fraud-prevention-mcp-server
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| HIBP_API_KEY | Yes | Your HaveIBeenPwned API key. Get at https://haveibeenpwned.com/API/Key | |
| IPQS_API_KEY | Yes | Your IPQualityScore API key (free tier: 5,000 requests/month). Get at https://www.ipqualityscore.com/create-account |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {
"listChanged": false
} |
| prompts | {
"listChanged": false
} |
| resources | {
"subscribe": false,
"listChanged": false
} |
| experimental | {} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| tool_check_ip_reputationA | Check an IP address for fraud risk, proxy, VPN, Tor and bot activity. Returns fraud score (0-100), risk level, and flags for proxy/VPN/Tor/bot. Requires IPQS_API_KEY env var (free at ipqualityscore.com). Args: ip_address: IPv4 or IPv6 address to check strictness: Detection strictness 0 (lenient) to 3 (strict), default 1 |
| tool_check_email_riskA | Check an email address for fraud risk, disposable services and spam traps. Returns fraud score, validity, disposable flag, spam trap detection, and deliverability. Requires IPQS_API_KEY env var (free at ipqualityscore.com). Args: email: Email address to validate and check strictness: Detection strictness 0-3, default 1 |
| tool_check_url_safetyA | Check a URL for phishing, malware, spam and other threats. Returns risk score, safety flags (phishing/malware/spam), and domain info. Requires IPQS_API_KEY env var (free at ipqualityscore.com). Args: url: Full URL to check (include https://) strictness: Detection strictness 0-3, default 1 |
| tool_check_phone_riskA | Validate a phone number and check for fraud risk, VoIP and prepaid indicators. Returns validity, line type, carrier, VoIP flag, and fraud score. Requires IPQS_API_KEY env var (free at ipqualityscore.com). Args: phone: Phone number in E.164 format (e.g. +14155552671) or local format country: ISO country code for local numbers (default: US) |
| tool_check_breach_exposureB | Check if an email address has been exposed in known data breaches (HaveIBeenPwned). Returns breach count, risk level, exposed data types, and breach details. Requires HIBP_API_KEY env var (get key at haveibeenpwned.com/API/Key). Args: email: Email address to check for breach exposure |
| tool_calculate_composite_riskA | Calculate a combined fraud risk score from multiple signals (IP, email, phone, URL). Analyzes all provided signals and returns a composite risk score with ALLOW / MONITOR / REVIEW / BLOCK decision. Provide at least one signal. Requires IPQS_API_KEY env var. Args: ip: IP address to check (optional) email: Email address to check (optional) phone: Phone number to check (optional) url: URL to check (optional) |
| tool_get_fraud_prevention_infoA | Get information about this server, available tools and API key setup instructions. Returns tool list, API key configuration status, and links to get free API keys. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
TDQS
Scored across 7 tools
Each tool targets a distinct type of fraud signal (IP, email, phone, URL, breach) with a clear composite tool and an info tool, leaving no ambiguity.
All tools use a consistent verb_noun snake_case pattern (check_*, calculate_*, get_*), making them predictable and easy to navigate.
7 tools cover the essential fraud prevention checks (IP, email, phone, URL, breach) plus a composite and info tool—perfectly scoped for the domain.
Covers all major signal types and a composite score, but lacks batch processing or a feedback mechanism for false positives, which are minor gaps.