Skip to main content
Glama
Kaidn-io

Kaidn-mcp

Official
by Kaidn-io

Kaidn MCP

Kaidn 사기 점수 API를 위한 Model Context Protocol 서버.

평이한 영어로 사기를 조사하세요 — "이 가입이 왜 차단되었나?", "이 기기가 또 무엇을 접촉했나?", "오늘 아침 검토 대기열에는 무엇이 있나?"

  • 증거, 단순한 점수가 아닌. 모든 이유에는 그 뒤에 있는 원시 숫자가 포함되어 있어 모델이 추측하는 대신 판정을 설명할 수 있습니다.

  • 기본적으로 읽기 전용. 옵트인하지 않는 한 테넌트를 변경하지 않습니다.

  • 할당량 보호. 루프에 있는 에이전트가 10분 안에 한 달 치를 소비할 수 없습니다.

  • 모든 클라이언트. MCP는 개방형 프로토콜입니다 — 로컬에서는 stdio, 원격 및 호스팅 에이전트에서는 Streamable HTTP.

요구 사항

Node.js 18 이상과 Kaidn 대시보드의 API 키가 필요합니다.


시작하기

먼저 클라이언트에 Kaidn MCP 서버를 설치하세요. 표준 구성은 대부분의 도구에서 작동합니다:

{
  "mcpServers": {
    "kaidn": {
      "command": "npx",
      "args": ["@kaidn/mcp@latest"],
      "env": { "KAIDN_API_KEY": "your_key" }
    }
  }
}
claude mcp add kaidn --env KAIDN_API_KEY=your_key -- npx @kaidn/mcp@latest

표준 구성을 claude_desktop_config.json에 추가한 다음 Claude를 다시 시작하세요. 설정 → 개발자 → 구성 편집에서 파일을 열 수 있습니다.

설정 → MCP → 새 MCP 서버 추가, 또는 프로젝트의 .cursor/mcp.json (모든 프로젝트의 경우 ~/.cursor/mcp.json)에 표준 구성을 추가하세요.

code --add-mcp '{"name":"kaidn","command":"npx","args":["@kaidn/mcp@latest"],"env":{"KAIDN_API_KEY":"your_key"}}'

표준 구성을 ~/.codeium/windsurf/mcp_config.json에 추가하세요.

MCP 서버 아이콘 → MCP 서버 구성을 통해 cline_mcp_settings.json에 표준 구성을 추가하세요.

표준 구성과 동일한 명령, 인수 및 환경 변수를 사용하여 settings.jsoncontext_servers 아래에 추가하세요.

모든 MCP 클라이언트는 command, argsenv 블록을 사용합니다. 위의 표준 구성을 사용하세요. 클라이언트가 프로세스를 생성하는 대신 네트워크를 통해서만 서버에 연결할 수 있는 경우 Streamable HTTP를 참조하세요.


Related MCP server: Mnemom

구성

옵션

환경 변수

기본값

목적

KAIDN_API_KEY

필수

비밀 키입니다. 환경 변수로만 — 플래그나 도구 인수로 절대 사용하지 마세요.

KAIDN_API_URL

https://api.kaidn.io

API 기본 URL

--allow-writes

KAIDN_MCP_ALLOW_WRITES=1

꺼짐

변경 도구 등록

KAIDN_MCP_MAX_QUOTA_CALLS

100

프로세스당 할당량 상한

--http

KAIDN_MCP_TRANSPORT=http

stdio

Streamable HTTP 제공

--host <addr>

KAIDN_MCP_HOST

127.0.0.1

HTTP 바인드 주소

--port <n>

KAIDN_MCP_PORT

8765

HTTP 포트

KAIDN_MCP_HTTP_TOKEN

설정 안 됨

HTTP에서 Authorization: Bearer 요구

--help

사용법 표시

--version

버전 표시

우선 순위: CLI 플래그가 환경 변수보다 우선합니다.

API 키는 의도적으로 환경 변수로만 사용됩니다. 플래그로 전달된 키는 프로세스 목록과 셸 기록에 노출됩니다.


