage context: use it when you need a fraud risk score for a transaction or account event. 'Send whatever signals you have — all optional' also tells the agent when it is acceptable to call with partial data. It does not explicitly name alternatives or exclusions, but this is a distinctive tool among the siblings.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources