cardguard-mcp
Server Details
CardGuard is a high-performance MCP-compliant service designed for real-time transaction fraud detection and IP threat intelligence. It provides microsecond-level scoring and multi-dimensional analysis (IP geolocation, BIN validation, and risk pattern recognition) for autonomous AI agents
- Status
- Healthy
- Last Tested
- Transport
- Streamable HTTP
- URL
Glama MCP Gateway
Connect through Glama MCP Gateway for full control over tool access and complete visibility into every call.
Full call logging
Every tool call is logged with complete inputs and outputs, so you can debug issues and audit what your agents are doing.
Tool access control
Enable or disable individual tools per connector, so you decide what your agents can and cannot do.
Managed credentials
Glama handles OAuth flows, token storage, and automatic rotation, so credentials never expire on your clients.
Usage analytics
See which tools your agents call, how often, and when, so you can understand usage patterns and catch anomalies.
Tool Definition Quality
Average 3.8/5 across 4 of 4 tools scored.
Each tool has a clearly distinct purpose: evaluating transaction risk, IP intelligence, monitoring payment attempts, and subscription verification. No two tools overlap in function.
Tool names use different verbs ('evaluate', 'lookup', 'sense', 'verify') without a consistent pattern. While all are snake_case, the verb choice is varied and not predictable.
With 4 tools covering fraud evaluation, IP lookup, attempt monitoring, and subscription verification, the count fits the server's focused scope well.
Core operations for fraud risk assessment are covered, but there is a minor gap in detailed reporting for specific attempts. Subscription verification is included, but integration between the two domains could be deeper.
Available Tools
4 toolsevaluate_transaction_riskAInspect
Evaluate transaction fraud risk across multiple dimensions.
Combines IP geolocation intelligence, BIN validation, Luhn algorithm,
and amount patterns to output an allow/review/block decision and scoring rationale.
Args:
ip: Transaction initiator IP address.
email: Buyer email address.
card_bin: Bank card BIN (first 6-8 digits).
card_last4: Bank card last 4 digits.
amount_cents: Transaction amount in USD cents.
Returns:
Risk evaluation result containing decision, risk_score, reasons, geo_country, and geo_org.
| Name | Required | Description | Default |
|---|---|---|---|
| ip | Yes | ||
| Yes | |||
| card_bin | Yes | ||
| card_last4 | Yes | ||
| amount_cents | Yes |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries full burden. It discloses that the tool combines multiple fraud detection techniques and outputs an allow/review/block decision, risk_score, reasons, geo_country, and geo_org. This gives good insight into behavior, though it omits potential side effects or required permissions. No contradiction with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is well-structured with a summary paragraph, an Args block listing parameters, and a Returns section listing output fields. Every sentence adds value, and the most critical info (purpose) is front-loaded. No filler or redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given 5 required parameters, no output schema, and no annotations, the description covers purpose, parameters, and return values adequately. It could mention error states or edge cases (e.g., invalid IP format), but overall it provides enough context for an agent to select and invoke the tool correctly, especially with sibling tool names for differentiation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate. It provides a clear mapping of all 5 parameters (ip, email, card_bin, card_last4, amount_cents) with brief explanations (e.g., 'Transaction initiator IP address.'). This adds significant meaning beyond the schema, though format constraints or examples would improve clarity.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose: 'Evaluate transaction fraud risk across multiple dimensions.' It specifies techniques like IP geolocation, BIN validation, Luhn algorithm, and amount patterns, distinguishing it from siblings that may focus on individual aspects (e.g., lookup_ip_intelligence).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies when to use (for comprehensive fraud risk evaluation) but does not explicitly state when not to use or compare to siblings like lookup_ip_intelligence or sense_402_attempts. It provides no exclusion criteria or alternative recommendations, leaving the agent to infer usage context.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
lookup_ip_intelligenceBInspect
IP threat filtering and geolocation lookup.
Identifies Tor exit nodes, anonymous VPNs, residential proxies, data center IPs,
satellite providers, and high-risk infrastructure, returning a complete GeoProfile.
Args:
ip: IP address to lookup (IPv4/IPv6).
Returns:
Intelligence profile containing country_iso, org, asn, and various threat flags.
| Name | Required | Description | Default |
|---|---|---|---|
| ip | Yes |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries full burden. It only states the tool performs threat filtering and geolocation but does not disclose caching behavior, rate limits, cost, error handling, or what happens with invalid inputs. Minimal behavioral context beyond basic functionality.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise (4 sentences) with a clear first-line summary. The Args/Returns section is structured and efficient. However, it could be slightly more front-loaded by immediately stating the primary use case.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool has only one parameter, no output schema, and no annotations, the description covers purpose and parameter details adequately. However, it does not explain the return structure (e.g., format of threat flags) or error conditions, leaving gaps for an agent to interpret the full response. Adequate but not complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema has one parameter 'ip' with no description (0% coverage). The description adds the format constraint 'IPv4/IPv6', which goes beyond the schema and helps agents provide correct inputs. This significantly compensates for the schema's lack of detail.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states it performs 'IP threat filtering and geolocation lookup' and lists specific threat types (Tor, VPNs, proxies, etc.). This immediately distinguishes it from sibling tools like evaluate_transaction_risk and verify_agent_for_subscription, which focus on risk assessment and agent identity, not IP intelligence.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description does not provide any guidance on when to use this tool versus alternatives. No explicit when-to-use, when-not-to-use, or comparison with sibling tools is given, leaving the agent to infer context from the tool name alone.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
sense_402_attemptsAInspect
Query the CardGuard Node Sensing Chain — inspect recent 402 rejection attempts and threat profile metrics.