전송

전송

용도

엔드포인트

stdio (기본값)

하위 프로세스를 생성하는 로컬 클라이언트

Streamable HTTP

원격 에이전트, 컨테이너, 머신 외부의 모든 것

POST /mcp

HTTP+SSE는 의도적으로 제외되었습니다: 2025-03-26 사양에서 더 이상 사용되지 않으며 2026년 6월에 종료됩니다.

Streamable HTTP

npx @kaidn/mcp@latest --http --port 8765

무상태 — 요청마다 새 서버가 생성되고 호출자 간에 공유되는 것이 없으므로 로드 밸런서 뒤에서도 문제없이 작동합니다. GET /health는 인증 없이 접근 가능하므로 오케스트레이터가 토큰을 보유하지 않고도 활성 상태를 확인할 수 있습니다.


Docker

docker build -t kaidn-mcp .
# stdio — behaves like the npx invocation
docker run -i --rm -e KAIDN_API_KEY=your_key kaidn-mcp

# HTTP — for remote agents
docker run --rm -p 8765:8765 \
  -e KAIDN_API_KEY=your_key \
  -e KAIDN_MCP_TRANSPORT=http \
  -e KAIDN_MCP_HOST=0.0.0.0 \
  -e KAIDN_MCP_HTTP_TOKEN=your_token \
  kaidn-mcp

다단계 빌드, 권한이 없는 node 사용자로 실행되며 헬스체크가 포함되어 있습니다.


보안

서버는 API 키를 보유합니다. 서버에 접근할 수 있는 사람은 누구나 할당량을 소비할 수 있으므로 기본값은 보수적이며 가드는 경고 대신 폐쇄적으로 실패합니다.

  • 127.0.0.1에 바인딩되며, KAIDN_MCP_HTTP_TOKEN이 설정되지 않은 경우 더 넓은 인터페이스에서 시작을 거부합니다. 계정을 조용히 노출하는 대신 설명과 함께 중지됩니다.

  • 기본적으로 읽기 전용. add_to_listlabel_outcome--allow-writes가 있을 때만 존재합니다.

  • set_configforget_subject는 어떤 모드에서도 노출되지 않습니다. 하나는 향후 모든 이벤트의 판정을 조용히 변경하고, 다른 하나는 되돌릴 수 없는 GDPR 삭제입니다. 둘 다 대시보드에서 사람 앞에 있어야 합니다.

  • 프로세스당 할당량 상한이 있으며, 비용이 드는 모든 응답에 남은 예산이 보고됩니다. 초과할 예약은 부분적으로 소비되는 대신 완전히 거부됩니다.

  • 키는 도구 경계를 절대 넘지 않습니다 — 매개변수로도, 출력으로도, 오류로도 아닙니다.


도구

모든 도구를 지배하는 두 가지: 할당량을 소비하는지, 그리고 무언가를 변경하는지입니다.

읽기 전용 — 기본적으로 사용 가능

도구

비용

기능

get_stats

무료

롤링 윈도우에 대한 판정, 점수 및 이유 요약. 여기서 시작하세요.

list_events

무료

점수가 매겨진 이벤트, 최신순, 판정 또는 유형으로 필터링 가능

explain_event

무료

한 이벤트에서 발생한 모든 검사와 원시 증거

triage_queue

무료

review에 있는 모든 항목, 점수 높은 순

get_config

무료

이 테넌트의 유효 가중치 및 임계값

investigate_entity

1행¹

한 엔티티에 대한 강화, 네트워크 평판 및 관련 이벤트

check_email

1행

일회용 도메인, 전달 가능성, 사기 점수, 남용 기록

check_ip

1행

프록시, VPN, Tor, 데이터센터 ASN, 지리, 남용 기록

check_phone

1행

유효성, 회선 유형, 통신사, 사기 점수

score_event

1행

새 이벤트 점수 매기기 (기록도 함)

¹ 엔티티가 device_id인 경우 무료입니다. 강화는 이메일 또는 IP에서만 비용이 발생합니다.

