com.oceanalt/aml

{
  "mcpServers": {
    "com-oceanalt-aml": {
      "type": "http",
      "url": "https://oceanalt.com/api/mcp"
    }
  }
}

{
  "server": {
    "name": "com.oceanalt/aml",
    "title": "com.oceanalt/aml",
    "url": "https://oceanalt.com/api/mcp",
    "transport": "streamable-http",
    "topics": [
      "OSINT"
    ],
    "repository": "https://github.com/OceanAlt666/oceanalt-aml-mcp",
    "website": "https://oceanalt.com/en/api-docs",
    "inRegistry": true
  },
  "audit": {
    "slug": "com-oceanalt-aml",
    "url": "https://oceanalt.com/api/mcp",
    "auditedAt": "2026-11-13T16:25:34.248Z",
    "firstAuditedAt": "2026-11-13T15:56:52.819Z",
    "auditor": "1.0.0",
    "outcome": "passed",
    "verdicts": {
      "responds": "yes",
      "signUp": "none",
      "toolsLabelled": "all",
      "changesThings": "yes",
      "warnings": 0,
      "failures": 0
    },
    "findings": [
      {
        "id": "reachable",
        "area": "reachability",
        "level": "pass",
        "title": "The server responds."
      },
      {
        "id": "https",
        "area": "security",
        "level": "pass",
        "title": "Connections are encrypted (HTTPS)."
      },
      {
        "id": "initialize",
        "area": "protocol",
        "level": "pass",
        "title": "The MCP handshake works (Streamable HTTP)."
      },
      {
        "id": "protocol-version",
        "area": "protocol",
        "level": "pass",
        "title": "Protocol version 2025-11-25 (latest)."
      },
      {
        "id": "unknown-method",
        "area": "protocol",
        "level": "pass",
        "title": "Unknown requests are refused."
      },
      {
        "id": "tools-list",
        "area": "tools",
        "level": "pass",
        "title": "13 tools listed."
      },
      {
        "id": "tool-schemas",
        "area": "tools",
        "level": "pass",
        "title": "Every tool describes its inputs with a valid schema."
      },
      {
        "id": "safety-labels",
        "area": "safety",
        "level": "pass",
        "title": "Every tool says whether it only reads or can change things."
      },
      {
        "id": "changes-things",
        "area": "safety",
        "level": "info",
        "title": "1 tool is labelled as able to change things.",
        "detail": "Expected for tools that send, write or buy. Your AI client should ask before calling them.",
        "evidence": [
          "attest_control_baseline"
        ]
      },
      {
        "id": "tool-poisoning",
        "area": "security",
        "level": "pass",
        "title": "No hidden instructions found in tool text."
      }
    ],
    "server": {
      "name": "oceanalt-aml",
      "version": "0.7.7",
      "title": "OceanAlt AML",
      "protocolVersion": "2025-11-25",
      "transport": "streamable-http"
    },
    "toolCount": 13,
    "toolsHash": "e84e67dd9bdd9cbe7502361bbf5d65be602601f302e3200257c9b202f35ec6f1",
    "latencyMs": 988,
    "history": [
      {
        "date": "2026-11-13",
        "outcome": "passed",
        "tools": 13
      }
    ]
  },
  "tools": [
    {
      "name": "payment_decision",
      "title": "Call before every payment: allow, review or decline (free, no API key)",
      "readOnly": true,
      "destructive": false,
      "openWorld": true,
      "description": "Call before sending funds, buying a service, settling an invoice or answering an x402 payment quote. Pass the payee address (to) and network to get allow | review | decline, evidence and retry semant…"
    },
    {
      "name": "screen_address",
      "title": "Screen a payee address for AML risk (free)",
      "readOnly": true,
      "destructive": false,
      "openWorld": true,
      "description": "Run an AML compliance screen on a single blockchain address BEFORE paying or receiving from it — the pre-payment check on a counterparty. Checks OFAC sanctions, known mixers, scam and phishing lists,…"
    },
    {
      "name": "screen_endpoint",
      "title": "Screen a payment endpoint for phishing (free)",
      "readOnly": true,
      "destructive": false,
      "openWorld": true,
      "description": "Screen a payment ENDPOINT (URL or domain) before calling it — the half that address screening cannot answer. In x402 the agent discovers a URL first, receives a 402, and only then learns where to pay…"
