Frequently asked questions

OFAC sanctions screening for AI agents - the practical questions.

Quick answer: agentmail is an OFAC sanctions screening API built for AI agents that move money autonomously. You call GET /sanctions?wallet=0x... before every payment. If the response says "clean": true, the counterparty is safe to pay. If "clean": false, your agent halts. It checks 947 sanctioned crypto wallets, 19,218 SDN names, and 16 embargoed jurisdictions in under 100ms. The free tier gives you 5 checks/day with no API key — try it now.

By · Reviewed against OFAC SDN list (July 2026) · · MIT-licensed, self-hostable via pip install sanctions-mcp

What is OFAC sanctions screening for AI agents?

OFAC sanctions screening is the process of checking whether a person, entity, wallet, or country your AI agent is about to transact with appears on the US Treasury's Specially Designated Nationals (SDN) list or an embargoed-jurisdiction list. For autonomous agents that move money, screening must happen programmatically, before every payment. agentmail exposes this as a single API call.

How does agentmail check crypto wallets against OFAC?

You pass a wallet address to the /sanctions endpoint (by query string, MCP tool, or CLI). agentmail looks it up against 947 OFAC-listed crypto addresses across EVM, Bitcoin, and Tron, and returns any matches with list, match_type, and confidence, plus a clean boolean. It runs in milliseconds so it fits inside an agent's payment path.

What data sources does agentmail use?

Crypto wallets come from the vile/ofac-sdn-list GitHub releases (multi-chain, refreshed daily). Names come from the US Treasury OFAC sdn.csv. Jurisdictions cover the 16 comprehensively sanctioned / embargoed regions. Everything is public, free, primary-source data.

Do I need an API key to start?

No. The free tier gives you 5 sanctions checks/day metered by IP address, with no signup or API key. For higher volume, all four tools, and an audit log, upgrade to a paid key from $19/month at /pricing.

How accurate is the sanctions data?

Wallet matches against the published OFAC address list are exact (confidence 1.0). Name matching uses fuzzy matching with a confidence score so your agent can set a review threshold. The underlying lists are refreshed daily, so you are screening against current, not stale, data.

What is Know Your Agent (KYA)?

Know Your Agent is the agent-era equivalent of KYC. Instead of asking who a customer is, KYA scores how much you should trust a counterparty AI agent before transacting with it, using evidence like wallet age, a linked domain, a public key, and a declared country. It sits above sanctions screening in the payment flow.

Can agents pay per-call with x402/USDC?

Yes. When x402 is enabled, an agent without an API key can attach an x402 payment to a /sanctions request and pay a tiny USDC amount per check. agentmail verifies the payment and returns the result, so agents can self-serve compliance per call.

Is agentmail open source?

Yes. The core toolkit is MIT licensed and self-hostable via pip install sanctions-mcp. You get all four tools locally for free; the hosted API at sanctionsai.dev adds the free tier, paid keys, and x402 per-call payments for production use.

Start screening in 30 seconds

5 checks/day free. No API key required.

Try the free wallet checker  See pricing