# aml (slim)

> aml, an MCP server by oceanalt.com, listed from the official MCP registry. Indexed, not reviewed: facts and our own checks, no score or ranking. Screen a payee address before an AI agent pays: sanctions, mixers, scam lists, on-chain risk.

- Full: https://www.anchorterminal.com/tools/oceanalt-aml.md (~1,100 tokens) · this version ~1,030 tokens · JSON https://www.anchorterminal.com/tools/oceanalt-aml.json · canonical https://www.anchorterminal.com/tools/oceanalt-aml
- Index: https://www.anchorterminal.com/llms.txt · API: https://www.anchorterminal.com/api/v1/index.json · Updated: 2026-10-05

# aml

> Indexed, not reviewed: facts from the official MCP registry and our own checks. No score, grade or rank, and not in the rankings until the panel reviews it. How the index works: https://www.anchorterminal.com/indexed/

- Kind: MCP server, by oceanalt.com (https://oceanalt.com/en/api-docs)
- Listed because: It's published in the registry under oceanalt.com, a namespace the registry only gives to whoever proves they control that domain.
- What the official MCP registry says: Screen a payee address before an AI agent pays: sanctions, mixers, scam lists, on-chain risk.

## Facts

- MCP registry: `com.oceanalt/aml` 0.7.1
- Endpoint: https://oceanalt.com/api/mcp (streamable HTTP)
- Package: npm `oceanalt-aml-mcp` (stdio)
- Source: https://github.com/OceanAlt666/oceanalt-aml-mcp
- Website: https://oceanalt.com/en/api-docs
- npm downloads a week: 90
- GitHub stars: 0
- Registry entry updated: 2026-10-04

## Tools

- Tools it lists (10, about 3,186 tokens of context, `tools/list` without credentials over MCP 2026-07-28, checked 2026-10-04 22:23 UTC):
  - `payment_decision` (read-only): "Before your agent pays, call OceanAlt once." Pass the payee address the agent is about to pay; get a machine-executable decision: allow | review | decline,…
  - `screen_address` (read-only): Run an AML compliance screen on a single blockchain address BEFORE paying or receiving from it — the pre-payment check on a counterparty. Checks OFAC…
  - `screen_endpoint` (read-only): Screen a payment ENDPOINT (URL or domain) before calling it — the half that address screening cannot answer. In x402 the agent discovers a URL first, receives…
  - `counterparty_control_baseline` (read-only): Answers a different question from address screening. Screening asks whether an address is risky; this asks how much damage the agent on the other side could do…
  - `attest_control_baseline` (writes): File your operator's control-baseline attestation — the counterpart to counterparty_control_baseline. That tool asks what controls the OTHER side runs; this…
  - `baseline_controls` (read-only): Fetch the OceanAlt Agent Control Baseline: the list of controls an agent operator is expected to run before it is allowed to move money, each answerable yes or…
  - `resolve_agent_identity` (read-only): Resolves who stands behind a paying agent: agent -> principal -> mandate -> credential -> wallet. Each link reports whether it holds; completeness counts how…
  - `recent_flagged` (read-only): Return a representative sample of addresses on OceanAlt's reviewed risk list — OFAC-sanctioned, known mixers, and community-reported scam/phishing — each with…
  - `verify_payment_requirements` (read-only): Before paying an x402 402 response, check that its payment requirements (payTo, amount, asset, network, resource) were signed by the seller and not altered in…
  - `check_calldata_intent` (read-only): Anti blind-signing. EVM: decodes what a transaction's calldata will actually do (ERC-20 transfer/approve/permit, setApprovalForAll, ownership transfer, native…
- How its tools read to an agent (0 errors, 3 warnings, 1 note, about 3,186 tokens; rules at https://www.anchorterminal.com/check.md; not part of the score):
  - warn TC11 check_calldata_intent: 2 parameters without a description: intent, intent.action
  - warn TC12 verify_payment_requirements: no type for body
  - warn TC13 attest_control_baseline: answers (object with no properties)
  - note TC24 server: 10 of 10 tools have no outputSchema

- JSON: https://www.anchorterminal.com/api/v1/tools/oceanalt-aml.json
- Being indexed says nothing about quality, and nobody can pay for it. Ask for a review: https://www.anchorterminal.com/builders/#claiming