변경 — --allow-writes 필요

도구

기능

add_to_list

엔티티를 허용 또는 차단 목록에 추가

label_outcome

확인된 사기 / 차지백 / 정상 결과 보고


작업 예시

도구는 체인으로 연결되도록 설계되었습니다. 다음은 이를 위해 만들어진 흐름입니다.

아침 트리아지

당신: 밤새 무슨 일이 있었고, 무엇이 나를 필요로 하나요?

모델은 지난 24시간의 개요를 위해 get_stats를 호출하고, review에 있는 이벤트를 위해 triage_queue를 호출한 다음, 가장 심각한 이벤트에 대해 explain_event를 호출합니다. 여전히 읽어야 하는 대시보드 대신 추론이 첨부된 순위 목록을 얻을 수 있습니다.

"이 고객이 왜 차단되었나요?"

당신: 이벤트 evt_8f21c — 고객이 잘못 차단되었다고 합니다.

explain_event는 발생한 모든 검사와 원시 증거를 반환합니다 — 일치한 데이터센터 ASN, 기기를 공유한 계정 수, 속도 횟수. 고객에게 답하거나 규칙이 잘못되어 조정이 필요하다고 결론 내리기에 충분합니다.

하나의 신호에서 바깥으로 작업

당신: 194.x.x.x는 일회성인가요, 아니면 링의 일부인가요?

investigate_entity는 IP에 대한 강화 및 네트워크 평판과 함께 해당 IP가 나타나는 모든 최근 이벤트를 반환합니다. 동일한 기기 ID가 계속 반복된다면 우연이 아니라 링입니다.

변경 전 규칙 변경 확인

당신: 속도 가중치를 낮추면 무엇이 차단되지 않게 될까요?

get_config는 현재 가중치를 읽고, verdict: "block"이 있는 list_events는 현재 잡히는 것을 보여줍니다. 모델은 약화하려는 검사에 의존하는 항목을 알려줄 수 있습니다.


오류 처리

실패는 예외가 아닌 읽을 수 있는 메시지가 있는 도구 오류로 반환됩니다 — 모델이 이에 대해 조치를 취할 수 있습니다.

표시

의미

해결 방법

KAIDN_API_KEY is not set

키 없이 서버가 시작됨

클라이언트의 env 블록에 설정하세요.

Kaidn error: 401 …

키가 거부됨

대시보드에서 회전하거나 다시 복사하세요.

Kaidn error: 429 …

속도 제한

속도를 늦추세요. 키별 제한은 분 단위입니다.

Session quota ceiling reached (100/100 …)

가드가 비용이 많이 드는 실행을 중지했습니다.

의도적으로 KAIDN_MCP_MAX_QUOTA_CALLS를 높이거나 다시 시작하세요.

No event <id> in the most recent 200 events

이벤트가 검색 창보다 오래됨

offset을 사용하여 list_events로 페이지를 뒤로 이동하세요.

Supply exactly one of email, ip or device_id

모호한 조사

한 번에 하나의 엔티티에 대해 물어보세요.

Refusing to bind <host> without authentication

토큰이 없는 비루프백 HTTP

KAIDN_MCP_HTTP_TOKEN을 설정하거나 127.0.0.1에 바인딩하세요.

오류에는 API 키가 절대 포함되지 않습니다.


문제 해결

클라이언트에 도구가 표시되지 않습니다. 시작 줄을 확인하려면 클라이언트의 MCP 로그를 확인하세요. stderr의 kaidn-mcp: ready (stdio, …)는 서버가 실행 중이고 문제가 클라이언트 쪽에 있음을 의미합니다. 아무것도 표시되지 않으면 일반적으로 npx가 패키지를 확인하지 못했거나 Node가 18보다 오래된 버전임을 의미합니다.

시작된 후 즉시 종료됩니다. 거의 항상 KAIDN_API_KEY가 누락된 경우입니다. 메시지가 stderr에 표시됩니다. 일부 클라이언트는 stderr를 숨기므로 터미널에서 실행하여 확인하세요.

add_to_listlabel_outcome이 누락되었습니다. 설계된 대로 동작합니다. --allow-writes가 필요합니다.

set_configforget_subject가 누락되었습니다. 이 역시 설계된 대로이며 어떤 모드에서도 사용할 수 없습니다. SECURITY.md를 참조하세요.

