MCP Sift

Name: MCP Sift
Author: codespar

by codesparversion 0.2.0-alpha.3i★ 277 (Stars for the whole repo)iRuns on your computer

Registry nameio.github.codespar/mcp-sift

How to install

Overview

Description from the maker (original English)

MCP server for Sift — global ML fraud detection: real-time risk scoring, decisions, event ingestion

What you can do with it

We have not written a plain-language summary for this one yet. Below are the facts we read from the registry.

Connection: Runs on your computer
Transport: stdio
Category: Cybersecurity
You need to fill in: SIFT_API_KEY, SIFT_ACCOUNT_ID

Install

Pick the AI app you use, then copy the settings.

Passed 2/2 checks · Runs on your computer

First: which AI do you use?

ClaudeWeb · app · phoneChatGPTWebClaude CodeTerminalCursorCode editorVS CodeCode editorOtherOther apps

Pick your app and the steps appear below.

Works with Claude, with some setup first

You need a MCP Sift key (sign up on the maker’s site, may cost money) · Install Node.js on your computer first (one time) · Only the Claude desktop app (Windows or Mac), not the web or phone

Install Node.js
One time only; it works for every server that needs Node.js
Open the Node.js download page ↗
Done
Sign up and create a MCP Sift key
Open the maker’s site, sign up and create an API key for the next step. It may cost money.
How to get a key is in the maker’s README below
Done
Open the Claude desktop app’s settings file
SettingsDeveloperEdit Config
Done

Paste these settings and save the file

{
  "mcpServers": {
    "sift": {
      "command": "npx",
      "args": [
        "-y",
        "@codespar/mcp-sift"
      ],
      "env": {
        "SIFT_API_KEY": "your-value",
        "SIFT_ACCOUNT_ID": "your-value",
        "SIFT_BASE_URL": "your-value"
      }
    }
  }
}

Paste the key only into the app’s field, never into a chat or to anyone

Done

Quit Claude and open it again
Done
Try it
Use MCP Sift and tell me what you can do for me, then show me one thing
✓ If Claude says it is using MCP Sift or shows a MCP Sift tool in the answer, you are connected

Menu names checked against Anthropic’s help page on Nov 11, 2026 · your screen may differ slightly by app version

ChatGPT cannot connect MCP Sift yet

MCP Sift runs on your computer, but ChatGPT can only connect servers that run on the web

What you can do instead

A · Use an app that can connect MCP Sift

Steps for Claude →You need a MCP Sift key (sign up on the maker’s site, may cost money) · Install Node.js on your computer first (one time) · Only the Claude desktop app (Windows or Mac), not the web or phone
Steps for Claude Code →You need a MCP Sift key (sign up on the maker’s site, may cost money) · Install Node.js on your computer first (one time)
Steps for Cursor →You need a MCP Sift key (sign up on the maker’s site, may cost money) · Install Node.js on your computer first (one time)
Steps for VS Code →You need a MCP Sift key (sign up on the maker’s site, may cost money) · Install Node.js on your computer first (one time)

B · Others in Cybersecurity that work with ChatGPT

Picked from the most used in the same category, only ones that connect by address with no key

GitHits✓ ChatGPT
EchelonGraph CVE & Exposure✓ ChatGPT
GoSQLX✓ ChatGPT

Works with Claude Code, with some setup first

You need a MCP Sift key (sign up on the maker’s site, may cost money) · Install Node.js on your computer first (one time)

Install Node.js
One time only; it works for every server that needs Node.js
Open the Node.js download page ↗
Done
Sign up and create a MCP Sift key
Open the maker’s site, sign up and create an API key for the next step. It may cost money.
How to get a key is in the maker’s README below
Done
Open Terminal
Mac: press Command+Space and type Terminal · Windows: open PowerShell
Done
4
Paste this command and press Enter
```
claude mcp add sift --env SIFT_API_KEY=your-value --env SIFT_ACCOUNT_ID=your-value --env SIFT_BASE_URL=your-value -- npx -y @codespar/mcp-sift
```
Replace “your-value” with your key before pressing Enter
Paste the key only into the app’s field, never into a chat or to anyone
Done
Type /mcp in Claude Code
You should see MCP Sift listed as connected
Done
Try it
Use MCP Sift and tell me what you can do for me, then show me one thing
✓ If Claude Code says it is using MCP Sift or shows a MCP Sift tool in the answer, you are connected

