Frequently asked questions

OFAC sanctions screening for AI agents — the practical questions.

What is OFAC sanctions screening for AI agents?

OFAC sanctions screening is the process of checking whether a person, entity, wallet, or country your AI agent is about to transact with appears on the US Treasury's Specially Designated Nationals (SDN) list or an embargoed-jurisdiction list. For autonomous agents that move money, screening must happen programmatically, before every payment. agentmail exposes this as a single API call.

How does agentmail check crypto wallets against OFAC?

You pass a wallet address to the /sanctions endpoint (by query string, MCP tool, or CLI). agentmail looks it up against 782 OFAC-listed crypto addresses across EVM, Bitcoin, and Tron, and returns any matches with list, match_type, and confidence, plus a clean boolean. It runs in milliseconds so it fits inside an agent's payment path.

What data sources does agentmail use?

Crypto wallets come from the vile/ofac-sdn-list GitHub releases (multi-chain, refreshed daily). Names come from the US Treasury OFAC sdn.csv. Jurisdictions cover the 16 comprehensively sanctioned / embargoed regions. Everything is public, free, primary-source data.

Do I need an API key to start?

No. The free tier gives you 50 sanctions checks per day metered by IP address, with no signup or API key. For higher volume, all four tools, and an audit log, upgrade to a paid key from $19/month at /pricing.

How accurate is the sanctions data?

Wallet matches against the published OFAC address list are exact (confidence 1.0). Name matching uses fuzzy matching with a confidence score so your agent can set a review threshold. The underlying lists are refreshed daily, so you are screening against current, not stale, data.

What is Know Your Agent (KYA)?

Know Your Agent is the agent-era equivalent of KYC. Instead of asking who a customer is, KYA scores how much you should trust a counterparty AI agent before transacting with it, using evidence like wallet age, a linked domain, a public key, and a declared country. It sits above sanctions screening in the payment flow.

Can agents pay per-call with x402/USDC?

Yes. When x402 is enabled, an agent without an API key can attach an x402 payment to a /sanctions request and pay a tiny USDC amount per check. agentmail verifies the payment and returns the result, so agents can self-serve compliance per call.

Is agentmail open source?

Yes. The core toolkit is MIT licensed and self-hostable via pip install sanctions-mcp. You get all four tools locally for free; the hosted API at sanctionsai.dev adds the free tier, paid keys, and x402 per-call payments for production use.

Start screening in 30 seconds

50 free checks a day. No API key required.

Try the free wallet checker  See pricing