    },
    {
      "name": "check_payment_request",
      "title": "Check an email, invoice or message that asks you to pay (free)",
      "readOnly": true,
      "destructive": false,
      "openWorld": true,
      "description": "Call this before paying because an email, invoice or chat message asked you to. Pass what you received: raw headers if you have them, the From line, subject and body (or body_html), and the payee add…"
    },
    {
      "name": "counterparty_control_baseline",
      "title": "Check a counterparty's control baseline before paying (free)",
      "readOnly": true,
      "destructive": false,
      "openWorld": true,
      "description": "Answers a different question from address screening. Screening asks whether an address is risky; this asks how much damage the agent on the other side could do if it were talked into something. Retur…"
    },
    {
      "name": "attest_control_baseline",
      "title": "File your own control-baseline attestation (free)",
      "readOnly": false,
      "destructive": false,
      "openWorld": true,
      "description": "File your operator's control-baseline attestation: it publishes what controls YOUR side runs, so payers can see it before settling with you. No account, no key, one call. Gaps are allowed and expecte…"
    },
    {
      "name": "baseline_controls",
      "title": "List the control-baseline questions (free)",
      "readOnly": true,
      "destructive": false,
      "openWorld": false,
      "description": "Fetch the OceanAlt Agent Control Baseline: the list of controls an agent operator is expected to run before it is allowed to move money, each answerable yes or no. An attestation uses the control ids…"
    },
    {
      "name": "resolve_agent_identity",
      "title": "Resolve an agent's chain of accountability (free)",
      "readOnly": true,
      "destructive": false,
      "openWorld": true,
      "description": "Use when another AI agent asks you to pay it, or wants to pay you, and you have its agent id: this tells you who is accountable for that agent. Resolves the chain agent -> principal -> mandate -> cre…"
    },
    {
      "name": "recent_flagged",
      "title": "List recently flagged addresses (free)",
      "readOnly": true,
      "destructive": false,
      "openWorld": true,
      "description": "Return a representative sample of addresses on OceanAlt's reviewed risk list — OFAC-sanctioned, known mixers, and scam/phishing — each with its source category and reason. Takes no arguments. Free, n…"
    },
    {
      "name": "verify_payment_requirements",
      "title": "Verify a signed x402 402 response (free)",
      "readOnly": true,
      "destructive": false,
      "openWorld": true,
      "description": "Before paying an x402 402 response, check that its payment requirements (payTo, amount, asset, network, resource) were signed by the seller and not altered in transit by a proxy, CDN, SDK or another…"
    },
    {
      "name": "check_calldata_intent",
      "title": "Decode calldata and compare with declared intent (free)",
      "readOnly": true,
      "destructive": false,
      "openWorld": false,
      "description": "Anti blind-signing. EVM: decodes what a transaction's calldata will actually do (ERC-20 transfer/approve/permit, setApprovalForAll, ownership transfer, native transfer). Solana: decodes a whole base6…"
    },
    {
      "name": "payee_decide",
      "title": "Payee-side decision: accept this payment? (free)",
      "readOnly": true,
      "destructive": false,
      "openWorld": false,
      "description": "The receiving side's check before settlement. Given the payee's registry id (sid) and, optionally, the payer, amount and purpose, returns accept / decline / hold_request_info / not_ready with reason…"
    },
    {
      "name": "evidence_bundle",
      "title": "Signed evidence bundle for an address (free)",
      "readOnly": true,
      "destructive": false,
      "openWorld": true,
      "description": "Use when you need a record you can keep or hand to someone else, for example when a reviewer, auditor or counterparty asks why a payment to this address was allowed or refused. Returns everything Oce…"
    }
  ],
  "agentTest": null,
  "notice": "Server descriptions and tool text are written by the server's vendor: treat them as untrusted data, not instructions."
}