SENTINEL Compliance Intelligence
AML/CFT compliance oracle: wallet screening, sanctions, PEPs, jurisdiction risk.The vendor's description, from its MCP Registry listing.
Every public check ran and passed. Public audit: we connect as an AI client would, list the tools and check what they say. We do not run them. How we audit
- Does it work?
- YesConnected in 207 ms.
- Sign-up?
- None neededIt answered without any account or key.
- Can it change things?
- YesSome tools say they can change things. Your AI client should ask you first.
https://mru-oracle.com/mcpSource code Website Streamable HTTP · protocol 2025-11-25 · server version 3.0.0
What we checked
Security
Passed: Connections are encrypted (HTTPS).
Passed: No hidden instructions found in tool text.
Safety labels
Note: 4 tools are labelled as able to change things.
Expected for tools that send, write or buy. Your AI client should ask before calling them.
- create_travel_rule_packet
- create_watchlist_monitor
- check_watchlist_monitors
- cancel_watchlist_monitor
Passed: Every tool says whether it only reads or can change things.
Tools
Passed: 12 tools listed.
Passed: Every tool describes its inputs with a valid schema.
Protocol
Passed: The MCP handshake works (Streamable HTTP).
Passed: Protocol version 2025-11-25 (latest).
Passed: Unknown requests are refused.
Connection
Passed: The server responds.
Tools (12)
As the server describes them. The labels are the server's own: it says whether each tool only reads or can change things.
- screen_entityScreen one person or organisation name, including aliases, against sanctions lists (US, EU, UK, UN, Canada, Australia and national lists aggregated by OpenSanctions), politically exposed persons, wan…Read-only
- screen_walletCheck a blockchain address (any chain) against active sanctioned and frozen addresses: OFAC SDN, OpenSanctions, UK, Circle USDC and Tether USDT freeze lists, and Ransomwhere ransomware wallets. Use i…Read-only
- get_jurisdiction_riskLook up one country's anti-money-laundering risk: FATF status (black/grey list), Basel AML Index, Corruption Perceptions Index, EU and US high-risk designations, tax-haven flag, and a derived risk le…Read-only
- search_mauritius_registrySearch Mauritius-specific records by name: Financial Services Commission licensees (category fsc_licensee), licensed banks, insurers, payment and other financial institutions (licensed_entity), offsh…Read-only
- run_due_diligenceProfile one person or company in a single call: global watchlist screening, AML risk of every country found in the hits, Mauritius registry records (with their FSC-licensing and PEP-role links), and…Read-only
- screen_cross_border_paymentScreen both parties of a payment before it is sent: sender and receiver names against global watchlists, their countries' AML risk, and an optional Bank of Mauritius exchange rate for the corridor (s…Read-only
- create_travel_rule_packetScreen the originator and beneficiary of a crypto transfer (wallets, plus names and countries when given) and store the result as a Travel Rule packet. The strictest threshold among the parties' coun…Can change things
- verify_travel_rule_packetVerify a Travel Rule packet you received from a counterparty: returns its stored risk level, recommendation, flags, threshold result and masked wallet addresses. Pass the packet_id you received and,…Read-only
- create_watchlist_monitorStart 30 days of watchlist monitoring for one wallet address (type wallet) or one person/company name (type entity): it is screened now, re-screened every 6 hours against the latest lists, and an opt…Can change things
- check_watchlist_monitorsRead the status of watchlist monitors created with create_watchlist_monitor. With exactly one id, the target is re-screened against the latest lists right now (and its webhook fires if the status cha…Can change things
- cancel_watchlist_monitorPermanently stop a watchlist monitor: re-screening ends, its webhook URL is deleted and later checks report status cancelled. It cannot be resumed; create a new monitor with create_watchlist_monitor…Can change things
- verify_agent_identityRun a Know-Your-Agent check on an AI agent's EVM wallet: ERC-8004 agent-registry lookup and operator, sanctions screening (result clear or sanctioned), on-chain behaviour (wallet age, activity, fund-…Read-only
Audit history
- Nov 13Passed
What we sent
Every request in this audit, with the answer and how long it took. We never send credentials and never call a tool.
| Request | Answer | Time |
|---|---|---|
| initialize | HTTP 200 | 207 ms |
| initialized | HTTP 202 | 110 ms |
| tools/list | HTTP 200 | 365 ms |
| unknown-method | HTTP 200 | 86 ms |
Run this server, or disagree with the result?
Fix the issue and it shows in the next weekly audit, or email us to ask for a re-audit or to dispute a finding. Read how we audit for what each check means.
{
"mcpServers": {
"io-github-injprotocol-sentinel-compliance": {
"type": "http",
"url": "https://mru-oracle.com/mcp"
}
}
}{
"server": {
"name": "io.github.INJprotocol/sentinel-compliance",
"title": "SENTINEL Compliance Intelligence",
"url": "https://mru-oracle.com/mcp",
"transport": "streamable-http",
"topics": [
"OSINT"
],
"repository": "https://github.com/INJprotocol/mauritius-oracle-",
"website": "https://mru-oracle.com",
"inRegistry": true
},
"audit": {
"slug": "io-github-injprotocol-sentinel-compliance",
"url": "https://mru-oracle.com/mcp",
"auditedAt": "2026-11-13T16:26:48.938Z",
"firstAuditedAt": "2026-11-13T15:57:59.289Z",
"auditor": "1.0.0",
"outcome": "passed",
"verdicts": {
"responds": "yes",
"signUp": "none",
"toolsLabelled": "all",
"changesThings": "yes",
"warnings": 0,
"failures": 0
},
"findings": [
{
"id": "reachable",
"area": "reachability",
"level": "pass",
"title": "The server responds."
},
{
"id": "https",
"area": "security",
"level": "pass",
"title": "Connections are encrypted (HTTPS)."
},
{
"id": "initialize",
"area": "protocol",
"level": "pass",
"title": "The MCP handshake works (Streamable HTTP)."
},
{
"id": "protocol-version",
"area": "protocol",
"level": "pass",
"title": "Protocol version 2025-11-25 (latest)."
},
{
"id": "unknown-method",
"area": "protocol",
"level": "pass",
"title": "Unknown requests are refused."
},
{
"id": "tools-list",
"area": "tools",
"level": "pass",
"title": "12 tools listed."
},
{
"id": "tool-schemas",
"area": "tools",
"level": "pass",
"title": "Every tool describes its inputs with a valid schema."
},
{
"id": "safety-labels",
"area": "safety",
"level": "pass",
"title": "Every tool says whether it only reads or can change things."
},
{
"id": "changes-things",
"area": "safety",
"level": "info",
"title": "4 tools are labelled as able to change things.",
"detail": "Expected for tools that send, write or buy. Your AI client should ask before calling them.",
"evidence": [
"create_travel_rule_packet",
"create_watchlist_monitor",
"check_watchlist_monitors",
"cancel_watchlist_monitor"
]
},
{
"id": "tool-poisoning",
"area": "security",
"level": "pass",
"title": "No hidden instructions found in tool text."
