Onyx AML
Crypto address risk checks for agents: USDT/USDC blacklists, sanctions, scam lists, poisoning
| Endpoint | https://onyxprotocol.trade/mcp (streamable-http) |
|---|---|
| Registry version | 1.0.0 |
| Now | 8 tools · grade A (100) · pin ts_c6d6ea9d324be54c48a1a556ec7c9282 · protocol 2025-06-18 |
| First / last listed | 2026-11-05 00:58 UTC / 2026-11-05 00:58 UTC |
| Grade over time | 2026-11-05: A (100), 8 tools |
Is this your server? Own a server? ToolFit hosted watch re-checks it every 24 h ($0.25 per 30 days) or 6 h ($0.60) and sends you an HMAC-signed webhook when its tools or grade change: POST https://api.youraitools.co/toolfit/v1/watch. To opt out, see About & opt-out.
Tools: onyx_decide onyx_screen onyx_screen_batch onyx_preflight onyx_trace onyx_watch onyx_balance onyx_payment_info
onyx_decide | Return allow / review / deny for a counterparty address against your own risk policy, with the reasons named. Use this before every outbound transfer. Checks issuer blacklists (USDT, USDC), sanctions across six EVM chains plus the OFAC list, open scam databases, community reports and behavioural patterns. Costs credit. params: address*, amount_usd, policy |
onyx_screen | Return the raw risk markers for one address: risk zone, issuer blacklists, sanctions coverage, scam databases, community reports, address age, balance and exchange attribution where known. Use this when you want the facts rather than a decision. Costs credit. params: address* |
onyx_screen_batch | Screen up to 50 addresses in a single call, for example before a mass payout. Priced per address, and only addresses actually screened are charged. Each result carries facts_complete so you can tell whether the behavioural facts finished loading. params: addresses* |
onyx_preflight | Operational safety check for a payment, separate from risk screening. Detects address poisoning (a lookalike planted in your history so it gets copied instead of the real address), contract recipients that would swallow the tokens, and addresses that behave differently on different chains. Pass known_addresses (the counterparties you already use) to enable poisoning detection. Verdicts: stop, caut params: address*, known_addresses |
onyx_trace | Multi-hop trace of outgoing flows from an address, with attribution where a node is known (exchange labels, deposit addresses). Use it to establish provenance after receiving funds. Costs more than a screening call. params: address* |
onyx_watch | Subscribe to an address. When it enters an issuer blacklist, a sanctions list or a scam database, we POST a signed event to your callback URL. A one-off check cannot warn you about a freeze that has not happened yet. Billed per address per day. The callback must be public https. params: address*, callback_url* |
onyx_balance | How much credit your API key has left, and the current prices. Free. params: none |
onyx_payment_info | Machine-readable payment terms: which asset and network to send, the address, prices per operation, and how to claim an API key from the address you paid from. No account or signup is involved. Free, and works without a key. params: none |
Entries describe changes in tool definitions. They are not statements about a server, its quality or its author. The grade measures how the tool definitions fit model providers (token cost, schema compatibility, confusable names) as scored by the ToolFit engine at the time of the listing. JSON: append .json. Opt-out: how or hello@youraitools.co.