Mcp Clearsale

io.github.codesparPublished by GitHub account codesparv0.2.0-alpha.3Updated Oct 24, 2026

MCP server for ClearSale — Brazilian fraud prevention, order risk scoring, device fingerprinting

VerifiedSTDIODesktop onlyFinanceSecurity & MonitoringBusiness & Commerce

Overview

AI-generated overview

Lets an assistant submit orders to ClearSale for Brazilian fraud scoring, retrieve decisions, and manage related KYC and case workflows.

What you can do
Wraps the ClearSale antifraud API in 18 tools covering the analyze-decide-feedback cycle: send_order_for_analysis submits an order, get_order_analysis and get_order_score return its state and 0-100 risk score, and update_order_status reports the merchant's final decision. It also supports device fingerprint sessions, behavior event tracking, CPF/CNPJ and address validation, score lookups by document or contact, OTP/KBA challenges, chargeback notifications, and fraud investigation cases.
When to use it
Use it when an assistant needs to work with ClearSale fraud decisions for Brazilian ecommerce orders, for example to submit orders for analysis, poll or report order outcomes, or look up risk signals for a document or contact. It is aimed at merchants already contracted with ClearSale rather than general-purpose use.
Requirements
Runs locally over stdio via the npm package @codespar/mcp-clearsale (Node.js required; npx @codespar/mcp-clearsale). Needs a ClearSale-issued bearer token in CLEARSALE_API_KEY, and optionally CLEARSALE_BASE_URL, which defaults to the production API and can be pointed at a contract-issued staging URL. Network access to ClearSale is required; there is no public sandbox.
Before you install
The server holds a ClearSale bearer token in CLEARSALE_API_KEY, which grants access to order, payment, and customer data, so treat it as a sensitive secret. Several tools write to ClearSale or change order state, including send_order_for_analysis, update_order_status, resolve_manual_review, create_chargeback_notification, and the case tools. Order submissions and document or contact lookups send customer and order data to ClearSale, and challenge tools can send OTP messages to buyers.

Installation

In SourceWeft

  1. Open Mcp Clearsale in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

@codespar/mcp-clearsale

MCP server for ClearSale — Brazilian fraud prevention.

ClearSale pioneered fraud analytics in Brazil (founded 2001, São Paulo) and remains the default antifraud layer for most major BR ecommerce. This is the first entry in the CodeSpar fraud category — no other server in the catalog does fraud scoring. Future entries (Konduto, Legiti, Sift, Cybersource) will follow the same analyze → decide → feedback shape.

Tools (18)

ToolPurpose
send_order_for_analysisSubmit an order to ClearSale for fraud analysis.
get_order_analysisRetrieve the current analysis state of an order previously sent to ClearSale.
update_order_statusNotify ClearSale of the merchant's final decision on an order (APROVADO / CANCELADO / DEVOLVIDO).
list_ordersList orders submitted to ClearSale with optional filters.
create_chargeback_notificationReport a confirmed chargeback back to ClearSale.
get_order_scoreFetch only the fraud score (numeric 0-100) for an order.
create_device_fingerprint_sessionStart a device fingerprint session.
get_device_fingerprintRetrieve captured device characteristics for a fingerprint session (OS, browser, timezone, canvas/WebGL has...
resolve_manual_reviewManually resolve an order currently in EM_ANALISE by approving or declining it.
get_score_by_documentLook up the risk score and historical signals associated with a Brazilian document (CPF or CNPJ).
get_score_by_contactLook up the risk score for a contact identifier (email or phone).
validate_documentKYC: validate a CPF or CNPJ against Receita Federal.
validate_addressKYC: validate a Brazilian postal address against the Correios database.
track_behavior_eventLog a behavior signal (page view, login, signup, custom event) tied to a fingerprint session.
issue_challengeIssue an authentication challenge (OTP via SMS/email or KBA question) to a buyer.
validate_challenge_responseVerify a buyer's response to a challenge issued via issue_challenge.
create_caseOpen a fraud investigation case (e.g.
update_caseUpdate an existing fraud investigation case — change status, add notes, reassign, or attach more orders.

Install

bash
npm install @codespar/mcp-clearsale@alpha

Environment

bash
CLEARSALE_API_KEY="..."    # Bearer token issued by ClearSaleCLEARSALE_BASE_URL="..."   # Optional. Defaults to https://api.clearsale.com.br. Override per contract-issued staging URL.

Authentication

Server-side Bearer token:

Authorization: Bearer <CLEARSALE_API_KEY>

ClearSale issues the token via the developer portal or through your commercial contract. There is no public sandbox — staging URLs are provisioned per contract; override CLEARSALE_BASE_URL to point at it.

Typical flow

  1. On page load, the merchant calls create_device_fingerprint_session and embeds ClearSale's browser JS using the returned session_token.
  2. At checkout, the merchant calls send_order_for_analysis with the same session_id plus full order, payment, items, and billing/shipping data.
  3. The response carries a decision: APROVADO (ship it), REPROVADO (block), or EM_ANALISE (poll get_order_analysis or wait for a webhook).
  4. Once the order lifecycle completes, call update_order_status with the final merchant decision — this is required for ongoing model quality.
  5. If a chargeback arrives later, call create_chargeback_notification so ClearSale can tune its model.

Run

bash
# stdio (default — for Claude Desktop, Cursor, etc)npx @codespar/mcp-clearsale
# HTTP (for server-to-server testing)MCP_HTTP=true MCP_PORT=3000 npx @codespar/mcp-clearsale

Category

fraud — first server in this CodeSpar category. Fraud servers share a common shape (analyze → decide → feedback) distinct from payments, which makes cross-provider swaps (ClearSale ↔ Konduto ↔ Legiti) more straightforward than cross-acquirer swaps.

Enterprise

Need governance, budget limits, and audit trails for agent payments? CodeSpar Enterprise adds policy engine, payment routing, and compliance templates on top of these MCP servers.

License

MIT

Source: packages/fraud/clearsale/README.md at commit d0a519a

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v0.2.0-alpha.3LatestSep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts