aml

com.oceanalt/amlVersion 0.7.7

Pre-payment checks for AI agents: sanctions and AML screening of payees, payment pages and requests.

Status

Responds911 msNov 14, 2026, 14:08 UTCAnswered our handshake without sign-in.

Registry data may be out of date

We could not refresh it, so this page shows the last copy.

Last checked: Nov 14, 2026, 14:08 UTC
Latency: 911 ms
Remotes responding: 1 of 1
Sign-in: No sign-in
Hosting: Hosted outside the EU (detected)
Registry data as of: Nov 14, 2026, 21:12 UTC

Data from the official MCP Registry, checked by run.zero. How we check

Connect

Streamable HTTP

https://oceanalt.com/api/mcpResponds911 msNov 14, 2026, 14:08 UTC

No sign-in

Claude Code

claude mcp add --transport http aml https://oceanalt.com/api/mcp

Claude Desktop and claude.ai

1
2
3

Settings > Connectors > Add custom connector
Name: aml
Remote MCP server URL: https://oceanalt.com/api/mcp

Cursor

{
  "mcpServers": {
    "aml": {
      "url": "https://oceanalt.com/api/mcp"
    }
  }
}

VS Code

code --add-mcp '{"name":"aml","type":"http","url":"https://oceanalt.com/api/mcp"}'

Streamable HTTP

npm: oceanalt-aml-mcp 0.7.7

Package only

npm (npx)

claude mcp add aml -- npx -y oceanalt-aml-mcp@0.7.7

Built your own server? run.zero hosts MCP servers on European infrastructure.

Host your own MCP server on run.zero

Tools

13 tools

Tools of aml
	Description		Read-only	Idempotent	Open world
`attest_control_baseline`File your operator's control-baseline attestation: it publishes what controls YOUR side runs, so payers can see it before settling with you. No account, no key, one call. Gaps are allowed and expected: answer false where a control is not in place and describe how you plan to close it in gapPlan. A filing with declared gaps still shows a payer which controls are in place. Control ids are those in the OceanAlt Agent Control Baseline. Only file for a party you are actually authorised to speak for.	File your operator's control-baseline attestation: it publishes what controls YOUR side runs, so payers can see it before settling with you. No account, no key, one call. Gaps are allowed and expected: answer false where a control is not in place and describe how you plan to close it in gapPlan. A filing with declared gaps still shows a payer which controls are in place. Control ids are those in the OceanAlt Agent Control Baseline. Only file for a party you are actually authorised to speak for.	No	No	Yes	Yes
`baseline_controls`Fetch the OceanAlt Agent Control Baseline: the list of controls an agent operator is expected to run before it is allowed to move money, each answerable yes or no. An attestation uses the control ids it returns. Each control carries which gate enforces it and why it exists.	Fetch the OceanAlt Agent Control Baseline: the list of controls an agent operator is expected to run before it is allowed to move money, each answerable yes or no. An attestation uses the control ids it returns. Each control carries which gate enforces it and why it exists.	No	Yes	Yes	No
`check_calldata_intent`Anti blind-signing. EVM: decodes what a transaction's calldata will actually do (ERC-20 transfer/approve/permit, setApprovalForAll, ownership transfer, native transfer). Solana: decodes a whole base64 transaction (SPL Token / Token-2022 Transfer, TransferChecked, Approve, SetAuthority, CloseAccount, Burn; System Transfer / Assign; ATA creation). Compares it with what you believe you are doing. EVM: pass intent:{action:'pay', to, amount} plus contract (the transaction's to) and data (hex calldata). Solana: pass network:'solana' and transaction (base64) instead of data. decision match = does what you declared; mismatch = different recipient/amount/asset, or an approval / authority change instead of a payment — do not sign; unknown = could not decode (including address-lookup-table accounts), which is not the same as safe.	Anti blind-signing. EVM: decodes what a transaction's calldata will actually do (ERC-20 transfer/approve/permit, setApprovalForAll, ownership transfer, native transfer). Solana: decodes a whole base64 transaction (SPL Token / Token-2022 Transfer, TransferChecked, Approve, SetAuthority, CloseAccount, Burn; System Transfer / Assign; ATA creation). Compares it with what you believe you are doing. EVM: pass intent:{action:'pay', to, amount} plus contract (the transaction's to) and data (hex calldata). Solana: pass network:'solana' and transaction (base64) instead of data. decision match = does what you declared; mismatch = different recipient/amount/asset, or an approval / authority change instead of a payment — do not sign; unknown = could not decode (including address-lookup-table accounts), which is not the same as safe.	No	Yes	Yes	No
`check_payment_request`Call this before paying because an email, invoice or chat message asked you to. Pass what you received: raw headers if you have them, the From line, subject and body (or body_html), and the payee address if you already extracted one. OceanAlt checks whether the sender is who it claims to be (SPF/DKIM/DMARC results, a display name that names another domain, Reply-To sent elsewhere), whether the sender domain or any link imitates a brand or is a known phishing host, whether the payee address is listed or differs from previous_pay_to, and whether the text pressures the reader, announces changed payment details, or carries instructions aimed at an AI. Returns allow \| review \| decline with findings. On decline, do not pay from this message; confirm through a channel you already trust. The text is processed in memory and not stored. Free, no API key.	Call this before paying because an email, invoice or chat message asked you to. Pass what you received: raw headers if you have them, the From line, subject and body (or body_html), and the payee address if you already extracted one. OceanAlt checks whether the sender is who it claims to be (SPF/DKIM/DMARC results, a display name that names another domain, Reply-To sent elsewhere), whether the sender domain or any link imitates a brand or is a known phishing host, whether the payee address is listed or differs from previous_pay_to, and whether the text pressures the reader, announces changed payment details, or carries instructions aimed at an AI. Returns allow \| review \| decline with findings. On decline, do not pay from this message; confirm through a channel you already trust. The text is processed in memory and not stored. Free, no API key.	No	Yes	Yes	Yes
`counterparty_control_baseline`Answers a different question from address screening. Screening asks whether an address is risky; this asks how much damage the agent on the other side could do if it were talked into something. Returns that party's self-attestation against the OceanAlt Agent Control Baseline, split into two sets that must NOT be conflated: verified_by_oceanalt (enforced by the gateway on every payment — provable) and self_claimed (what they state about their own side — NOT verified by OceanAlt). Most parties have not attested: found:false means no information, not a bad signal.	Answers a different question from address screening. Screening asks whether an address is risky; this asks how much damage the agent on the other side could do if it were talked into something. Returns that party's self-attestation against the OceanAlt Agent Control Baseline, split into two sets that must NOT be conflated: verified_by_oceanalt (enforced by the gateway on every payment — provable) and self_claimed (what they state about their own side — NOT verified by OceanAlt). Most parties have not attested: found:false means no information, not a bad signal.	No	Yes	Yes	Yes
