Skip to content

Onyx AML

by onyxprotocol.trade · remote · no sign-in to list tools · v1.0.0 · published by trade.onyxprotocol

Crypto address risk checks for agents: USDT/USDC blacklists, sanctions, scam lists, poisoning

Final · 1Changes · 5
CompareRegistry entry

8 tools: 1 do something that can't be undone, 5 change things and 2 only read.

Scanned Oct 21, 2026

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http onyx-aml https://onyxprotocol.trade/mcp

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

8 tools

Can't be undone 1Claude Code: ask
  • onyx_payment_infoMachine-readable payment terms: which asset and network to send, the address, prices per operation, and how to claim an API key from the address you paid from.No findings

    Why it is in this group

    • The name "onyx_payment_info" says "payment": a word that usually means money moves, which cannot be taken back.
    Description, as the server wrote it
    Machine-readable payment terms: which asset and network to send, the address, prices per operation, and how to claim an API key from the address you paid from. No account or signup is involved. Free, and works without a key.
Changes things 5Claude Code: ask
  • onyx_balanceHow much credit your API key has left, and the current prices.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    How much credit your API key has left, and the current prices. Free.
  • onyx_preflightOperational safety check for a payment, separate from risk screening.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Operational safety check for a payment, separate from risk screening. Detects address poisoning (a lookalike planted in your history so it gets copied instead of the real address), contract recipients that would swallow the tokens, and addresses that behave differently on different chains. Pass known_addresses (the counterparties you already use) to enable poisoning detection. In our live-traffic sample this class of loss came up far more often than sanctioned counterparties. Dedicated transaction-security services cover part of it; no AML screening does. Run this together with onyx_decide before every payment.
  • onyx_screen_batchScreen up to 50 addresses in a single call, for example before a mass payout.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Screen up to 50 addresses in a single call, for example before a mass payout. Priced per address, and only addresses actually screened are charged. Each result carries facts_complete so you can tell whether the behavioural facts finished loading.
  • onyx_traceMulti-hop trace of outgoing flows from an address, with attribution where a node is known (exchange labels, deposit addresses).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Multi-hop trace of outgoing flows from an address, with attribution where a node is known (exchange labels, deposit addresses). Use it to establish provenance after receiving funds. Costs more than a screening call.
  • onyx_watchSubscribe to an address.No findings

    Why it is in this group

    • The description's first verb is "subscribe": a word for a change.
    Description, as the server wrote it
    Subscribe to an address. When it enters an issuer blacklist, a sanctions list or a scam database, we POST a signed event to your callback URL. A one-off check cannot warn you about a freeze that has not happened yet. Billed per address per day. The callback must be public https.
Only reads 2Claude Code: allow
  • onyx_decideReturn allow / review / deny for a counterparty address against your own risk policy, with the reasons named.No findings

    Why it is in this group

    • The description's first verb is "return": a word for reading.
    Description, as the server wrote it
    Return allow / review / deny for a counterparty address against your own risk policy, with the reasons named. Use this before every outbound transfer. Checks issuer blacklists (USDT, USDC), sanctions across six EVM chains plus the OFAC list, open scam databases, community reports and behavioural patterns. Costs credit.
  • onyx_screenReturn the raw risk markers for one address: risk zone, issuer blacklists, sanctions coverage, scam databases, community reports, address age, balance and exchange attribution wher…No findings

    Why it is in this group

    • The description's first verb is "return": a word for reading.
    Description, as the server wrote it
    Return the raw risk markers for one address: risk zone, issuer blacklists, sanctions coverage, scam databases, community reports, address age, balance and exchange attribution where known. Use this when you want the facts rather than a decision. Costs credit.

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http onyx-aml https://onyxprotocol.trade/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__onyx-aml__onyx_decide",
      "mcp__onyx-aml__onyx_screen"
    ],
    "ask": [
      "mcp__onyx-aml__onyx_screen_batch",
      "mcp__onyx-aml__onyx_preflight",
      "mcp__onyx-aml__onyx_trace",
      "mcp__onyx-aml__onyx_watch",
      "mcp__onyx-aml__onyx_balance",
      "mcp__onyx-aml__onyx_payment_info"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as onyx-aml. Review it before you use it.