maxmind-minfraud
Server Details
MCP server for MaxMind minFraud — score transactions for fraud risk from your AI assistant.
- Status
- Healthy
- Last Tested
- Transport
- Streamable HTTP
- URL
- Repository
- m190/usefulapi-mcp
- GitHub Stars
- 0
Glama MCP Gateway
Connect through Glama MCP Gateway for full control over tool access and complete visibility into every call.
Full call logging
Every tool call is logged with complete inputs and outputs, so you can debug issues and audit what your agents are doing.
Tool access control
Enable or disable individual tools per connector, so you decide what your agents can and cannot do.
Managed credentials
Glama handles OAuth flows, token storage, and automatic rotation, so credentials never expire on your clients.
Usage analytics
See which tools your agents call, how often, and when, so you can understand usage patterns and catch anomalies.
Tool Definition Quality
Average 4/5 across 4 of 4 tools scored.
Each tool targets a distinct level of fraud analysis (score, insights, factors) plus a separate write operation for feedback. No overlap in purpose.
All tools use the consistent 'minfraud_' prefix with descriptive snake_case nouns (score, insights, factors, report_transaction).
Four tools cover the core functionality of a fraud scoring service: three read levels of increasing detail and one write feedback operation. Well-scoped.
The tool surface covers the main fraud scoring lifecycle (score, insights, factors, feedback). Missing administrative or listing tools, but these are not core to the domain.
Available Tools
4 toolsminfraud_factorsminFraud Factors (risk reasons + subscores)ARead-onlyInspect
The most detailed assessment: everything in Insights PLUS risk_score_reasons and per-factor subscores explaining WHY the score is what it is. Same request body as minfraud_score. API: POST /minfraud/v2.0/factors.
| Name | Required | Description | Default |
|---|---|---|---|
| No | |||
| event | No | ||
| order | No | ||
| device | No | Info about the device/connection. device.ip_address is the most important input. | |
| account | No | ||
| billing | No | ||
| payment | No | ||
| shipping | No | ||
| credit_card | No | ||
| custom_inputs | No | Custom inputs configured in your minFraud account. | |
| shopping_cart | No |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The annotations already declare readOnlyHint=true, so the description does not need to repeat that it is a read operation. The description adds useful context that the tool returns risk_score_reasons and per-factor subscores, and that the request body is identical to minfraud_score, which aids in understanding the request without contradicting annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is three sentences with no wasted words. It front-loads the core purpose, then mentions the request body similarity, and ends with the API endpoint. Every sentence adds value and the structure is efficient.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the complexity (11 parameters, nested objects, no output schema, low schema coverage), the description lacks completeness. It does not describe the response format, the implications of omitting parameters, or how to effectively use the tool. The missing output schema and low coverage increase the burden on the description, which it does not meet.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
With only 18% schema description coverage, the description should compensate by explaining key parameters, but it only states 'Same request body as minfraud_score.' This does not provide enough semantic information for the 11 parameters, many of which lack descriptions in the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The title and description clearly state the tool provides the most detailed assessment including risk reasons and subscores, and it distinguishes itself from siblings by mentioning it contains everything in Insights plus additional details. The reference to the API endpoint and same request body as minfraud_score further clarifies its purpose.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies the tool should be used when you need risk reasons and subscores beyond Insights, but it does not explicitly state when to use it versus the sibling tools (minfraud_insights, minfraud_score, etc.). However, the comparison to Insights provides enough context for an AI agent to infer the appropriate use case.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
minfraud_insightsminFraud Insights (detailed risk)ARead-onlyInspect
Score a transaction AND get detailed risk insights: IP geolocation, email/address/device attributes, and per-component risk on top of the risk_score. Same request body as minfraud_score. API: POST /minfraud/v2.0/insights.
| Name | Required | Description | Default |
|---|---|---|---|
| No | |||
| event | No | ||
| order | No | ||
| device | No | Info about the device/connection. device.ip_address is the most important input. | |
| account | No | ||
| billing | No | ||
| payment | No | ||
| shipping | No | ||
| credit_card | No | ||
| custom_inputs | No | Custom inputs configured in your minFraud account. | |
| shopping_cart | No |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true. The description adds that this is a read-only insight operation (no state change) and provides the API endpoint. No contradictions, but no additional behavioral details like authentication or rate limits.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Description is three sentences, front-loaded with purpose. No fluff, but could include a summary of key outputs without being verbose.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite complex nested parameters (11+ objects) and no output schema, the description offers no explanation of the response structure or how to interpret risk insights. This leaves the agent underinformed.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is only 18%, so the description must compensate, but it only vaguely mentions 'IP geolocation, email/address/device attributes' without mapping to schema properties. Many parameters remain undocumented in both description and schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description clearly states the tool 'scores a transaction' and 'gets detailed risk insights', distinguishing it from minfraud_score by mentioning per-component risk. The verb+resource structure is specific and unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Description explicitly notes 'same request body as minfraud_score', helping the agent choose between score and insights. It implies use when detailed insights are needed, but does not explicitly exclude other siblings like minfraud_factors.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
minfraud_report_transactionReport a transaction outcomeADestructiveInspect
WRITE — submits fraud feedback to MaxMind. Report the real-world outcome of a transaction (e.g. it was a chargeback or confirmed fraud) so minFraud can improve future scoring. This mutates MaxMind's model of your traffic; it is not a read. Requires a tag and at least one identifier (ip_address, maxmind_id, minfraud_id, or transaction_id). API: POST /minfraud/v2.0/transactions/report (returns HTTP 204).
