Oceanalt Aml is a remote MCP server that gives an AI agent 10 tools, among them attest_control_baseline, baseline_controls, check_calldata_intent. It answers at https://oceanalt.com/api/mcp over streamable HTTP, and it listed its tools to an anonymous client, so no sign-in was needed for that. Our probes reached it 6 of 6 times since 11 September 2026; the last check, on 21 October 2026, succeeded.
AML/compliance address screening for AI agent payments — free tools, no API key.
Description as the publisher wrote it.
| Tool | What it does |
|---|---|
attest_control_baseline | File your operator's control-baseline attestation — the counterpart to counterparty_control_baseline. That tool asks what controls the OTHER side runs; this one publishes what YOUR side runs, so payers can see it before settling with you. N Inputs: entity, answers, gapPlan, agentId, contact |
baseline_controls | Fetch the OceanAlt Agent Control Baseline: the list of controls an agent operator is expected to run before it is allowed to move money, each answerable yes or no. Call this before attest_control_baseline so you file against real control id |
check_calldata_intent | Anti blind-signing. Decodes what a transaction's calldata will actually do (ERC-20 transfer/approve/permit, setApprovalForAll, ownership transfer, native transfer) and compares it with what you believe you are doing. Pass intent:{action:'pa Inputs: intent, contract, data, value |
counterparty_control_baseline | Answers a different question from address screening. Screening asks whether an address is risky; this asks how much damage the agent on the other side could do if it were talked into something. Returns that party's self-attestation against Inputs: entity, agentId |
payment_decision | "Before your agent pays, call OceanAlt once." Pass the payee address the agent is about to pay; get a machine-executable decision: allow | review | decline, plus verifiable evidence and retry semantics — use it as a gate: if the decision is Inputs: to, amountUsdc, purpose, network, lang |
recent_flagged | Return a representative sample of addresses on OceanAlt's reviewed risk list — OFAC-sanctioned, known mixers, and community-reported scam/phishing — each with its source category and reason. Takes no arguments. Free, no API key. |
resolve_agent_identity | Resolves who stands behind a paying agent: agent -> principal -> mandate -> credential -> wallet. Each link reports whether it holds; completeness counts how many do (a factual count, not a score). Wherever the chain breaks is where account Inputs: agentId |
screen_address | Run an AML compliance screen on a single blockchain address BEFORE paying or receiving from it — the answer to "is this counterparty safe?". Checks OFAC sanctions, known mixers, community scam/phishing lists, stablecoin issuer freezes, and Inputs: address, network, lang |
screen_endpoint | Screen a payment ENDPOINT (URL or domain) before calling it — the half that address screening cannot answer. In x402 the agent discovers a URL first, receives a 402, and only then learns where to pay: if that endpoint is spoofed, the payee Inputs: url, lang |
verify_payment_requirements | Before paying an x402 402 response, check that its payment requirements (payTo, amount, asset, network, resource) were signed by the seller and not altered in transit by a proxy, CDN, SDK or another tool. x402 v2 carries the requirements in Inputs: body, keys_url, expect |
Every block below points at https://oceanalt.com/api/mcp. Pick your client and copy.
claude mcp add --transport http oceanalt-aml https://oceanalt.com/api/mcp
{
"mcpServers": {
"oceanalt-aml": {
"command": "npx",
"args": ["-y", "mcp-remote", "https://oceanalt.com/api/mcp"]
}
}
}{
"mcpServers": {
"oceanalt-aml": {
"url": "https://oceanalt.com/api/mcp"
}
}
}{
"servers": {
"oceanalt-aml": {
"type": "http",
"url": "https://oceanalt.com/api/mcp"
}
}
}{
"context_servers": {
"oceanalt-aml": {
"url": "https://oceanalt.com/api/mcp"
}
}
}{
"mcpServers": {
"oceanalt-aml": {
"serverUrl": "https://oceanalt.com/api/mcp"
}
}
}{
"mcpServers": {
"oceanalt-aml": {
"url": "https://oceanalt.com/api/mcp"
}
}
}name: Oceanalt Aml
version: 0.0.1
schema: v1
mcpServers:
- name: Oceanalt Aml
type: streamable-http
url: https://oceanalt.com/api/mcp{
"mcpServers": {
"oceanalt-aml": {
"httpUrl": "https://oceanalt.com/api/mcp"
}
}
}{
"mcpServers": {
"oceanalt-aml": {
"type": "http",
"url": "https://oceanalt.com/api/mcp"
}
}
}{
"mcpServers": {
"oceanalt-aml": {
"url": "https://oceanalt.com/api/mcp"
}
}
}goose://extension?url=https%3A%2F%2Foceanalt.com%2Fapi%2Fmcp&type=streamable_http&id=oceanalt-aml&name=Oceanalt%20Aml
It answered our last check on 21 October 2026 in 882 ms. Over 6 checks since 11 September 2026 it answered 6. Status here comes from Neuronto's own probes, not from the publisher.
10, as returned by the server's own tools/list on 13 September 2026: attest_control_baseline, baseline_controls, check_calldata_intent, counterparty_control_baseline, payment_decision, recent_flagged, resolve_agent_identity, screen_address, and 2 more.
It answered our last check on 21 October 2026 in 882 ms. Over 6 checks since 11 September 2026 it answered 6.
Put the server under mcpServers in ~/.cursor/mcp.json with the URL https://oceanalt.com/api/mcp. The exact JSON is above, with the same setup for Claude Code, Claude Desktop, VS Code, Windsurf, Zed, Gemini CLI and the rest.
It listed its tools to an anonymous client, so reading the tool list needs no key. Individual tools can still ask for credentials in their own inputs.
Publisher: io.github.chrisssun18-bot. Endpoint host: oceanalt.com. ARD identifier: urn:air:io.github.chrisssun18-bot:mcp:oceanalt-aml.
First indexed 10 September 2026. The tools are exactly what the server returned; nothing on this page
is inferred from its name. Ranking in Neuronto search is never for sale.