HTTP 모드가 시작을 거부합니다. 베어러 토큰 없이 루프백이 아닌 다른 주소에 바인딩한 경우입니다. 이는 가드가 작동하는 것입니다 — 프로세스가 API 키를 보유하고 있습니다.

모든 것이 느립니다. 강화(Enrichment) 검사는 실시간 업스트림 호출을 수행합니다. get_stats, list_events, explain_event, triage_queue는 무료이고 빠르므로 기록을 읽을 때 이들을 선호하세요.

클라이언트와 독립적으로 서버를 확인하세요:

node dist/index.js --help                 # no key required
KAIDN_API_KEY=your_key npm start          # should print a ready line

지원


소스에서 실행

git clone https://github.com/Kaidn-io/kaidn-mcp.git
cd kaidn-mcp
npm install
npm run build
npm test
claude mcp add kaidn --env KAIDN_API_KEY=your_key -- node /absolute/path/to/kaidn-mcp/dist/index.js

클라이언트 없이 시작되는지 확인하려면:

KAIDN_API_KEY=your_key npm start

stderr에 kaidn-mcp: ready (stdio, read-only, quota ceiling 100)를 출력한 다음 stdin에서 대기합니다 — 이것이 MCP 전송이므로 침묵이 정상입니다.


증거가 중요한 이유

Kaidn의 엔진은 규칙 우선이고 설명 가능합니다. 모든 이유에는 그 뒤에 있는 원시 숫자가 포함됩니다. 맨 점수는 모델이 추론할 수 있는 것을 제공하지 않지만, 증거가 첨부된 checks[]는 설명할 수 있는 것을 제공합니다. 이것이 explain_event가 유용한 것과 장식적인 것의 차이입니다.

규칙이 결정합니다. 모델이 서술합니다.


프로젝트

라이선스

MIT

Available Tools

10 tools
check_emailCheck an email addressA

Enrichment and in-network reputation for one email address: disposable/ throwaway domain, deliverability, fraud score, plus how often the address has been seen abusing other operators. Also returns canonical, the identity key: every alias that reaches one mailbox (+tags, gmail dot tricks, googlemail.com) collapses to the same string, so compare THAT across accounts to tell whether two signups are one person. is_aliased and alias_tricks say which trick was used, and reject_reason says why an address is unusable. Consumes one row of monthly quota.

ParametersJSON Schema
NameRequiredDescriptionDefault
emailYesThe email address to check

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden of behavioral disclosure. It transparently reports quota consumption, explains canonical alias collapsing behavior, and notes specific return fields like reject_reason. It doesn't explicitly state read-only nature or error handling, but these are reasonably implied by the enrichment context.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is moderately detailed but each sentence adds value: purpose, canonical key, specific fields, and quota. The structure is logical, though the first sentence is dense with colon-separated lists. It is appropriately sized for a tool with no output schema.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Since there is no output schema, the description is the sole source for return values. It lists the main fields (canonical, is_aliased, alias_tricks, reject_reason) and covers quota consumption. It could be more complete by detailing response structure or error cases, but it covers the key behavioral and output aspects for a check tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema only describes the parameter as 'The email address to check' with type string. The description adds that the tool accepts one email address (not a batch) and explains the canonical key semantics, providing meaningful context for interpreting the parameter. It stops short of providing format constraints or examples.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly identifies the tool as an email enrichment and reputation lookup, enumerating specific outputs such as disposable domain, deliverability, fraud score, and abuse history. It distinguishes itself from sibling tools like check_ip and check_phone by explicitly focusing on email addresses.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Provides a clear use case: using the canonical key to compare across accounts to detect duplicate signups. It also mentions quota consumption as a cost consideration. However, it doesn't explicitly state when not to use this tool or reference alternatives beyond the implicit sibling context.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

check_ipCheck an IP addressA

Enrichment and in-network reputation for one IP: proxy/VPN/Tor, datacenter ASN, geo, fraud score, and cross-operator abuse history. Consumes one row of monthly quota.

