Tool tree
gradeNot graded
traceFlowAction
Follow one suspicious transfer through the current local dataset. Return the accounts and money movements found within a bounded number of steps.
View tool JSON
{
"name": "traceFlow",
"kind": "act",
"impl": "imperative",
"description": "Follow one suspicious transfer through the current local dataset. Return the accounts and money movements found within a bounded number of steps.",
"inputSchema": {
"type": "object",
"properties": {
"transferId": {
"type": "string",
"pattern": "^[A-Za-z0-9][A-Za-z0-9._:-]{0,63}$"
},
"maxHops": {
"type": "integer",
"minimum": 1,
"maximum": 6
},
"direction": {
"type": "string",
"enum": [
"outbound",
"inbound",
"both"
]
}
},
"required": [
"transferId",
"maxHops",
"direction"
],
"additionalProperties": false
},
"page": "/ringlight/"
}expandAccountAction
Reveal the incoming and outgoing neighbors of one account so the visible money map can be investigated one step at a time.
View tool JSON
{
"name": "expandAccount",
"kind": "act",
"impl": "imperative",
"description": "Reveal the incoming and outgoing neighbors of one account so the visible money map can be investigated one step at a time.",
"inputSchema": {
"type": "object",
"properties": {
"accountId": {
"type": "string",
"pattern": "^[A-Za-z0-9][A-Za-z0-9._:-]{0,63}$"
},
"depth": {
"type": "integer",
"minimum": 1,
"maximum": 3
}
},
"required": [
"accountId",
"depth"
],
"additionalProperties": false
},
"page": "/ringlight/"
}scoreRiskAction
Calculate reproducible account risk from recent outgoing value, pass-through behavior, transfer speed, number of destinations, and circular money movement.
View tool JSON
{
"name": "scoreRisk",
"kind": "act",
"impl": "imperative",
"description": "Calculate reproducible account risk from recent outgoing value, pass-through behavior, transfer speed, number of destinations, and circular money movement.",
"inputSchema": {
"type": "object",
"properties": {
"accountIds": {
"type": "array",
"minItems": 1,
"maxItems": 50,
"uniqueItems": true,
"items": {
"type": "string",
"pattern": "^[A-Za-z0-9][A-Za-z0-9._:-]{0,63}$"
}
}
},
"required": [
"accountIds"
],
"additionalProperties": false
},
"page": "/ringlight/"
}detectRingAction
Find accounts that pass money around a closed loop, then verify the circular movement before identifying a suspicious linked network.
View tool JSON
{
"name": "detectRing",
"kind": "act",
"impl": "imperative",
"description": "Find accounts that pass money around a closed loop, then verify the circular movement before identifying a suspicious linked network.",
"inputSchema": {
"type": "object",
"properties": {
"seedAccountId": {
"type": "string",
"pattern": "^[A-Za-z0-9][A-Za-z0-9._:-]{0,63}$"
},
"minAccounts": {
"type": "integer",
"minimum": 2,
"maximum": 50
},
"timeWindowHours": {
"type": "integer",
"minimum": 1,
"maximum": 72
}
},
"required": [
"seedAccountId",
"minAccounts",
"timeWindowHours"
],
"additionalProperties": false
},
"page": "/ringlight/"
}dollariseExposureAction
Total each relevant transfer exactly once, compare it with the local baseline, and isolate unsettled outgoing money that can still be stopped.
View tool JSON
{
"name": "dollariseExposure",
"kind": "act",
"impl": "imperative",
"description": "Total each relevant transfer exactly once, compare it with the local baseline, and isolate unsettled outgoing money that can still be stopped.",
"inputSchema": {
"type": "object",
"properties": {
"ringId": {
"type": "string",
"pattern": "^[A-Za-z0-9][A-Za-z0-9._:-]{0,63}$"
},
"currency": {
"type": "string",
"enum": [
"USD"
]
}
},
"required": [
"ringId",
"currency"
],
"additionalProperties": false
},
"page": "/ringlight/"
}buildCaseTimelineAction
Assemble the flagged origin, layering bursts, circular returns, and cash-out attempts into a timestamped case record.
