Next free-source huntWe check for new free data every weekday.
OSINTMCP serverFirst audited Nov 13, 2026

Prax Data Services

Screen banks, wires, sanctions, wallets and transfers before an agent moves money. Free tier.The vendor's description, from its MCP Registry listing.

Passed public checksAudited Nov 13, 2026

Every public check ran and passed. Public audit: we connect as an AI client would, list the tools and check what they say. We do not run them. How we audit

Does it work?
YesConnected in 468 ms.
Sign-up?
None neededIt answered without any account or key.
Can it change things?
No, read-onlyAll 12 tools say they only read.
Endpointhttps://mcp.orabrain.com/mcp

Source code Website Streamable HTTP · protocol 2025-11-25 · server version 1.0

What we checked, the evidence, and the tools it offers.

What we checked

Security

  • Passed: Connections are encrypted (HTTPS).

  • Passed: No hidden instructions found in tool text.

Safety labels

  • Passed: Every tool says whether it only reads or can change things.

Tools

  • Passed: 12 tools listed.

  • Passed: Every tool describes its inputs with a valid schema.

Protocol

  • Passed: The MCP handshake works (Streamable HTTP).

  • Passed: Protocol version 2025-11-25 (latest).

  • Passed: Unknown requests are refused.

Connection

  • Passed: The server responds.

Tools (12)

As the server describes them. The labels are the server's own: it says whether each tool only reads or can change things.

  • screen_walletWallet and smart-contract risk screening (KYT / AML): check any address (EVM chains for full analysis; Bitcoin, Tron, Solana, Litecoin, Monero and other chains against the sanctions lists) against Pr…Read-only
  • analyze_transactionTransaction risk analysis: given an EVM transaction hash, returns status, value, counterparties and the risk of both sides (sanctions, exploit, phishing, scam exposure) with flags. Use for post-trade…Read-only
  • screen_transferPre-signature transfer check (payment screening): is it safe to send `amount` of `asset` from `from` to `to`? Returns allow / review / block with reasons - sanctioned or flagged parties, malicious or…Read-only
  • screen_entitySanctions screening for people, companies, vessels and crypto addresses: fuzzy name match (aliases, transliterations) or exact wallet / contract lookup against the sanctions lists Prax pulls continuo…Read-only
  • screen_wallets_batchBulk wallet screening: screen_wallet for up to 50 addresses in one call - portfolio, customer-base or deposit-address sweeps. Returns per-address risk band and labels plus a summary. Builder plan and…Read-only
  • screen_transfers_batchBulk transfer screening: screen_transfer for up to 50 transfers in one call (items of {from, to, amount, asset, chain}) - payout batches, payroll, exchange withdrawals. Returns a verdict per item and…Read-only
  • get_alertsThreat-intelligence alert feed: approved Prax alerts from the last 24 hours (new exploits, attacker wallets, malicious contracts, phishing campaigns, sanctions updates), newest first, same payload as…Read-only
  • searchSearch Prax threat intelligence in plain words (e.g. 'critical attacker wallets on base this week', 'phishing contracts created by 0x...'). Returns COUNTS of matching addresses (by band, chain, role)…Read-only
  • fetchFetch the full Prax intelligence record for an id returned by search (address:<chain>:<addr>, tx:<chain>:<hash>, alert:<id>). Business plan and above.Read-only
  • screen_bankCounterparty-bank and wire screening: give a BIC (SWIFT), IBAN, US ABA routing number or LEI, and/or a bank name and country, optionally the beneficiary name. Returns allow / review / block with reas…Read-only
  • screen_enforcementRegulatory enforcement history for a bank, fintech, money services business, crypto firm or individual: consent orders, civil money penalties, fines, final notices, bars and charges from the Federal…Read-only
  • screen_licenceIs this payments or digital-asset firm registered or licensed, where, and is it active: FinCEN MSB registrations (US), NY DFS virtual-currency licensees and trust charters, the UK FCA Financial Servi…Read-only

Audit history

  1. Nov 13Passed

What we sent

Every request in this audit, with the answer and how long it took. We never send credentials and never call a tool.

RequestAnswerTime
initializeHTTP 200468 ms
initializedHTTP 202129 ms
tools/listHTTP 200341 ms
unknown-methodHTTP 200139 ms

Run this server, or disagree with the result?

Fix the issue and it shows in the next weekly audit, or email us to ask for a re-audit or to dispute a finding. Read how we audit for what each check means.