Next free-source huntWe check for new free data every weekday.
FinancialOSINTMCP serverFirst audited Nov 13, 2026

io.github.saloprj/publicaml

Free crypto AML/KYT screening for BTC/ETH/BSC/TRON — risk score, sanctions, source of funds.The vendor's description, from its MCP Registry listing.

Passed public checksAudited Nov 13, 2026

Every public check ran and passed. Public audit: we connect as an AI client would, list the tools and check what they say. We do not run them. How we audit

Does it work?
YesConnected in 486 ms.
Sign-up?
None neededIt answered without any account or key.
Can it change things?
No, read-onlyAll 8 tools say they only read.
Endpointhttps://mcp.publicaml.org/mcp

Source code Website Streamable HTTP · protocol 2025-11-25 · server version 1.3.0

What we checked, the evidence, and the tools it offers.

What we checked

Security

  • Passed: Connections are encrypted (HTTPS).

  • Passed: No hidden instructions found in tool text.

Safety labels

  • Passed: Every tool says whether it only reads or can change things.

Tools

  • Passed: 8 tools listed.

  • Passed: Every tool describes its inputs with a valid schema.

Protocol

  • Passed: The MCP handshake works (Streamable HTTP).

  • Passed: Protocol version 2025-11-25 (latest).

  • Passed: Unknown requests are refused.

Connection

  • Passed: The server responds.

Tools (8)

As the server describes them. The labels are the server's own: it says whether each tool only reads or can change things.

  • screen_addressScreen a crypto wallet address for AML/KYT risk. Returns an AML score (0-100), risk_level (LOW/MEDIUM/HIGH/CRITICAL), what the address is (axes: business, legal_status, asset_control, ...), sanctione…Read-only
  • trace_fundsFollow the OUTGOING funds from an address across the chain and report where the money ends up (exchanges, mixers, sanctioned wallets) and how many hops away. Read-only: it only reads on-chain history…Read-only
  • list_counterpartiesList the counterparties an address has transacted with — optionally filtered by entity category (cex, mixer, gambling, bridge, ...). Set with_risk=true to attach AML risk per counterparty. Read-only:…Read-only
  • trace_source_of_fundsWalk an address's INCOMING funds backwards to answer 'where did this wallet's money come from'. Stops at labelled entities (exchanges, mixers, services) and reports them with hop distance. Answers so…Read-only
  • screen_transactionScreen one transaction by hash: what moved, who took part, a label and AML risk for every participant, and an overall verdict. Pass focus_address (e.g. your own deposit address) to get the verdict fr…Read-only
  • follow_swapFor one transaction that went through a DEX or aggregator, show the net balance change per address and asset and flag who the swap was actually for. Use it to continue a trace past a swap. EVM chains…Read-only
  • list_transactionsA wallet's recent transfers, newest first, with direction and counterparty for each, plus what we know about each counterparty. Optionally only transfers with one kind of counterparty (e.g. 'did this…Read-only
  • explain_risk_pathExplain WHERE an address's AML risk comes from: for each risk source (sanctioned entity, hack, mixer, scam, frozen funds) the chain of wallets the money took from that source to this address, hop by…Read-only

Audit history

  1. Nov 13Passed

What we sent

Every request in this audit, with the answer and how long it took. We never send credentials and never call a tool.

RequestAnswerTime
initializeHTTP 200486 ms
initializedHTTP 202551 ms
tools/listHTTP 200162 ms
unknown-methodHTTP 200158 ms

Run this server, or disagree with the result?

Fix the issue and it shows in the next weekly audit, or email us to ask for a re-audit or to dispute a finding. Read how we audit for what each check means.