Menu names checked against Anthropic’s help page on Nov 11, 2026 · your screen may differ slightly by app version

Works with Cursor, with some setup first

You need a MCP Sift key (sign up on the maker’s site, may cost money) · Install Node.js on your computer first (one time)

Install Node.js
One time only; it works for every server that needs Node.js
Open the Node.js download page ↗
Done
Sign up and create a MCP Sift key
Open the maker’s site, sign up and create an API key for the next step. It may cost money.
How to get a key is in the maker’s README below
Done
Click this button to open Cursor
Open in Cursor
Cursor asks you to confirm; click Install
Done
Fill in your key
In the MCP Sift settings, SIFT_API_KEY, SIFT_ACCOUNT_ID, SIFT_BASE_URL is empty; add your key and save
Paste the key only into the app’s field, never into a chat or to anyone
Done
Open the AI chat in Cursor in Agent mode
Done
Try it
Use MCP Sift and tell me what you can do for me, then show me one thing
✓ If Cursor says it is using MCP Sift or shows a MCP Sift tool in the answer, you are connected

Menu names checked against Cursor’s help page on Nov 11, 2026 · your screen may differ slightly by app version

Works with VS Code, with some setup first

You need a MCP Sift key (sign up on the maker’s site, may cost money) · Install Node.js on your computer first (one time)

Install Node.js
One time only; it works for every server that needs Node.js
Open the Node.js download page ↗
Done
Sign up and create a MCP Sift key
Open the maker’s site, sign up and create an API key for the next step. It may cost money.
How to get a key is in the maker’s README below
Done
Click this button to open VS Code
Open in VS Code
VS Code asks you to confirm; click Install
Done
Fill in your key
In the MCP Sift settings, SIFT_API_KEY, SIFT_ACCOUNT_ID, SIFT_BASE_URL is empty; add your key and save
Paste the key only into the app’s field, never into a chat or to anyone
Done
Open the AI chat in VS Code in Agent mode
Done
Try it
Use MCP Sift and tell me what you can do for me, then show me one thing
✓ If VS Code says it is using MCP Sift or shows a MCP Sift tool in the answer, you are connected

Menu names checked against VS Code’s help page on Nov 11, 2026 · your screen may differ slightly by app version

Other apps that use MCP, such as Windsurf, Zed or Gemini CLI, each add servers differently. See how in the app list.

See every app that uses MCP →

JSON settings are under “For developers” below

Stuck? Ask people who use MCP Sift💬 Discussion →

For developers: Terminal commands and JSON settings

Installed on your computer

Claude Code

claude mcp add sift --env SIFT_API_KEY=your-value --env SIFT_ACCOUNT_ID=your-value --env SIFT_BASE_URL=your-value -- npx -y @codespar/mcp-sift

Claude Desktop (claude_desktop_config.json)

{
  "mcpServers": {
    "sift": {
      "command": "npx",
      "args": [
        "-y",
        "@codespar/mcp-sift"
      ],
      "env": {
        "SIFT_API_KEY": "your-value",
        "SIFT_ACCOUNT_ID": "your-value",
        "SIFT_BASE_URL": "your-value"
      }
    }
  }
}

Cursor (~/.cursor/mcp.json)

{
  "mcpServers": {
    "sift": {
      "command": "npx",
      "args": [
        "-y",
        "@codespar/mcp-sift"
      ],
      "env": {
        "SIFT_API_KEY": "your-value",
        "SIFT_ACCOUNT_ID": "your-value",
        "SIFT_BASE_URL": "your-value"
      }
    }
  }
}

VS Code (mcp.json)

{
  "servers": {
    "sift": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@codespar/mcp-sift"
      ],
      "env": {
        "SIFT_API_KEY": "your-value",
        "SIFT_ACCOUNT_ID": "your-value",
        "SIFT_BASE_URL": "your-value"
      }
    }
  }
}

Values you fill in

SIFT_API_KEY secret required env
Sift API key. Used in the Events API request body ($api_key) and as the HTTP Basic auth username (empty password) for Score + Decisions APIs.
SIFT_ACCOUNT_ID required env
Sift Account ID. Required for all Decisions API v3 endpoints (path segment /v3/accounts/{account_id}/...).
SIFT_BASE_URL env
Sift API base URL. Defaults to https://api.sift.com.

These settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.

At a glance

GitHub stars i: 277 (Stars for the whole repo)
This repo holds several MCP listings; its stars count once in rankings
Downloads per weeki: 44/wk
Licence i: No licence stated
Connection: Runs on your computer
Transport: stdio
Latest versioni: 0.2.0-alpha.3
Categoryi: Cybersecurity
Published to registryi: Jun 23, 2026
Code last changedi: Sep 27, 2026
Maker: codespar
Packages: npm: @codespar/mcp-sift
Repo: codespar/mcp-dev-latam
Registry status: Active

Which apps can use it

Based on how this server connects and on each app’s own docs, checked Nov 10, 2026.

Run on your computer in

Claude Goose LM Studio Msty Studio Cherry Studio Cursor VS Code + GitHub Copilot Visual Studio Windsurf (Devin Desktop)Zed Kiro Cline Continue JetBrains AI Assistant Claude Code Codex CLI Gemini CLI OpenCode nodecode Warp LibreChat Raycast

All apps, with pros and cons →

What it can do

Runs on your computer; the tool list appears in your AI app after you install it.

Basic checksi

We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 11, 2026

✓ Pass
Maker matches the repo
The registry name was verified with the GitHub account codespar, which owns the repo
✓ Pass
Still maintained
Code last changed last month
… Not checked yet
Has a licence
We have not read this repo from GitHub yet
– Not applicable
Endpoint responds
This one runs on your computer; there is no internet endpoint
– Not applicable
Sign-in with OAuth
Runs on your computer and uses local settings instead
… Not checked yet
No hidden instructions in tool descriptions
Runs on your computer; we can only read tool lists from internet endpoints

Discussion

Ask, share a tip or report that it does not work. Sorted by what people marked helpful.

No posts yet. Be the first to ask or share.

Posts here are written by users, not the PopNx team.

User reviews

No reviews yet

Compared with others in Cybersecurityi

More stars than 0% of the other 1030 servers in this category
Published to the registry more recently than 22% of the other 1030 servers in this category
Basic checks equal to or better than 100% of the other 1030 servers in this category

Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.

Common questions

Is MCP Sift safe?

It passed 2 of 2 applicable basic checks. We have not read the code. Before adding a key or token, see what access the server asks for and use a key with only the permissions you need.

What keys or codes does it need?

You need to fill in: SIFT_API_KEY, SIFT_ACCOUNT_ID

Does it run on my computer or in the cloud?

It runs on your computer. Your AI app starts it when needed, and data does not pass through the maker’s servers (unless it calls an online service itself).

Is it still maintained?

The GitHub repo last changed last month, and the latest version (0.2.0-alpha.3) reached the registry 5 months ago.

Which apps can use it?

Apps that support MCP, such as Claude Desktop, Claude Code, Cursor and VS Code. You also need Node.js on your computer.

What can I use instead?

In the same category: Robin: AI-Powered Dark Web OSINT, HOL Guard, UniFi Network MCP

Alternatives

Servers in the same category from other makers, sorted by stars.

Reading a card:↓ Downloads per weeki★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi

Robin: AI-Powered Dark Web OSINT

Dark web OSINT over Tor: search onion engines, scrape pages, report with your own model.

by apurvsinghgautamGrowing★ 8KUpdated 39 days ago

Runs on your computer

Install

HOL Guard

Local-first AI agent security evidence and approval workflows through HOL Guard's stdio MCP server.

by hashgraph-onlineWidely used↓ 7.1K/wk★ 1.1KUpdated 6 days ago

Runs on your computer

Install

UniFi Network MCP

Manage UniFi Network devices, clients, firewall, VLANs, VPNs, and more via MCP.

by sirkirbyWidely used↓ 11.3K/wk★ 1K Stars for the whole repoUpdated 8 months ago

Runs on your computer

Install

README from the maker

Open the README

Copied from the maker’s repo as written. PopNx MCP has not reviewed or endorsed it. HTML, images and scripts are removed. Links lead off this site.