ParametersJSON Schema
NameRequiredDescriptionDefault
ipYesThe IPv4 or IPv6 address to check

TDQS

A3.8/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries full burden. It discloses quota consumption, a behavioral trait, but does not mention other aspects like read-only nature, latency, or error behavior. This is partial disclosure.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, no fluff. The purpose and key constraint (quota) are front-loaded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a single-parameter tool without an output schema, the description lists the return categories and quota cost, providing adequate context for the agent. It could mention limitations or assumptions but is largely complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema covers 100% of the ip parameter with a clear description, so the baseline is 3. The description adds no new parameter-level detail beyond confirming 'one IP', which does not exceed the schema's content.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's function: enriching and providing in-network reputation for a single IP address, listing specific data categories. This distinguishes it from check_email/check_phone siblings targeting different entities.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies the tool is for IP lookups but does not explicitly say when to use it over alternatives or mention exclusions. Sibling names provide context, but the description itself lacks direct usage guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

check_phoneCheck a phone numberA

Validity, line type, carrier and fraud score for one phone number. Consumes one row of monthly quota.

ParametersJSON Schema
NameRequiredDescriptionDefault
phoneYesThe phone number, E.164 or national
countryNoISO country code to parse a national number against, e.g. 'US'

TDQS

A4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden of behavioral disclosure. It explicitly mentions consuming one row of monthly quota, which is a key operational detail (rate limit/cost). It also lists the output data points. However, it does not mention any side effects, permissions, or error conditions, which for a simple lookup may be acceptable but leaves some gaps.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences, front-loaded with the primary purpose, and includes a crucial quota warning without any unnecessary words. It is highly concise and well-structured.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the simplicity of the tool (two params, full schema coverage, no output schema), the description adequately covers its behavior and outputs. It lists the returned fields and the quota consumption, but it could be more complete with explicit usage context relative to sibling tools, though that is mostly a usage-guideline issue.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% for both parameters, so the description does not need to add parameter meaning. It adds no extra semantics beyond the schema's existing descriptions for 'phone' and 'country', so the baseline score of 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's function: it returns validity, line type, carrier, and fraud score for a single phone number. This specific verb-less enumeration distinguishes it from sibling tools like check_email and check_ip, which target different entity types.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies the tool is for phone number checks but does not explicitly discuss when to use it versus alternatives like check_email or check_ip. No exclusions or prerequisites are mentioned, so usage guidance is minimal but not misleading.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

explain_eventExplain why an event scored the way it didA

The 'why was this blocked?' tool. Returns the event with every check that fired, its weight, and the raw evidence behind it, so the reasoning can be narrated with receipts rather than guessed at. Free.

ParametersJSON Schema
NameRequiredDescriptionDefault
event_idYesThe event id, as returned by list_events

TDQS

A4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden. It discloses what the tool returns (event, checks, weights, raw evidence) and that it is 'Free', but it does not explicitly state whether it has side effects, requires certain permissions, or has other operational constraints. This leaves some ambiguity, though the read-only nature is strongly implied.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two short sentences plus 'Free.', front-loaded with the purpose ('why was this blocked?') and then a compact, informative explanation of the output (every check, weight, evidence). Every word earns its place; no fluff.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple one-parameter tool with no output schema, the description does a good job conveying what the caller will get (event with checks, weights, evidence). It could be slightly more complete by mentioning whether the event itself is returned in full or just the analysis details, but the phrase 'Returns the event with...' sufficiently covers this.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema already describes the only parameter (event_id) as 'The event id, as returned by list_events', achieving 100% schema description coverage. The tool description does not add any additional parameter-specific information beyond what the schema provides, so the baseline of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's purpose: explaining why an event scored as it did, specifically by returning the event with all checks that fired, their weights, and raw evidence. This specific verb-resource pairing ('explain event') distinguishes it from siblings like score_event (which likely computes the score) and investigate_entity (which sounds broader).

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The phrase 'The ‘why was this blocked?’ tool' gives a clear situational context for when to use this tool. It implies you should use it when you need the reasoning behind a score/block decision rather than just the score itself. However, it does not explicitly mention when not to use it or name alternative tools, so it's not a full 5.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_configGet scoring configurationA

This tenant's weight and threshold overrides plus the effective merged engine config. Free. Useful for explaining why a score landed where it did.

ParametersJSON Schema
NameRequiredDescriptionDefault

No parameters

TDQS

A4.2/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the burden. It states the tool is 'Free' and returns tenant-specific config, but it does not explicitly confirm that the operation is read-only, whether any authentication is needed, or what 'Free' means. The 'get' verb implies safety, but more explicit behavioral disclosure would improve transparency.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two concise sentences with no redundancy. The first sentence immediately explains the tool's output; the second adds a use case. All words earn their place, and the structure is front-loaded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple zero-parameter getter, the description covers the essential context: what is returned, that it is free, and when it is useful. No output schema exists, but the description gives enough detail about the config composition. It does not overpromise or omit critical information.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool has zero parameters and the schema is empty, so there are no parameter semantics to add. Baseline for zero params is 4. The description adds value by clarifying what the configuration contains, which is more than schema alone would provide.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool retrieves the tenant's scoring configuration, specifying the exact contents: weight and threshold overrides plus the effective merged engine config. This goes beyond the title and distinguishes it from siblings like get_stats or explain_event.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives a clear use case: 'Useful for explaining why a score landed where it did.' This implies when to use it relative to scoring-related tasks. However, it does not explicitly mention alternative tools or exclusions, so it stops short of full comparative guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_statsVerdict and reason rollupsA

Aggregate view over a rolling window: totals by verdict, average score and the most common reasons. Free — does not consume quota. Start here to see what changed before drilling into individual events.

ParametersJSON Schema
NameRequiredDescriptionDefault
window_hoursNoDefault 24

TDQS

A4.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the burden. It discloses that the tool is free (does not consume quota) and operates over a rolling window, adding behavioral context. It does not explicitly state read-only behavior, but 'aggregate view' strongly implies it. This is useful beyond schema.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is three short sentences: the first states the core functionality, the second adds the free/quota trait, and the third gives usage guidance. Every sentence adds value; no filler or redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's simplicity (one optional parameter, no output schema), the description is complete: it explains what is returned conceptually, the rolling window behavior, the free trait, and the suggested usage workflow. No critical information is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% for the single parameter (window_hours), so the schema already fully documents it. The description does not add any extra parameter semantics, but that is unnecessary. Baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's function: an aggregate view over a rolling window with totals by verdict, average score, and most common reasons. It also differentiates from siblings by saying 'Start here... before drilling into individual events,' positioning it as the initial overview tool.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives explicit usage guidance: 'Start here to see what changed before drilling into individual events.' This tells the user when to use it (first, for an overview) and implies that event-level tools are for subsequent drilling. It also mentions the free/quota aspect, which is a practical consideration.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

investigate_entityInvestigate an entity and the ring around itA

One call for what a fraud analyst actually wants. Returns enrichment for the entity, its reputation across the CROSS-OPERATOR abuse network (whether this email, IP or device has already burned other businesses, not just yours), and every recent event it appears in — which is how you get from one suspicious signup to the whole ring of accounts sharing its device, IP or inbox. Supply exactly one of email, ip or device_id. Enrichment consumes one row of monthly quota (device_id lookups are free).

