Onyx AML MCP Server

by onyxprotocol Your server? Claim it

answering

Onyx AML is answering right now. Last checked 9 min ago. It exposes 8 tools.

Crypto address risk checks for agents: USDT/USDC blacklists, sanctions, scam lists, poisoning

Uptime history 6 days of history

6 days agonow

100.0%

Uptime 24h

91 of 91 checks

Tools

read from the server

207 ms

Response time

average over 24h

open, no key

Access

streamable-http

Nothing serious here today

Today is the operative word: we check Onyx AML every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 9 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add onyx-aml --transport http https://onyxprotocol.trade/mcp

Settings → Connectors → Add custom connector, then paste this address

https://onyxprotocol.trade/mcp

~/.codex/config.toml

[mcp_servers.onyx-aml]
url = "https://onyxprotocol.trade/mcp"

.cursor/mcp.json

{
  "mcpServers": {
    "onyx-aml": {
      "url": "https://onyxprotocol.trade/mcp"
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "onyx-aml": {
      "type": "http",
      "url": "https://onyxprotocol.trade/mcp"
    }
  }
}

Available tools 8

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

onyx

onyx_balance

How much credit your API key has left, and the current prices. Free.

onyx_decide

Return allow / review / deny for a counterparty address against your own risk policy, with the reasons named. Use this before every outbound transfer. Checks issuer blacklists (USDT, USDC), sanctions across six EVM chains plus the OFAC list, open scam databases, community reports and behavioural patterns. Costs credit.

onyx_payment_info

Machine-readable payment terms: which asset and network to send, the address, prices per operation, and how to claim an API key from the address you paid from. No account or signup is involved. Free, and works without a key.

onyx_preflight

Operational safety check for a payment, separate from risk screening. Detects address poisoning (a lookalike planted in your history so it gets copied instead of the real address), contract recipients that would swallow the tokens, and addresses that behave differently on different chains. Pass known_addresses (the counterparties you already use) to enable poisoning detection. In our live-traffic sample this class of loss came up far more often than sanctioned counterparties. Dedicated transaction-security services cover part of it; no AML screening does. Run this together with onyx_decide before every payment.

onyx_screen

Return the raw risk markers for one address: risk zone, issuer blacklists, sanctions coverage, scam databases, community reports, address age, balance and exchange attribution where known. Use this when you want the facts rather than a decision. Costs credit.

onyx_screen_batch

Screen up to 50 addresses in a single call, for example before a mass payout. Priced per address, and only addresses actually screened are charged. Each result carries facts_complete so you can tell whether the behavioural facts finished loading.

onyx_trace

Multi-hop trace of outgoing flows from an address, with attribution where a node is known (exchange labels, deposit addresses). Use it to establish provenance after receiving funds. Costs more than a screening call.

onyx_watch

Subscribe to an address. When it enters an issuer blacklist, a sanctions list or a scam database, we POST a signed event to your callback URL. A one-off check cannot warn you about a freeze that has not happened yet. Billed per address per day. The callback must be public https.

Endpoints

URL	Transport	State	Latency	Checked
https://onyxprotocol.trade/mcp	streamable-http	answering	229 ms	9 min ago

Alternatives to Onyx AML

same job, measured the same way

Publicaml

by publicaml

AML screening for crypto addresses: risk, sanctions, fund tracing and counterparties.

24 installs/wk local only

Truedge Crypto Safety

by truedge

Free crypto scam checks: token and contract risk, scam or sanctioned addresses, phishing links.

5 tools answering

Aml

by oceanalt

Pre-payment checks for AI agents: sanctions and AML screening of payees, payment pages and requests.

318 installs/wk 13 tools answering

Trust Check

by gmahar82-stack

Base crypto safety for agents: honeypot/tax test, address poisoning, rug feed, creator record.

5 tools answering

PayPerScreen

by tonythetiger22

Sanctions, crypto wallet, email and IP screening for agents. Pay per check in USDC via x402.

64 installs/wk local only

Pathguard

by cieltech-pathguard

Crypto transaction safety tool — screens addresses and transactions for scam risk.

5 tools answering

traql

by traql

AML risk scoring for crypto addresses and transactions on Ethereum, BSC, TRON, TON, Bitcoin

34 installs/wk local only

PayGuard

by youraitools

OFAC SDN sanctions screen for crypto addresses, for agents that send payments. By Crypto Money Maker

2 tools answering

Onyx AML — questions

Answers built from our own checks of this server.

What can Onyx AML do?

It exposes 8 tools, read directly from the server on our last check. Among them: onyx_balance, onyx_decide, onyx_payment_info, onyx_preflight, onyx_screen, onyx_screen_batch and 2 more. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →

Is Onyx AML working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 91 of 91 checks got a reply (100.0%), average response time 207 ms. The bar chart above shows every period we have measured.

How do I connect Onyx AML?

Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.

Does Onyx AML need an API key?

No. Onyx AML completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 8 of them are readable on this page. This is what we observed, not what the docs claim.

How fast is Onyx AML?

It answers our handshake in 207 ms on average, which is faster than 77% of all working MCP servers we measure. That puts it in the quick quarter of the ecosystem. The comparison comes from our own checks across the whole registry, every 15 minutes.