Fraud Event Tools

Overview

The fraud event tools list the Risk Center queue and confirm or resolve events by ID. They mirror REST /v1/fraud-events. All tools support response_format (markdown or json). responseFormat is accepted as an alias. List tools use limit and offset, not page.

There is no filter-scoped bulk. List a page, then confirm or resolve up to 100 IDs. Confirm rejects the referral and declines its commissions. Resolve clears a false positive and can restore an auto-blocked referral. Resolve does not undecline commissions.

Available Tools

Tool	Description	Permission
`affonso_list_fraud_events`	List Risk Center fraud events	`read:affiliates`
`affonso_confirm_fraud_events`	Confirm events as fraud	`write:affiliates`
`affonso_resolve_fraud_events`	Resolve events as a false positive	`write:affiliates`

Event Types

Type	Description
`SELF_REFERRAL`	Self-referral
`CROSS_PROGRAM_BAN`	Cross-program ban
`DUPLICATE_PAYOUT_METHOD`	Duplicate payout method
`SUSPICIOUS_EMAIL_DOMAIN`	Suspicious email domain
`BANNED_REFERRAL_SOURCE`	Banned referral source
`PAID_TRAFFIC`	Paid traffic
`BLOCKED_COUNTRY`	Blocked country

Event Statuses

Status	Description
`PENDING`	Open Risk Center queue item (default list filter)
`RESOLVED`	Cleared, confirmed, or auto-blocked

affonso_list_fraud_events

List Risk Center fraud events for your team. Same filters as GET /v1/fraud-events: status (default PENDING), event_type, search (referral or affiliate email/name), and limit/offset pagination.

Parameters

number

default:"20"

Number of results to return (max 100)

number

default:"0"

Number of results to skip

string

Case-insensitive match on referral email or affiliate name/email

string

Filter by fraud rule type: SELF_REFERRAL, CROSS_PROGRAM_BAN, DUPLICATE_PAYOUT_METHOD, SUSPICIOUS_EMAIL_DOMAIN, BANNED_REFERRAL_SOURCE, PAID_TRAFFIC, BLOCKED_COUNTRY

string

default:"PENDING"

Filter by status: PENDING (default) or RESOLVED

string

default:"markdown"

Response format: markdown or json. Also accepted as responseFormat.

Example Prompts

List pending fraud events
Show self-referral fraud events
Find fraud events for alice@example.com
List resolved fraud events with limit 20

Response

## Fraud events (1)
Pending: 4 · Reviewed: 2 · Auto-blocked: 1
Showing 1 of 4 (offset 0)

- `cmevent123abc` SELF_REFERRAL PENDING · Alice Partner · alice@example.com

{
  "data": [
    {
      "id": "cmevent123abc",
      "event_type": "SELF_REFERRAL",
      "status": "PENDING",
      "description": "Self-referral",
      "metadata": {
        "originalReferralStatus": "LEAD"
      },
      "internal_note": null,
      "resolution": null,
      "resolved_at": null,
      "resolved_note": null,
      "created_at": "2024-01-20T15:30:00.000Z",
      "referral_id": "ref_456def",
      "referral_email": "alice@example.com",
      "resolved_by": null,
      "affiliate": {
        "id": "aff_789ghi",
        "name": "Alice Partner",
        "email": "alice@example.com",
        "country": "US",
        "status": "ACTIVE",
        "total_fraud_events": 1,
        "pending_commission": 0
      },
      "program": {
        "id": "prog_123",
        "name": "Demo Program"
      }
    }
  ],
  "pagination": {
    "total": 4,
    "count": 1,
    "offset": 0,
    "limit": 20,
    "has_more": true,
    "next_offset": 1
  },
  "pending_count": 4,
  "resolved_count": 2,
  "auto_blocked_count": 1
}

affonso_confirm_fraud_events

This is a destructive, money-moving operation. Confirming marks CONFIRMED_FRAUD, rejects the referral, and declines its commissions to amount 0.

Confirm one or many fraud events. Same as POST /v1/fraud-events/confirm. Foreign-team IDs come back as not found. Use resolve for false positives.

Parameters

string[]

required

One or many fraud event IDs from affonso_list_fraud_events. Minimum 1, maximum 100.

string

Optional merchant note stored on the resolution. Maximum 2000 characters.

string

default:"markdown"

Response format: markdown or json. Also accepted as responseFormat.

Example Prompts

Confirm these fraud events as real fraud
Confirm fraud event cmevent123abc with note "Matched chargeback"
Mark these self-referral events as confirmed fraud

Response

## Confirm fraud
Processed 1 of 1. Failed: 0.

- `cmevent123abc` ok

{
  "success": true,
  "partial_success": false,
  "total_requested": 1,
  "processed": 1,
  "failed": 0,
  "results": [
    {
      "id": "cmevent123abc",
      "success": true
    }
  ]
}

affonso_resolve_fraud_events

Resolve one or many fraud events as a false positive. Same as POST /v1/fraud-events/resolve. Marks RESOLVED and restores an AUTO_BLOCKED referral to its original status (default LEAD). Does not undecline commissions. Already-reviewed (non-auto-blocked) events fail as already resolved.

Parameters

string[]

required

One or many fraud event IDs from affonso_list_fraud_events. Minimum 1, maximum 100.

string

Optional merchant note stored on the resolution. Maximum 2000 characters.

string

default:"markdown"

Response format: markdown or json. Also accepted as responseFormat.

Example Prompts

Resolve the self-referral events that are false positives
Resolve fraud event cmevent123abc
Clear these auto-blocked events as false positives

Response

## Resolve fraud
Processed 1 of 1. Failed: 0.

- `cmevent123abc` ok

{
  "success": true,
  "partial_success": false,
  "total_requested": 1,
  "processed": 1,
  "failed": 0,
  "results": [
    {
      "id": "cmevent123abc",
      "success": true
    }
  ]
}

Common Workflows

Drain the pending queue

"List pending fraud events"
"Confirm fraud event cmevent123abc"
"Resolve fraud event cmevent456def as a false positive"

Filter then act

"Show self-referral fraud events"
"Confirm these fraud events as real fraud"

Error Handling

Error	Cause	Solution
`NOT_FOUND`	Event ID does not exist on this team	Verify the ID from `affonso_list_fraud_events`
`ALREADY_RESOLVED`	Event is already reviewed	Skip it or list `PENDING` events only
`PERMISSION_DENIED`	Missing required scope	List needs `read:affiliates`. Confirm and resolve need `write:affiliates`.

Getting Started

Setup

Tools

Overview

Available Tools

Event Types

Event Statuses

affonso_list_fraud_events

Parameters

Example Prompts

Response

affonso_confirm_fraud_events

Parameters

Example Prompts

Response

affonso_resolve_fraud_events

Parameters

Example Prompts

Response

Common Workflows

Drain the pending queue

Filter then act

Error Handling

​Overview

​Available Tools

​Event Types

​Event Statuses

​affonso_list_fraud_events

​Parameters

​Example Prompts

​Response

​affonso_confirm_fraud_events

​Parameters

​Example Prompts

​Response

​affonso_resolve_fraud_events

​Parameters

​Example Prompts

​Response

​Common Workflows

​Drain the pending queue

​Filter then act

​Error Handling

Overview

Available Tools

Event Types

Event Statuses

affonso_list_fraud_events

Parameters

Example Prompts

Response

affonso_confirm_fraud_events

Parameters

Example Prompts

Response

affonso_resolve_fraud_events

Parameters

Example Prompts

Response

Common Workflows

Drain the pending queue

Filter then act

Error Handling