ParametersJSON Schema
NameRequiredDescriptionDefault
ipNo
emailNo
limitNoHow many recent events to scan. Default 100
device_idNo

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the burden and it discloses key behaviors: cross-operator reputation scope, event retrieval, the one-identifier requirement, and quota costs. However, it does not mention what happens if multiple identifiers are supplied, nor does it clarify the relationship between 'every recent event' and the 'limit' parameter, which is a slight transparency gap.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences and front-loaded with the core benefit. The first sentence is long but information-dense, and every clause serves a purpose. It is not overly verbose, though it could be split for readability.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description covers purpose, identifier types, expected outputs (reputation, events), and quota costs. Given no output schema and no annotations, it is reasonably complete for a complex investigation tool, but it omits return format details, error handling, and the exact role of the limit parameter relative to 'every recent event'.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is only 25% (only limit has a description). The description compensates by explaining that email, ip, and device_id are mutually exclusive entity identifiers and that device_id lookups are free. It adds meaning beyond the schema, though it lacks format details or explicit behavior when multiple identifiers are passed.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's purpose: it enriches an entity, provides reputation across a cross-operator abuse network, and returns recent events to uncover fraud rings. It uses a strong verb-resource pairing ('Returns enrichment for the entity, its reputation... and every recent event') and differentiates from sibling tools like check_email or list_events by emphasizing the investigation use case.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives explicit usage constraints ('Supply exactly one of email, ip or device_id') and mentions quota implications. It implies when to use this tool ('what a fraud analyst actually wants') but does not explicitly name alternatives or state when not to use it, so it stops short of full exclusion guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

list_eventsList scored eventsA

Scored events for this tenant, newest first. Free — does not consume quota. Filter by verdict or event type to narrow an investigation.

ParametersJSON Schema
NameRequiredDescriptionDefault
eventNoEvent type, e.g. 'signup', 'cashout', 'trial_start'
limitNoDefault 25
offsetNo
verdictNo

TDQS

A3.8/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the burden. It discloses the ordering (newest first) and the quota-free nature, but does not mention the return format, pagination behavior, or any other side effects.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, front-loaded with purpose and key differentiators. No wasted words; every phrase adds value.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple list tool with no output schema and no annotations, the description covers the core aspects: what is listed, ordering, cost, and filtering use case. Lacks response shape details, but that is often implicit for list tools.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 50%; event and limit have descriptions, offset and verdict do not. The description adds that verdict and event are filters for investigations, but does not explain offset or pagination semantics.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool lists scored events for the tenant, with newest first. It provides specific verb and resource, but does not explicitly differentiate from siblings like triage_queue or get_stats.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives clear context: the tool is free (does not consume quota) and suggests using filters to narrow an investigation. However, it does not explicitly state when not to use it or mention alternatives.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

score_eventScore an eventA

Run an event through the scoring engine and get {score, verdict, reasons, checks}. When the event carries an email, the response also has an identity block whose email_canonical is the dedupe key for that address — so one call both scores the event and tells you whether the mailbox is one you have already seen. Consumes one row of monthly quota AND records an event — prefer the read-only tools when investigating history rather than testing new input.

ParametersJSON Schema
NameRequiredDescriptionDefault
ipNo
emailNo
eventYesEvent type, e.g. 'signup', 'cashout', 'trial_start'
phoneNo
user_idNo
timezoneNoIANA browser timezone
device_idNo

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries full weight and does an excellent job: it discloses monthly quota consumption, that it records an event, and the conditional identity block with email_canonical as a dedupe key. These are serious side effects an agent must know before invoking.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences, perfectly front-loaded with the core purpose, then the email behavior, then the quota/recording warning. No wasted words or repetition of schema details.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a tool with no output schema and no annotations, the description covers the essential return fields, side effects, and usage caveat. It lacks a full per-parameter breakdown, but the schema already lists all parameters and the description focuses on the most consequential behaviors.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is only 29%, so the description must compensate. It adds meaningful semantics for "email" (identity block, dedupe key) and implicitly for "event" (the scoring trigger), but completely ignores ip, phone, user_id, and device_id—leaving those parameters opaque for the agent.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's function: "Run an event through the scoring engine and get {score, verdict, reasons, checks}". It also distinguishes this from sibling check_* tools by focusing on scoring whole events and the added email identity dedupe feature.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It explicitly advises "prefer the read-only tools when investigating history rather than testing new input", giving a clear alternative and context. It also notes the quota consumption and event recording, signaling this is for live scoring rather than historical investigation.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

triage_queueReview queue, highest risk firstA

Every event sitting on the 'review' verdict, sorted by score descending — the daily triage job. Free.

