Security & Testing

oceanalt.com

An MCP server that provides pre-payment AML compliance screening for blockchain addresses and payment endpoints, plus counterparty control-baseline checks and attestation.

x402 supported1 endpoint10 known toolsFirst detected September 6, 2026Last detected September 9, 2026

ENDPOINT 1

https://oceanalt.com/api/mcp

No auth detected

MCP server metadata

Name: oceanalt-aml
Version: 0.4.0

Capabilities

toolspromptsresources

Server instructions

OceanAlt AML — free, agent-callable compliance for autonomous payments. Before your agent pays, call payment_decision (allow/review/decline + evidence + a settlement attestation); use screen_address for a raw AML verdict on any address, and screen_endpoint on the URL you are about to call — a spoofed endpoint hands back a fresh address that no list has seen.

Known tools 10

payment_decision

"Before your agent pays, call OceanAlt once.

Inferred read-only

screen_address

Run an AML compliance screen on a single blockchain address BEFORE paying or receiving from it — the pre-payment check on a counterparty.

Potential side effects

screen_endpoint

Screen a payment ENDPOINT (URL or domain) before calling it — the half that address screening cannot answer.

Potential side effects

counterparty_control_baseline

Answers a different question from address screening.

Inferred read-only

attest_control_baseline

File your operator's control-baseline attestation — the counterpart to counterparty_control_baseline.

Inferred read-only

baseline_controls

Fetch the OceanAlt Agent Control Baseline: the list of controls an agent operator is expected to run before it is allowed to move money, each answerable yes or no.

Inferred read-only

resolve_agent_identity

Resolves who stands behind a paying agent: agent -> principal -> mandate -> credential -> wallet.

Inferred read-only

recent_flagged

Return a representative sample of addresses on OceanAlt's reviewed risk list — OFAC-sanctioned, known mixers, and community-reported scam/phishing — each with its source category and reason.

Inferred read-only

verify_payment_requirements

Before paying an x402 402 response, check that its payment requirements (payTo, amount, asset, network, resource) were signed by the seller and not altered in transit by a proxy, CDN, SDK or another tool.

Potential side effects

check_calldata_intent

Anti blind-signing.

Inferred read-only

CONNECT WITH APPROVAL

Client installation

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.oceanalt-aml]
url = "https://oceanalt.com/api/mcp"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "oceanalt-aml": {
      "type": "http",
      "url": "https://oceanalt.com/api/mcp"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: oceanalt-aml
Remote MCP URL: https://oceanalt.com/api/mcp

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "oceanalt-aml": {
      "url": "https://oceanalt.com/api/mcp"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "oceanalt-aml": {
      "type": "http",
      "url": "https://oceanalt.com/api/mcp"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "oceanalt-aml",
  "transport": "streamable-http",
  "url": "https://oceanalt.com/api/mcp"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

TRUST AND VERIFICATION EVIDENCE

Loading Trust v2 evidence…

Checking the associated registrable domain. The BuiltWith key remains server-side.

Indexed

Evidence is source-attributed and does not guarantee that a third-party server is safe. Risk labels are conservative metadata heuristics.