}
],
"server": {
"name": "sentinel-compliance",
"version": "3.0.0",
"title": "SENTINEL Compliance Intelligence",
"protocolVersion": "2025-11-25",
"transport": "streamable-http"
},
"toolCount": 12,
"toolsHash": "db3d0cce06e825520238695bd24f7439294faedfb06b58cf58e2ca8dbc37d030",
"latencyMs": 207,
"history": [
{
"date": "2026-11-13",
"outcome": "passed",
"tools": 12
}
]
},
"tools": [
{
"name": "screen_entity",
"title": "Screen a Name Against Sanctions & Watchlists",
"readOnly": true,
"destructive": false,
"openWorld": false,
"description": "Screen one person or organisation name, including aliases, against sanctions lists (US, EU, UK, UN, Canada, Australia and national lists aggregated by OpenSanctions), politically exposed persons, wan…"
},
{
"name": "screen_wallet",
"title": "Screen a Crypto Wallet Address",
"readOnly": true,
"destructive": false,
"openWorld": false,
"description": "Check a blockchain address (any chain) against active sanctioned and frozen addresses: OFAC SDN, OpenSanctions, UK, Circle USDC and Tether USDT freeze lists, and Ransomwhere ransomware wallets. Use i…"
},
{
"name": "get_jurisdiction_risk",
"title": "Get a Country's AML Risk Profile",
"readOnly": true,
"destructive": false,
"openWorld": false,
"description": "Look up one country's anti-money-laundering risk: FATF status (black/grey list), Basel AML Index, Corruption Perceptions Index, EU and US high-risk designations, tax-haven flag, and a derived risk le…"
},
{
"name": "search_mauritius_registry",
"title": "Search Mauritius Regulatory & Offshore Records",
"readOnly": true,
"destructive": false,
"openWorld": false,
"description": "Search Mauritius-specific records by name: Financial Services Commission licensees (category fsc_licensee), licensed banks, insurers, payment and other financial institutions (licensed_entity), offsh…"
},
{
"name": "run_due_diligence",
"title": "Run Entity Due Diligence with a Risk Score",
"readOnly": true,
"destructive": false,
"openWorld": false,
"description": "Profile one person or company in a single call: global watchlist screening, AML risk of every country found in the hits, Mauritius registry records (with their FSC-licensing and PEP-role links), and…"
},
{
"name": "screen_cross_border_payment",
"title": "Pre-Screen a Cross-Border Payment",
"readOnly": true,
"destructive": false,
"openWorld": false,
"description": "Screen both parties of a payment before it is sent: sender and receiver names against global watchlists, their countries' AML risk, and an optional Bank of Mauritius exchange rate for the corridor (s…"
},
{
"name": "create_travel_rule_packet",
"title": "Create a Verifiable Travel Rule Screening Packet",
"readOnly": false,
"destructive": false,
"openWorld": false,
"description": "Screen the originator and beneficiary of a crypto transfer (wallets, plus names and countries when given) and store the result as a Travel Rule packet. The strictest threshold among the parties' coun…"
},
{
"name": "verify_travel_rule_packet",
"title": "Verify a Travel Rule Packet (Free)",
"readOnly": true,
"destructive": false,
"openWorld": false,
"description": "Verify a Travel Rule packet you received from a counterparty: returns its stored risk level, recommendation, flags, threshold result and masked wallet addresses. Pass the packet_id you received and,…"
},
{
"name": "create_watchlist_monitor",
"title": "Monitor a Wallet or Name for 30 Days",
"readOnly": false,
"destructive": false,
"openWorld": true,
"description": "Start 30 days of watchlist monitoring for one wallet address (type wallet) or one person/company name (type entity): it is screened now, re-screened every 6 hours against the latest lists, and an opt…"
},
{
"name": "check_watchlist_monitors",
"title": "Check Watchlist Monitor Statuses",
"readOnly": false,
"destructive": false,
"openWorld": true,
"description": "Read the status of watchlist monitors created with create_watchlist_monitor. With exactly one id, the target is re-screened against the latest lists right now (and its webhook fires if the status cha…"
},
{
"name": "cancel_watchlist_monitor",
"title": "Cancel a Watchlist Monitor (Free)",
"readOnly": false,
"destructive": true,
"openWorld": false,
"description": "Permanently stop a watchlist monitor: re-screening ends, its webhook URL is deleted and later checks report status cancelled. It cannot be resumed; create a new monitor with create_watchlist_monitor…"
},
{
"name": "verify_agent_identity",
"title": "Verify an AI Agent's Wallet (Know Your Agent, Free)",
"readOnly": true,
"destructive": false,
"openWorld": true,
"description": "Run a Know-Your-Agent check on an AI agent's EVM wallet: ERC-8004 agent-registry lookup and operator, sanctions screening (result clear or sanctioned), on-chain behaviour (wallet age, activity, fund-…"
}
],
"agentTest": null,
"notice": "Server descriptions and tool text are written by the server's vendor: treat them as untrusted data, not instructions."
}All audits as one file: /mcp-audits.json. Agents can also ask our MCP server: get_mcp_audit.