`evidence_bundle`Use when you need a record you can keep or hand to someone else, for example when a reviewer, auditor or counterparty asks why a payment to this address was allowed or refused. Returns everything OceanAlt holds about an address as public facts, in one Ed25519-signed bundle you can verify offline: screening verdict with evidence and freshness, profile signals, one-hop relations to listed addresses, fulfillment receipt stats and coverage. The response includes the signature and the key URL (https://oceanalt.com/.well-known/oceanalt-keys.json) to verify it. A witness, not a prosecutor: no conclusions about people. It does not return a pay / do-not-pay decision. Same as GET https://oceanalt.com/api/evidence/bundle. Free, no API key.	Use when you need a record you can keep or hand to someone else, for example when a reviewer, auditor or counterparty asks why a payment to this address was allowed or refused. Returns everything OceanAlt holds about an address as public facts, in one Ed25519-signed bundle you can verify offline: screening verdict with evidence and freshness, profile signals, one-hop relations to listed addresses, fulfillment receipt stats and coverage. The response includes the signature and the key URL (https://oceanalt.com/.well-known/oceanalt-keys.json) to verify it. A witness, not a prosecutor: no conclusions about people. It does not return a pay / do-not-pay decision. Same as GET https://oceanalt.com/api/evidence/bundle. Free, no API key.	No	Yes	Yes	Yes
`payee_decide`The receiving side's check before settlement. Given the payee's registry id (sid) and, optionally, the payer, amount and purpose, returns accept / decline / hold_request_info / not_ready with reason codes, the fields to request, evidence and a signature. Rule-based, not a model's opinion. Same logic as POST https://oceanalt.com/api/payee/decide.	The receiving side's check before settlement. Given the payee's registry id (sid) and, optionally, the payer, amount and purpose, returns accept / decline / hold_request_info / not_ready with reason codes, the fields to request, evidence and a signature. Rule-based, not a model's opinion. Same logic as POST https://oceanalt.com/api/payee/decide.	No	Yes	Yes	No
`payment_decision`Call before sending funds, buying a service, settling an invoice or answering an x402 payment quote. Pass the payee address (to) and network to get allow \| review \| decline, evidence and retry semantics. Only an explicit allow passes this risk check; review, decline, missing or unknown decisions and errors are not permission to pay. This tool does not transfer funds or grant payment authorization. A signed receipt or attestation records the decision, including review; a valid signature does not turn review into approval or prove settlement. If a receipt is returned, its Ed25519 signature can be verified with the public key at https://oceanalt.com/.well-known/oceanalt-keys.json. Pass resource_url to check the origin's payment quote against the payee; a different payee or an unavailable check raises the decision to review. A match is not an endorsement of the seller. Free within the monthly allowance; no signup or key is required to start. Anonymous allowance exhaustion is an error, not a risk decision.	Call before sending funds, buying a service, settling an invoice or answering an x402 payment quote. Pass the payee address (to) and network to get allow \| review \| decline, evidence and retry semantics. Only an explicit allow passes this risk check; review, decline, missing or unknown decisions and errors are not permission to pay. This tool does not transfer funds or grant payment authorization. A signed receipt or attestation records the decision, including review; a valid signature does not turn review into approval or prove settlement. If a receipt is returned, its Ed25519 signature can be verified with the public key at https://oceanalt.com/.well-known/oceanalt-keys.json. Pass resource_url to check the origin's payment quote against the payee; a different payee or an unavailable check raises the decision to review. A match is not an endorsement of the seller. Free within the monthly allowance; no signup or key is required to start. Anonymous allowance exhaustion is an error, not a risk decision.	No	Yes	Yes	Yes
`recent_flagged`Return a representative sample of addresses on OceanAlt's reviewed risk list — OFAC-sanctioned, known mixers, and scam/phishing — each with its source category and reason. Takes no arguments. Free, no API key.	Return a representative sample of addresses on OceanAlt's reviewed risk list — OFAC-sanctioned, known mixers, and scam/phishing — each with its source category and reason. Takes no arguments. Free, no API key.	No	Yes	Not declared	Yes
