Spec Driven Development
MCP Server that facilitates spec-driven development workflows, not just Vibe Coding.
Description from the maker (original English)
MCP server for ClearSale — Brazilian fraud prevention, order risk scoring, device fingerprinting
These three are never merged into one score: opinions, measurements and popularity are different things.
We have not written a plain-language summary for this one yet. Below are the facts we read from the registry.
Pick the AI app you use, then copy the settings.
CLEARSALE_API_KEY, CLEARSALE_BASE_URLValues marked secret are keys to your account. Never share them or paste them into a chat.
You need
Which app do you use?
Pick your app above. We remember it, so next time the button says “Install in …”.
Open Claude Desktop → Settings → Developer → Edit Config, and paste this into claude_desktop_config.json
{
"mcpServers": {
"clearsale": {
"command": "npx",
"args": [
"-y",
"@codespar/mcp-clearsale"
],
"env": {
"CLEARSALE_API_KEY": "your-value",
"CLEARSALE_BASE_URL": "your-value"
}
}
}
}Run this in your terminal
claude mcp add clearsale --env CLEARSALE_API_KEY=your-value --env CLEARSALE_BASE_URL=your-value -- npx -y @codespar/mcp-clearsaleFill in the empty values before running it.
Paste into .cursor/mcp.json in your project, or ~/.cursor/mcp.json
{
"mcpServers": {
"clearsale": {
"command": "npx",
"args": [
"-y",
"@codespar/mcp-clearsale"
],
"env": {
"CLEARSALE_API_KEY": "your-value",
"CLEARSALE_BASE_URL": "your-value"
}
}
}
}Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.
Paste into .vscode/mcp.json in your project
{
"servers": {
"clearsale": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@codespar/mcp-clearsale"
],
"env": {
"CLEARSALE_API_KEY": "your-value",
"CLEARSALE_BASE_URL": "your-value"
}
}
}
}Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.
This one runs on your computer, and ChatGPT can only connect to servers on the internet. Pick another app.
Your choice stays on this device in a cookie; no account needed.
CLEARSALE_BASE_URL envThese settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.
Runs on your computer; the tool list appears in your AI app after you install it.
We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 6, 2026
The registry name was verified with the GitHub account codespar, which owns the repo
We have not read this repo from GitHub yet
We have not read this repo from GitHub yet
This one runs on your computer; there is no internet endpoint
Runs on your computer and uses local settings instead
Runs on your computer; we can only read tool lists from internet endpoints
Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.
It passed 1 of 1 applicable basic checks. We have not read the code. Before adding a key or token, see what access the server asks for and use a key with only the permissions you need.
You need to fill in: CLEARSALE_API_KEY
It runs on your computer. Your AI app starts it when needed, and data does not pass through the maker’s servers (unless it calls an online service itself).
The GitHub repo last changed –, and the latest version (0.2.0-alpha.3) reached the registry 5 months ago.
Apps that support MCP, such as Claude Desktop, Claude Code, Cursor and VS Code. You also need Node.js on your computer.
In the same category: Spec Driven Development, Remote Desktop Commander, Reelsaw
Servers in the same category from other makers, sorted by stars.
Reading a card:★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi
MCP Server that facilitates spec-driven development workflows, not just Vibe Coding.
Remote Desktop Commander: use files, terminal and processes on your own computers from any AI app.
Drive a self-hosted Reelsaw: turn long videos into vertical clips, edit, re-render and export them.
Copied from the maker’s repo as written. PopNx MCP has not reviewed or endorsed it. HTML, images and scripts are removed. Links lead off this site.
MCP server for ClearSale — Brazilian fraud prevention.
ClearSale pioneered fraud analytics in Brazil (founded 2001, São Paulo) and remains the default antifraud layer for most major BR ecommerce. This is the first entry in the CodeSpar fraud category — no other server in the catalog does fraud scoring. Future entries (Konduto, Legiti, Sift, Cybersource) will follow the same analyze → decide → feedback shape.
| Tool | Purpose |
|---|---|
send_order_for_analysis | Submit an order to ClearSale for fraud analysis. |
get_order_analysis | Retrieve the current analysis state of an order previously sent to ClearSale. |
update_order_status | Notify ClearSale of the merchant's final decision on an order (APROVADO / CANCELADO / DEVOLVIDO). |
list_orders | List orders submitted to ClearSale with optional filters. |
create_chargeback_notification | Report a confirmed chargeback back to ClearSale. |
get_order_score | Fetch only the fraud score (numeric 0-100) for an order. |
create_device_fingerprint_session | Start a device fingerprint session. |
get_device_fingerprint | Retrieve captured device characteristics for a fingerprint session (OS, browser, timezone, canvas/WebGL has... |
resolve_manual_review | Manually resolve an order currently in EM_ANALISE by approving or declining it. |
get_score_by_document | Look up the risk score and historical signals associated with a Brazilian document (CPF or CNPJ). |
get_score_by_contact | Look up the risk score for a contact identifier (email or phone). |
validate_document | KYC: validate a CPF or CNPJ against Receita Federal. |
validate_address | KYC: validate a Brazilian postal address against the Correios database. |
track_behavior_event | Log a behavior signal (page view, login, signup, custom event) tied to a fingerprint session. |
issue_challenge | Issue an authentication challenge (OTP via SMS/email or KBA question) to a buyer. |
validate_challenge_response | Verify a buyer's response to a challenge issued via issue_challenge. |
create_case | Open a fraud investigation case (e.g. |
update_case | Update an existing fraud investigation case — change status, add notes, reassign, or attach more orders. |
npm install @codespar/mcp-clearsale@alpha
CLEARSALE_API_KEY="..." # Bearer token issued by ClearSale
CLEARSALE_BASE_URL="..." # Optional. Defaults to https://api.clearsale.com.br. Override per contract-issued staging URL.
Server-side Bearer token:
Authorization: Bearer <CLEARSALE_API_KEY>
ClearSale issues the token via the developer portal or through your commercial contract. There is no public sandbox — staging URLs are provisioned per contract; override CLEARSALE_BASE_URL to point at it.
create_device_fingerprint_session and embeds ClearSale's browser JS using the returned session_token.send_order_for_analysis with the same session_id plus full order, payment, items, and billing/shipping data.APROVADO (ship it), REPROVADO (block), or EM_ANALISE (poll get_order_analysis or wait for a webhook).update_order_status with the final merchant decision — this is required for ongoing model quality.create_chargeback_notification so ClearSale can tune its model.# stdio (default — for Claude Desktop, Cursor, etc)
npx @codespar/mcp-clearsale
MCP_HTTP=true MCP_PORT=3000 npx @codespar/mcp-clearsale
fraud — first server in this CodeSpar category. Fraud servers share a common shape (analyze → decide → feedback) distinct from payments, which makes cross-provider swaps (ClearSale ↔ Konduto ↔ Legiti) more straightforward than cross-acquirer swaps.
Need governance, budget limits, and audit trails for agent payments? CodeSpar Enterprise adds policy engine, payment routing, and compliance templates on top of these MCP servers.
MIT