| Name | Required | Description | Default |
|---|---|---|---|
| tag | Yes | REQUIRED. The outcome you are reporting for this transaction. | |
| notes | No | Free-form notes about the transaction. | |
| ip_address | No | Identifier: the IP address of the reported transaction. | |
| maxmind_id | No | Identifier: the 8-character maxmind_id from a prior response. | |
| minfraud_id | No | Identifier: the minfraud_id (UUID) from a prior response. | |
| transaction_id | No | Identifier: your own transaction_id sent at scoring time. | |
| chargeback_code | No | The chargeback reason code, if tag=chargeback. |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description reinforces the destructiveHint annotation by stating 'mutates MaxMind's model' and 'not a read'. It also specifies the API endpoint and HTTP 204 response, providing context beyond annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Four sentences, front-loaded with 'WRITE' and a clear purpose. Every sentence contributes essential information without redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a mutation tool without output schema, the description covers input requirements, side effects, and API details comprehensively. No gaps remain.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
With 100% schema coverage, the description still adds value by summarizing required identifiers and clarifying chargeback_code usage. It explains parameter relationships not obvious from schema alone.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description explicitly says 'submits fraud feedback' and 'Report the real-world outcome', clearly distinguishing this write operation from sibling tools (which are read/analysis). The verb+resource combination is specific and unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description states the tool is for reporting real-world outcomes and labels it 'WRITE', implying it should not be used for scoring/insights. However, it lacks explicit when-not-to-use or alternative mentions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
minfraud_scoreminFraud risk scoreARead-onlyInspect
Score a transaction for fraud risk. Returns the overall risk_score (0.01–99), IP risk, disposition, and remaining query funds — the lightest, cheapest assessment. Send at least device.ip_address (plus email/billing/order for a better score). API: POST /minfraud/v2.0/score.
| Name | Required | Description | Default |
|---|---|---|---|
| No | |||
| event | No | ||
| order | No | ||
| device | No | Info about the device/connection. device.ip_address is the most important input. | |
| account | No | ||
| billing | No | ||
| payment | No | ||
| shipping | No | ||
| credit_card | No | ||
| custom_inputs | No | Custom inputs configured in your minFraud account. | |
| shopping_cart | No |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already mark the tool as readOnlyHint=true, so the description does not need to disclose mutation—but it adds value by listing returned data fields. However, it does not mention behavioral traits like rate limits or authentication requirements, though the API endpoint is provided.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two well-structured sentences: the first covers purpose and output, the second covers usage requirements. All information is front-loaded and no superfluous detail is present.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's complexity (11 parameters, nested objects, no output schema), the description describes the main return fields and gives a usage tip, but lacks details on error cases, auth, or comprehensive return structure. It meets the minimum but could be more complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
With only 18% schema coverage, the description must compensate. It highlights the most critical parameter (device.ip_address) and suggests additional useful fields (email, billing, order). While this aids understanding, it does not explain the majority of the 11 parameters, leaving a gap.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb 'score' and the resource 'transaction for fraud risk', enumerating key output fields (risk_score, IP risk, disposition, remaining query funds). It also hints at tool differentiation by calling it 'the lightest, cheapest assessment', which sets it apart from siblings that likely provide more detail.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides a minimal input requirement ('Send at least device.ip_address') and a suggestion for better scoring ('plus email/billing/order'), but does not explicitly state when to use this tool versus the sibling tools (minfraud_factors, minfraud_insights, minfraud_report_transaction). Usage guidance is implied but not explicit.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Claim this connector by publishing a /.well-known/glama.json file on your server's domain with the following structure:
{
"$schema": "https://glama.ai/mcp/schemas/connector.json",
"maintainers": [{ "email": "your-email@example.com" }]
}The email address must match the email associated with your Glama account. Once published, Glama will automatically detect and verify the file within a few minutes.
Control your server's listing on Glama, including description and metadata
Access analytics and receive server usage reports
Get monitoring and health status updates for your server
Feature your server to boost visibility and reach more users
For users:
Full audit trail – every tool call is logged with inputs and outputs for compliance and debugging
Granular tool control – enable or disable individual tools per connector to limit what your AI agents can do
Centralized credential management – store and rotate API keys and OAuth tokens in one place
Change alerts – get notified when a connector changes its schema, adds or removes tools, or updates tool definitions, so nothing breaks silently
For server owners:
Proven adoption – public usage metrics on your listing show real-world traction and build trust with prospective users
Tool-level analytics – see which tools are being used most, helping you prioritize development and documentation
Direct user feedback – users can report issues and suggest improvements through the listing, giving you a channel you would not have otherwise
The connector status is unhealthy when Glama is unable to successfully connect to the server. This can happen for several reasons:
The server is experiencing an outage
The URL of the server is wrong
Credentials required to access the server are missing or invalid
If you are the owner of this MCP connector and would like to make modifications to the listing, including providing test credentials for accessing the server, please contact support@glama.ai.
Discussions
No comments yet. Be the first to start the discussion!
Related MCP Servers
Alicense-qualityBmaintenanceFraud Prevention MCP server using FraudLabs Pro API.MIT- AlicenseAqualityDmaintenanceAn open-source MCP server for AI-powered fraud prevention that detects fraudulent IPs, emails, URLs, and phone numbers using free APIs and provides actionable risk scores.7MIT
- Flicense-qualityBmaintenanceMCP server that provides tools for retrieving transaction context and recording AI decisions or creating human reviews for payment risk exceptions. Enables LLM agents to handle exception transactions in a hybrid payment-decisioning workflow.
- Alicense-qualityDmaintenanceMCP server for ClawVault - an AI agent payment security layer that enables Claude to request payments, check limits, and manage transactions with configurable rules.46MIT