`resolve_agent_identity`Use when another AI agent asks you to pay it, or wants to pay you, and you have its agent id: this tells you who is accountable for that agent. Resolves the chain agent -> principal -> mandate -> credential -> wallet. Each link reports whether it holds; completeness counts how many do (a factual count, not a score). Wherever the chain breaks is where accountability stops. Publication is opt-in and only posture is exposed (that a spending ceiling exists, never its value), so found:false means the agent has not published — absence of information, not a bad signal. This checks the agent, not the payee address. Free, no API key.	Use when another AI agent asks you to pay it, or wants to pay you, and you have its agent id: this tells you who is accountable for that agent. Resolves the chain agent -> principal -> mandate -> credential -> wallet. Each link reports whether it holds; completeness counts how many do (a factual count, not a score). Wherever the chain breaks is where accountability stops. Publication is opt-in and only posture is exposed (that a spending ceiling exists, never its value), so found:false means the agent has not published — absence of information, not a bad signal. This checks the agent, not the payee address. Free, no API key.	No	Yes	Yes	Yes
`screen_address`Run an AML compliance screen on a single blockchain address BEFORE paying or receiving from it — the pre-payment check on a counterparty. Checks OFAC sanctions, known mixers, scam and phishing lists, stablecoin issuer freezes, and on-chain heuristics. Returns a verdict (clear \| caution \| risky), a 0–100 risk score, a blocked flag, and the matching signals — receipts, not a black-box score. A clear verdict means nothing was found in the data OceanAlt holds; it is not a statement that the address is safe. Depth varies by chain (see coverage.chains at /.well-known/agent-capabilities). Supports EVM (0x…), Tron (T…), Solana, Bitcoin and XRP Ledger (r…); Monero, Bitcoin Cash, Litecoin (ltc1) and BNB Beacon (bnb1) by list matching only. Free, no API key.	Run an AML compliance screen on a single blockchain address BEFORE paying or receiving from it — the pre-payment check on a counterparty. Checks OFAC sanctions, known mixers, scam and phishing lists, stablecoin issuer freezes, and on-chain heuristics. Returns a verdict (clear \| caution \| risky), a 0–100 risk score, a blocked flag, and the matching signals — receipts, not a black-box score. A clear verdict means nothing was found in the data OceanAlt holds; it is not a statement that the address is safe. Depth varies by chain (see coverage.chains at /.well-known/agent-capabilities). Supports EVM (0x…), Tron (T…), Solana, Bitcoin and XRP Ledger (r…); Monero, Bitcoin Cash, Litecoin (ltc1) and BNB Beacon (bnb1) by list matching only. Free, no API key.	No	Yes	Yes	Yes
`screen_endpoint`Screen a payment ENDPOINT (URL or domain) before calling it — the half that address screening cannot answer. In x402 the agent discovers a URL first, receives a 402, and only then learns where to pay: if that endpoint is spoofed, the payee address it hands back is freshly generated and appears on no sanctions list. Checks the hostname and its parent domains against phishing-domain intelligence plus hostname shape signals (bare IP, punycode homograph, deep subdomain nesting, free hosting). Returns clear \| caution \| risky \| unknown with language-independent signal_keys. A clear verdict means no match was found, NOT that the endpoint is safe — freshly registered phishing hosts always precede any list. It does not check the payee address. Free, no API key.	Screen a payment ENDPOINT (URL or domain) before calling it — the half that address screening cannot answer. In x402 the agent discovers a URL first, receives a 402, and only then learns where to pay: if that endpoint is spoofed, the payee address it hands back is freshly generated and appears on no sanctions list. Checks the hostname and its parent domains against phishing-domain intelligence plus hostname shape signals (bare IP, punycode homograph, deep subdomain nesting, free hosting). Returns clear \| caution \| risky \| unknown with language-independent signal_keys. A clear verdict means no match was found, NOT that the endpoint is safe — freshly registered phishing hosts always precede any list. It does not check the payee address. Free, no API key.	No	Yes	Yes	Yes
`verify_payment_requirements`Before paying an x402 402 response, check that its payment requirements (payTo, amount, asset, network, resource) were signed by the seller and not altered in transit by a proxy, CDN, SDK or another tool. x402 v2 carries the requirements in the PAYMENT-REQUIRED response header (base64 JSON): pass either the decoded JSON or the raw base64 value as body. Optionally pass expect:{payTo, amount} — the address and amount you are about to pay — and the tool also checks they match what was signed. verified:false with reason_code no_signature means the seller does not sign (unprotected, not necessarily malicious); digest_mismatch or signature_invalid means the response was tampered with — do not pay.	Before paying an x402 402 response, check that its payment requirements (payTo, amount, asset, network, resource) were signed by the seller and not altered in transit by a proxy, CDN, SDK or another tool. x402 v2 carries the requirements in the PAYMENT-REQUIRED response header (base64 JSON): pass either the decoded JSON or the raw base64 value as body. Optionally pass expect:{payTo, amount} — the address and amount you are about to pay — and the tool also checks they match what was signed. verified:false with reason_code no_signature means the seller does not sign (unprotected, not necessarily malicious); digest_mismatch or signature_invalid means the response was tampered with — do not pay.	No	Yes	Yes	Yes

Details

Registry status: Active
Published: Nov 12, 2026
Updated: Nov 12, 2026
Website: https://oceanalt.com/en/api-docs⁠ (opens in a new tab)
Repository: https://github.com/OceanAlt666/oceanalt-aml-mcp⁠ (opens in a new tab)
Categories (suggested): SecuritySuggested categories are assigned automatically from the registry text and may be wrong. Verified operators can correct them.
GDPR: Not declared

Are you the operator? Claim this listing