View tool JSON
{
"name": "buildCaseTimeline",
"kind": "act",
"impl": "imperative",
"description": "Assemble the flagged origin, layering bursts, circular returns, and cash-out attempts into a timestamped case record.",
"inputSchema": {
"type": "object",
"properties": {
"caseId": {
"type": "string",
"pattern": "^[A-Za-z0-9][A-Za-z0-9._:-]{0,63}$"
},
"includePendingExits": {
"type": "boolean"
}
},
"required": [
"caseId",
"includePendingExits"
],
"additionalProperties": false
},
"page": "/ringlight/"
}freezeAccountsAction
Freeze the exact detected account set and stop its pending outgoing transfers in local state. The call pauses for a person to approve the scope before anything changes.
View tool JSON
{
"name": "freezeAccounts",
"kind": "act",
"impl": "imperative",
"description": "Freeze the exact detected account set and stop its pending outgoing transfers in local state. The call pauses for a person to approve the scope before anything changes.",
"inputSchema": {
"type": "object",
"properties": {
"caseId": {
"type": "string",
"pattern": "^[A-Za-z0-9][A-Za-z0-9._:-]{0,63}$"
},
"accountIds": {
"type": "array",
"minItems": 1,
"maxItems": 50,
"uniqueItems": true,
"items": {
"type": "string",
"pattern": "^[A-Za-z0-9][A-Za-z0-9._:-]{0,63}$"
}
},
"reason": {
"type": "string",
"minLength": 12,
"maxLength": 180
}
},
"required": [
"caseId",
"accountIds",
"reason"
],
"additionalProperties": false
},
"page": "/ringlight/"
}fileSARreportAction
Create a local suspicious-activity report (SAR) draft from the linked network, money totals, freeze result, and call receipts. Nothing is submitted externally.
View tool JSON
{
"name": "fileSARreport",
"kind": "act",
"impl": "imperative",
"description": "Create a local suspicious-activity report (SAR) draft from the linked network, money totals, freeze result, and call receipts. Nothing is submitted externally.",
"inputSchema": {
"type": "object",
"properties": {
"caseId": {
"type": "string",
"pattern": "^[A-Za-z0-9][A-Za-z0-9._:-]{0,63}$"
},
"format": {
"type": "string",
"enum": [
"markdown",
"json"
]
},
"includeReceipts": {
"type": "boolean"
}
},
"required": [
"caseId",
"format",
"includeReceipts"
],
"additionalProperties": false
},
"page": "/ringlight/"
}notifyBankAction
Record a simulated handoff of the completed case package to a selected bank fraud desk. This creates a local notice only and requires a separate human approval.
View tool JSON
{
"name": "notifyBank",
"kind": "act",
"impl": "imperative",
"description": "Record a simulated handoff of the completed case package to a selected bank fraud desk. This creates a local notice only and requires a separate human approval.",
"inputSchema": {
"type": "object",
"properties": {
"caseId": {
"type": "string",
"pattern": "^[A-Za-z0-9][A-Za-z0-9._:-]{0,63}$"
},
"reportId": {
"type": "string",
"pattern": "^[A-Za-z0-9][A-Za-z0-9._:-]{0,63}$"
},
"destination": {
"type": "string",
"minLength": 3,
"maxLength": 80
}
},
"required": [
"caseId",
"reportId",
"destination"
],
"additionalProperties": false
},
"page": "/ringlight/"
}replayInvestigationAction
Replay the investigation receipts in order for the visible time scrubber without invoking handlers or repeating a freeze or notification.
View tool JSON
{
"name": "replayInvestigation",
"kind": "act",
"impl": "imperative",
"description": "Replay the investigation receipts in order for the visible time scrubber without invoking handlers or repeating a freeze or notification.",
"inputSchema": {
"type": "object",
"properties": {
"speed": {
"type": "string",
"enum": [
"instant",
"cinematic"
]
}
},
"required": [
"speed"
],
"additionalProperties": false
},
"page": "/ringlight/"
}