MCP Konduto

Name: MCP Konduto
Author: codespar

by codesparversion 0.2.0-alpha.3i★ –iRuns on your computer

Registry nameio.github.codespar/mcp-konduto

Install

Overview

Description from the maker (original English)

MCP server for Konduto — Brazilian fraud prevention: order risk scoring, device intel, lists

PopNx MCP’s three pillars

These three are never merged into one score: opinions, measurements and popularity are different things.

User voiceiNo reviews yetReviews open together with accounts in a later step
Our basic checksi1 of 1 passedChecked from public information; code not scanned yet
UsageiNot measured yet★ –

What you can do with it

We have not written a plain-language summary for this one yet. Below are the facts we read from the registry.

Connection: Runs on your computer
Transport: stdio
Category: Other
You need to fill in: KONDUTO_API_KEY

Install

Pick the AI app you use, then copy the settings.

Before you install

Basic checks: 1 of 1 passed
Runs on your computer with your user’s permissions (files, network, apps).
You fill in yourself: KONDUTO_API_KEY, KONDUTO_BASE_URL

Values marked secret are keys to your account. Never share them or paste them into a chat.

You need

npmNode.js installed (for the npx command)

Which app do you use?

ClaudeClaude CodeCursorVS CodeChatGPT

Pick your app above. We remember it, so next time the button says “Install in …”.

Open Claude Desktop → Settings → Developer → Edit Config, and paste this into claude_desktop_config.json

{
  "mcpServers": {
    "konduto": {
      "command": "npx",
      "args": [
        "-y",
        "@codespar/mcp-konduto"
      ],
      "env": {
        "KONDUTO_API_KEY": "your-value",
        "KONDUTO_BASE_URL": "your-value"
      }
    }
  }
}

Run this in your terminal

claude mcp add konduto --env KONDUTO_API_KEY=your-value --env KONDUTO_BASE_URL=your-value -- npx -y @codespar/mcp-konduto

Fill in the empty values before running it.

Open in Cursor

Or copy the settings yourself

Paste into .cursor/mcp.json in your project, or ~/.cursor/mcp.json

{
  "mcpServers": {
    "konduto": {
      "command": "npx",
      "args": [
        "-y",
        "@codespar/mcp-konduto"
      ],
      "env": {
        "KONDUTO_API_KEY": "your-value",
        "KONDUTO_BASE_URL": "your-value"
      }
    }
  }
}

Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.

Open in VS Code

Or copy the settings yourself

Paste into .vscode/mcp.json in your project

{
  "servers": {
    "konduto": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@codespar/mcp-konduto"
      ],
      "env": {
        "KONDUTO_API_KEY": "your-value",
        "KONDUTO_BASE_URL": "your-value"
      }
    }
  }
}

Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.

This one runs on your computer, and ChatGPT can only connect to servers on the internet. Pick another app.

Your choice stays on this device in a cookie; no account needed.

Values you fill in

KONDUTO_API_KEY secret required env
Konduto API key (private key). Used as the Basic auth username with an empty password.
KONDUTO_BASE_URL env
Konduto API base URL. Defaults to https://api.konduto.com/v1.

These settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.

What it can do

Runs on your computer; the tool list appears in your AI app after you install it.

Basic checksi

We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 7, 2026

✓ Pass
Maker matches the repo
The registry name was verified with the GitHub account codespar, which owns the repo
… Not checked yet
Still maintained
We have not read this repo from GitHub yet
… Not checked yet
Has a licence
We have not read this repo from GitHub yet
– Not applicable
Endpoint responds
This one runs on your computer; there is no internet endpoint
– Not applicable
Sign-in with OAuth
Runs on your computer and uses local settings instead
… Not checked yet
No hidden instructions in tool descriptions
Runs on your computer; we can only read tool lists from internet endpoints

Compared with others in Otheri

More stars than 0% of the other 32599 servers in this category
Published to the registry more recently than 14% of the other 32599 servers in this category
Basic checks equal to or better than 100% of the other 32599 servers in this category

Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.

Common questions

Is MCP Konduto safe?

It passed 1 of 1 applicable basic checks. We have not read the code. Before adding a key or token, see what access the server asks for and use a key with only the permissions you need.

What keys or codes does it need?

You need to fill in: KONDUTO_API_KEY

Does it run on my computer or in the cloud?

It runs on your computer. Your AI app starts it when needed, and data does not pass through the maker’s servers (unless it calls an online service itself).

Is it still maintained?

The GitHub repo last changed –, and the latest version (0.2.0-alpha.3) reached the registry 5 months ago.

Which apps can use it?

Apps that support MCP, such as Claude Desktop, Claude Code, Cursor and VS Code. You also need Node.js on your computer.

What can I use instead?

In the same category: Spec Driven Development, Remote Desktop Commander, Zendesk

Alternatives

Servers in the same category from other makers, sorted by stars.

Reading a card:★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi

Spec Driven Development

by formulahendry

MCP Server that facilitates spec-driven development workflows, not just Vibe Coding.

Runs on your computer★ 440MITUpdated 14 months ago

Install

Remote Desktop Commander

by desktop-commander

Remote Desktop Commander: use files, terminal and processes on your own computers from any AI app.

Runs in the cloud★ 211Updated 2 days ago

Install

Zendesk

by pipeworx-io

Zendesk MCP Pack — tickets, users, organizations via OAuth.

Computer or cloudUpdated today

Install

README from the maker

Open the README

Copied from the maker’s repo as written. PopNx MCP has not reviewed or endorsed it. HTML, images and scripts are removed. Links lead off this site.