Args:
limit: Max number of recent attempts to retrieve (default 20).
Returns:
Summary statistics of 402 payment attempts and recent rejection log entries.
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description must fully disclose behavior. It states the tool queries and inspects, which suggests a read-only operation, and mentions the return of summary statistics and log entries. However, it does not disclose potential side effects, rate limits, authentication requirements, or whether the data is real-time or cached. This is adequate but not comprehensive.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise: three sentences plus structured Args and Returns sections. It front-loads the purpose and efficiently communicates the single parameter and return type. No extraneous information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with one parameter and no output schema, the description explains the purpose, parameter, and general return content (summary statistics and log entries). It does not enumerate exact fields, but for a simple inspection tool, this is largely sufficient. The lack of usage guidance slightly reduces completeness.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The description explicitly explains the 'limit' parameter beyond the schema, stating it controls the maximum number of recent attempts to retrieve with a default of 20. Since schema coverage for parameters is 0%, this addition is valuable. However, it does not specify valid range or constraints (e.g., min/max).
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb 'Query' and 'inspect' along with the resource 'recent 402 rejection attempts and threat profile metrics', making the tool's purpose unambiguous. The name 'sense_402_attempts' reinforces this. It distinguishes from siblings like 'evaluate_transaction_risk' by focusing specifically on 402 failures.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies when to use this tool (to inspect 402 attempts) but does not explicitly state when not to use it or provide guidance on alternatives. It lacks exclusion criteria or comparative context with sibling tools.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
verify_agent_for_subscriptionAInspect
Pre-verify agent Web3 wallet authenticity or whitelist status to unlock SaaS checkout URL ($199/month).
Args:
wallet_address: EVM wallet hex address (0x...) of the agent or orchestrator.
agent_id: Optional agent identifier (e.g. smithery-ai, coaxon-kernel).
Returns:
Verification status and the Polar checkout subscription URL if verified.
| Name | Required | Description | Default |
|---|---|---|---|
| agent_id | No | ||
| wallet_address | Yes |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden. It mentions return of verification status and URL, but does not disclose side effects (e.g., idempotency, state changes), authentication requirements, or rate limits. The nature of 'pre-verify' and 'unlock' suggests possible mutation, but this is unclear.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise, using a one-line purpose followed by structured Args/Returns sections. It is front-loaded and contains no fluff, though the format could be slightly more compact.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given no output schema, the description covers return info (verification status and URL). However, it lacks details on error handling, status structure, and behavioral traits. For a simple 2-param tool, it is adequate but not fully complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
With 0% schema coverage, the description fully compensates by specifying wallet_address format (EVM hex 0x...) and providing examples for agent_id (e.g., smithery-ai). This adds significant meaning beyond the bare schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description clearly states the tool's function: 'Pre-verify agent Web3 wallet authenticity or whitelist status to unlock SaaS checkout URL'. It specifies the verb (pre-verify), resource (agent wallet), and outcome (unlock URL). This distinguishes it from sibling tools like evaluate_transaction_risk and lookup_ip_intelligence.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage when needing to obtain a subscription checkout URL after verification, but it does not explicitly state when to use this tool versus alternatives. No when-not or exclusion criteria are provided.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Claim this connector by publishing a /.well-known/glama.json file on your server's domain with the following structure:
{
"$schema": "https://glama.ai/mcp/schemas/connector.json",
"maintainers": [{ "email": "your-email@example.com" }]
}The email address must match the email associated with your Glama account. Once published, Glama will automatically detect and verify the file within a few minutes.
Control your server's listing on Glama, including description and metadata
Access analytics and receive server usage reports
Get monitoring and health status updates for your server
Feature your server to boost visibility and reach more users
For users:
Full audit trail – every tool call is logged with inputs and outputs for compliance and debugging
Granular tool control – enable or disable individual tools per connector to limit what your AI agents can do
Centralized credential management – store and rotate API keys and OAuth tokens in one place
Change alerts – get notified when a connector changes its schema, adds or removes tools, or updates tool definitions, so nothing breaks silently
For server owners:
Proven adoption – public usage metrics on your listing show real-world traction and build trust with prospective users
Tool-level analytics – see which tools are being used most, helping you prioritize development and documentation
Direct user feedback – users can report issues and suggest improvements through the listing, giving you a channel you would not have otherwise
The connector status is unhealthy when Glama is unable to successfully connect to the server. This can happen for several reasons:
The server is experiencing an outage
The URL of the server is wrong
Credentials required to access the server are missing or invalid
If you are the owner of this MCP connector and would like to make modifications to the listing, including providing test credentials for accessing the server, please contact support@glama.ai.
Discussions
No comments yet. Be the first to start the discussion!