@codespar/mcp-sift

MCP server for Sift — global enterprise ML-based fraud detection.

Third entry in the CodeSpar fraud category after @codespar/mcp-clearsale and @codespar/mcp-konduto. Sift is the global / enterprise counterpart to the two BR-native antifraud servers.

Positioning

	ClearSale	Konduto	Sift
Geography	Brazil	Brazil	Global (US-HQ, ~30 countries)
Founded	2001	2014	2011
Strength	Chargeback history db	Behavioral device intelligence	Multi-abuse-type ML + workflow decisions
Shape	Score + manual review	API-first, tight surface	Event stream in, scores + decisions out
Scope	Order fraud	Order fraud	Payment, account, content, promotion abuse

Also distinct from @codespar/mcp-jumio, which is global KYC / identity verification — a different layer than fraud scoring.

Sift's API shape

Sift is built around three APIs that work together:

Events API (/v205/events) — you POST every interesting signal (account creation, login, order, chargeback, ...) as a $-prefixed event.
Score API (/v205/users/{user_id}/score) — you GET the latest ML score for a user, or POST to force a rescore. Scores are floats in [0, 1] per abuse type (payment_abuse, account_abuse, content_abuse, promotion_abuse).
Decisions API v3 (/v3/accounts/{account_id}/...) — workflows in the Sift console turn scores into Decisions (block_user_payment_abuse, approve_order_payment_abuse, etc). You can apply a decision directly, read the current decisions on a user/order, or fetch the status of a workflow run.

Tools (20)

Tool	Purpose
`send_event`	Send a fraud signal to Sift's Events API (POST /v205/events).
`get_user_score`	Fetch the latest Sift score(s) for a user (GET /v205/users/{user_id}/score).
`rescore_user`	Force Sift to recompute a user's score right now (POST /v205/users/{user_id}/score).
`label_user`	Label a user as fraud or not-fraud via the legacy Labels API (POST /v205/users/{user_id}/labels).
`unlabel_user`	Remove any existing label on a user (DELETE /v205/users/{user_id}/labels).
`apply_decision_to_user`	Apply a workflow Decision to a user (POST /v3/accounts/{account_id}/users/{user_id}/decisions).
`apply_decision_to_order`	Apply a workflow Decision to a specific order (POST /v3/accounts/{account_id}/users/{user_id}/orders/{order...
`get_user_decisions`	Fetch the decisions currently applied to a user (GET /v3/accounts/{account_id}/users/{user_id}/decisions).
`get_order_decisions`	Fetch the decisions currently applied to an order (GET /v3/accounts/{account_id}/orders/{order_id}/decisions).
`get_workflow_run`	Fetch the status of a Sift Workflow run (GET /v3/accounts/{account_id}/workflows/runs/{run_id}).
`send_chargeback`	Send a $chargeback event to Sift's Events API (POST /v205/events).
`send_login`	Send a $login event to Sift's Events API (POST /v205/events).
`send_logout`	Send a $logout event to Sift's Events API (POST /v205/events).
`send_content_status`	Send a $content_status event to Sift's Events API (POST /v205/events).
`link_session_to_user`	Send a $link_session_to_user event to Sift's Events API (POST /v205/events).
`send_custom_event`	Send a custom (merchant-defined) event to Sift's Events API (POST /v205/events).
`apply_decision_to_session`	Apply a workflow Decision to a session (POST /v3/accounts/{account_id}/users/{user_id}/sessions/{session_id...
`apply_decision_to_content`	Apply a workflow Decision to a content item (POST /v3/accounts/{account_id}/users/{user_id}/content/{conten...
`get_session_decisions`	Fetch the decisions currently applied to a session (GET /v3/accounts/{account_id}/users/{user_id}/sessions/...
`get_content_decisions`	Fetch the decisions currently applied to a content item (GET /v3/accounts/{account_id}/users/{user_id}/cont...