@codespar/mcp-konduto

MCP server for Konduto — Brazilian fraud prevention, API-first.

Second entry in the CodeSpar fraud category after @codespar/mcp-clearsale. Konduto sits alongside ClearSale as one of the two default antifraud layers BR merchants evaluate, and the two are often deployed in parallel for score comparison or failover.

Positioning vs. ClearSale

	ClearSale	Konduto
Founded	2001 (São Paulo)	2014 (São Paulo)
Strength	Larger chargeback history database	Behavioral device intelligence
Shape	ML scoring + manual review services	API-first, tighter surface, dev-oriented
Typical pairing	Default for large BR retail	Default for digital-native BR ecommerce

Merchants commonly run both in parallel: Konduto for the fast behavioral signal, ClearSale for the long-tail chargeback history. When one flags review and the other flags approved, the merchant routes the order to manual inspection.

Tools (18)

Tool	Purpose
`send_order_for_analysis`	Submit an order to Konduto for fraud analysis.
`get_order`	Retrieve the current analysis state of an order.
`update_order_status`	Notify Konduto of the merchant's final status for an order.
`report_chargeback`	Report a confirmed chargeback for an order.
`report_order_approved`	Report that an order was ultimately approved by the merchant.
`report_order_declined`	Report that an order was ultimately declined by the merchant.
`add_to_blocklist`	Add a value to the Konduto blocklist.
`query_blocklist`	Check whether a value is currently on the Konduto blocklist.
`update_blocklist_entry`	Update an existing blocklist entry — typically used to extend or shorten the expiration window (expires_at)...
`remove_from_blocklist`	Remove a value from the Konduto blocklist.
`add_to_allowlist`	Add a value to the Konduto allowlist (trusted).
`query_allowlist`	Check whether a value is currently on the Konduto allowlist.
`update_allowlist_entry`	Update an existing allowlist entry — typically to extend or shorten the expiration window.
`remove_from_allowlist`	Remove a value from the Konduto allowlist.
`add_to_reviewlist`	Add a value to the Konduto reviewlist.
`query_reviewlist`	Check whether a value is currently on the Konduto reviewlist.
`update_reviewlist_entry`	Update an existing reviewlist entry — typically to extend or shorten the expiration window without removing...
`remove_from_reviewlist`	Remove a value from the Konduto reviewlist.

Install

npm install @codespar/mcp-konduto@alpha

Environment

KONDUTO_API_KEY="T00000..."          # private key; required

KONDUTO_BASE_URL="..." # optional; defaults to https://api.konduto.com/v1

Authentication

HTTP Basic. The API key is the username; password is empty:

Authorization: Basic base64(KONDUTO_API_KEY + ":")

The server handles the base64 encoding — pass the raw key in KONDUTO_API_KEY.

Typical flow

Embed Konduto's browser JS SDK on the merchant checkout page. It captures a visitor id (behavioral + device signals).
At order submit, call send_order_for_analysis with the full order payload and the visitor id.
Act on the response: approved ships it, declined blocks it, review holds for manual inspection or a second signal from ClearSale.
Once the order lifecycle completes, call update_order_status with approved / canceled / fraud — this feeds Konduto's model.
When a chargeback is confirmed, call update_order_status with status fraud. This is Konduto's primary ML feedback channel (there is no separate /chargebacks endpoint in the public docs).
Use add_to_blocklist to permanently block specific emails / IPs / card BIN+last4 pairs observed in confirmed fraud.

Alpha note

This package is shipped as 0.1.0-alpha.1. Scope vs. the original brief:

Verified against docs.konduto.com:
POST /orders (send_order_for_analysis)
POST/GET/DELETE /blacklist/{type} (blocklist family)
/whitelist/{type} (allowlist) and /greylist/{type} (reviewlist), indexed under "APIs de Blocklist, Allowlist e Reviewlist"

Standard REST pattern, not separately indexed in the public reference (used by Konduto's official client libraries):
GET /orders/{id} (get_order)
PUT /orders/{id} (update_order_status)

Dropped — not documented publicly:
POST /disputes — no dispute submission endpoint on docs.konduto.com
POST /cards/analyze — no card-only pre-check endpoint documented
GET /visitors/{visitor_id} — visitor ids are referenced on the order (visitor field) but no public retrieval endpoint exists

Chargeback feedback is folded into update_order_status with status: fraud, which is Konduto's documented feedback channel.

Promote to 0.2.0 once the dropped endpoints are confirmed (via private docs or direct API response), or once Konduto publishes a broader public reference.

Run

# stdio (default — for Claude Desktop, Cursor, etc)

npx @codespar/mcp-konduto

HTTP (for server-to-server testing)

MCP_HTTP=true MCP_PORT=3000 npx @codespar/mcp-konduto

Enterprise

Need governance, budget limits, and audit trails for agent payments? CodeSpar Enterprise adds policy engine, payment routing, and compliance templates on top of these MCP servers.

License

MIT

MCP Konduto

Overview

PopNx MCP’s three pillars

What you can do with it

Install

Before you install

Values you fill in

What it can do

Basic checksi

Maker matches the repo

Still maintained

Has a licence

Endpoint responds

Sign-in with OAuth

No hidden instructions in tool descriptions

Compared with others in Otheri

Common questions

Alternatives

Spec Driven Development

Remote Desktop Commander

Zendesk

README from the maker

@codespar/mcp-konduto

Positioning vs. ClearSale

Tools (18)

Install

Environment

Authentication

Typical flow

Alpha note

Run

HTTP (for server-to-server testing)

Category

Enterprise

License