ParametersJSON Schema
NameRequiredDescriptionDefault
limitNoDefault 50

TDQS

A3.9/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the burden. It specifies the filter and sort, indicating a read-only query. However, it doesn't disclose the effect of the limit parameter (the description says 'every event' but limit can restrict results), and 'Free' is ambiguous. No contradictions with annotations (none present).

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

One sentence, highly efficient, front-loaded with the core behavior. The final 'Free' note is extraneous but not harmful.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the simplicity (one optional param, no output schema), the description covers the main purpose. However, it fails to reconcile 'every event' with the limit parameter, and does not describe the return format or potential pagination. The lack of annotations and output schema places more burden on the description, but it still provides a sufficient overview for a basic list tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema covers 100% of the single parameter with a description (though minimal: 'Default 50'). The property name is self-explanatory, so baseline 3 applies. The tool description adds no parameter details.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's function: returns events with 'review' verdict, sorted by score descending. It distinguishes from sibling tools like list_events by specifying the filter and sort order. The title reinforces this.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides clear context (daily triage job) and implies this is the tool for reviewing high-risk events. However, it doesn't explicitly mention alternatives or when not to use it, preventing a 5.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 10 tool updatesv0.2.2
    • First observedcheck_email
    • First observedcheck_ip
    • First observedcheck_phone
    • First observedexplain_event
    • First observedget_config
    • First observedget_stats
    • First observedinvestigate_entity
    • First observedlist_events
    • First observedscore_event
    • First observedtriage_queue

TDQS

A4.3/5.0

Scored across 10 tools

Disambiguation5/5

Each tool has a clearly distinct purpose: check_email/check_ip/check_phone target different entity types, the read-only analytics tools (list_events, get_stats, get_config, explain_event, triage_queue) each serve a unique function, investigate_entity combines enrichment and history, and score_event is the only action that records an event. No two tools are easily confused.

Naming Consistency5/5

All tool names follow a consistent verb_noun snake_case pattern (check_email, list_events, get_config, score_event, etc.). The verbs (check, list, get, explain, investigate, triage, score) clearly indicate the action, and the nouns (email, events, stats, config, entity, queue) indicate the resource.

Tool Count5/5

10 tools is well within the ideal range for a fraud investigation MCP. Each tool covers a distinct need — enrichment, event browsing, stats, config, explanation, investigation, triage, and scoring — without unnecessary redundancy or bloat.

Completeness5/5

The tool set covers the full investigation lifecycle: enrichment for email/IP/phone/device, listing and triaging events, understanding scores via stats and config, explaining individual verdicts, investigating entity history, and testing new events. There are no obvious missing operations for the stated purpose.

Maintenance

ActivityMaintained
ResponsivenessNo issues

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Connectors

Related MCP Servers

  • A
    license
    A
    quality
    C
    maintenance
    Scans suspicious messages, URLs, and text for scams inside any MCP-compatible AI assistant. No signup or API key needed for anonymous use.
    1
    57
    MIT
  • F
    license
    Not graded
    quality
    C
    maintenance
    Provides trust infrastructure for AI agents by enabling reputation lookup, website trust scanning, and identity verification via MCP tools.
    1
    -
  • F
    license
    Not graded
    quality
    D
    maintenance
    Provides real-time threat intelligence for AI agents, enabling checks on IPs, domains, URLs, hashes, CVEs, prompt-injection payloads, and malicious AI-skill/MCP-tool definitions against a free database of 890K+ IOCs.
    -
  • A
    license
    Not graded
    quality
    C
    maintenance
    Give your AI agents direct access to live honeypot threat intelligence. Look up attacker IPs, browse indicators of compromise (IOCs), inspect captured credentials and malware payloads, profile threat actors, and render a real-time global attack map — all from Claude, Cursor, or any MCP-compatible client.
    MIT