Install

npm install @codespar/mcp-sift@alpha

Environment

SIFT_API_KEY="..."         # required, secret

SIFT_ACCOUNT_ID="..." # required for all Decisions API v3 calls SIFT_BASE_URL="..." # optional; defaults to https://api.sift.com

Authentication

Events API — $api_key is injected into the JSON body. The server handles this automatically.
Score API + Decisions API v3 — HTTP Basic, API key as username, empty password. The server handles the base64 encoding.

Pass the raw key in SIFT_API_KEY.

Typical flow

Instrument your app: every signup, login, profile update, order, and chargeback becomes a send_event call with the right $type.
On high-stakes moments (checkout, withdrawal), call send_event with return_score: true to get an inline decision.
Or poll get_user_score / get_order_decisions asynchronously after a workflow run completes.
For manual review outcomes, call apply_decision_to_user or apply_decision_to_order with a Decision ID configured in the Sift console and source: "MANUAL_REVIEW".
When a chargeback is confirmed, send a $chargeback event AND either apply_decision_to_user with a Block decision or label_user with is_bad: true, abuse_type: "payment_abuse". Decisions are preferred for new integrations; Labels are kept for backward compatibility.

Alpha note

Shipped as 0.1.0-alpha.1. All endpoint paths are verified against Sift's official Ruby SDK (SiftScience/sift-ruby): rest_api_path, user_score_api_path, users_label_api_path, user_decisions_api_path, order_decisions_api_path, workflow_status_path, and the Decision ApplyTo path builder.

Scope vs. the original brief:

Shipped & verified: send_event, get_user_score, rescore_user, label_user, unlabel_user, apply_decision_to_user, apply_decision_to_order, get_user_decisions, get_order_decisions, get_workflow_run.
Dropped — not in the public SDK:
get_session_score (/v205/sessions/{session_id}/score) — no equivalent helper in the Ruby SDK; session-level scoring in Sift flows through session-level Decisions and Workflow runs, not a dedicated score endpoint.
list_workflow_runs (GET /v3/accounts/{account_id}/workflows/runs) — only GET /{run_id} is implemented in the public SDK. In practice, Sift surfaces run_ids in event responses rather than via a list endpoint.
get_psychology_score — no such endpoint in the public SDK.

The developers.sift.com reference pages gate deep-link URLs (403 on several paths), so we used the official SDK as the source of truth. Promote to 0.1.0 once a customer confirms (or denies) the dropped endpoints against the full Decisions / Score API reference in Sift's admin console.

Run

# stdio (default — for Claude Desktop, Cursor, etc)

npx @codespar/mcp-sift

HTTP (for server-to-server testing)

MCP_HTTP=true MCP_PORT=3000 npx @codespar/mcp-sift

Enterprise

Need governance, budget limits, and audit trails for agent payments? CodeSpar Enterprise adds policy engine, payment routing, and compliance templates on top of these MCP servers.

License

MIT

MCP Sift

Overview

What you can do with it

Install

Install Node.js

Sign up and create a MCP Sift key

Open the Claude desktop app’s settings file

Paste these settings and save the file

Quit Claude and open it again

Try it

What you can do instead

Install Node.js

Sign up and create a MCP Sift key

Open Terminal

Paste this command and press Enter

Type /mcp in Claude Code

Try it

Install Node.js

Sign up and create a MCP Sift key

Click this button to open Cursor

Fill in your key

Open the AI chat in Cursor in Agent mode

Try it

Install Node.js

Sign up and create a MCP Sift key

Click this button to open VS Code

Fill in your key

Open the AI chat in VS Code in Agent mode

Try it

Installed on your computer

Values you fill in

At a glance

Which apps can use it

Related guides

What it can do

Basic checksi

Maker matches the repo

Still maintained

Has a licence

Endpoint responds

Sign-in with OAuth

No hidden instructions in tool descriptions

Discussion

User reviews

Compared with others in Cybersecurityi

Common questions

Alternatives

Robin: AI-Powered Dark Web OSINT

HOL Guard

UniFi Network MCP

README from the maker

@codespar/mcp-sift

Positioning

Sift's API shape

Tools (20)

Install

Environment

Authentication

Typical flow

Alpha note

Run

HTTP (for server-to-server testing)

Category

Enterprise

License