SENTINEL Compliance Intelligence

io.github.INJprotocolPublished by GitHub account INJprotocolv1.0.0Updated Oct 24, 2026

AML/CFT compliance oracle: wallet screening, sanctions, PEPs, jurisdiction risk.

VerifiedStreamable HTTPWeb executableFinanceSecurity & MonitoringBusiness & Commerce

Overview

AI-generated overview

Lets an assistant run sanctions and AML screening, wallet and cross-border payment risk checks, and produce due-diligence and Travel Rule results.

What you can do
Provides AML and counter-terrorist-financing checks: screening names and aliases against sanctions, politically exposed person, wanted and debarment lists, and checking blockchain addresses against sanctioned, frozen and ransomware wallet lists. It also looks up country AML risk (FATF status, corruption and Basel indices), searches Mauritius registry records, profiles a person or company in one due-diligence call with a 0-100 risk score, screens both sides of a cross-border payment, and creates or verifies Travel Rule packets for crypto transfers. Watchlist monitors re-screen a wallet or name every six hours and can call a webhook on status change, and an agent-identity check assesses an AI-
When to use it
Use it when an assistant must run sanctions or AML checks on people, companies, wallet addresses or cross-border payments, look up FATF and country risk levels or Mauritius registry records, or set up short-term monitoring of an address or name.
Requirements
Needs network access to a remote endpoint; the manifest declares no authentication, environment variables or headers. Some tools require a blockchain address, person or company name, or country code, and the monitoring tools require a public HTTPS webhook URL.
Before you install
Names, company names, wallet addresses and countries of screened parties are sent to a third-party service. create_watchlist_monitor calls a webhook URL you supply and relies on HMAC signing to authenticate it. create_travel_rule_packet stores transfer-party data, and cancel_watchlist_monitor permanently deletes a monitor and its webhook settings with no resume. Risk scores and recommendations are advisory, not a compliance determination.

Installation

In SourceWeft

  1. Open SENTINEL Compliance Intelligence in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.INJprotocol%2Fsentinel-compliance/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "sentinel-compliance-intelligence": {
      "type": "http",
      "url": "https://mru-oracle.com/mcp"
    }
  }
}

README

This repository has no README.

Tools

12

screen_entity

Screen a Name Against Sanctions & Watchlists

Screen one person or organisation name, including aliases, against sanctions lists (US, EU, UK, UN, Canada, Australia and national lists aggregated by OpenSanctions), politically exposed persons, wanted persons (incl. Interpol Red Notices), development-bank and US debarments, crypto-linked entities, ransomware groups and OFAC-listed vessels. Use it for a quick list check of a name; use run_due_diligence for a scored profile with country and Mauritius registry context, search_mauritius_registry for Mauritius licences, offshore records and local PEPs, and screen_wallet for blockchain addresses. Matching is case-insensitive substring: each hit is labelled exact or partial, and partial hits need human review. The result states when each list was last updated (lists_as_of). Costs $0.002 USDC per successful call via x402 on Base; unpaid calls return an x402 PaymentRequired result and failed calls are not charged.

Parameterslistnamerequiredlimit

screen_wallet

Screen a Crypto Wallet Address

Check a blockchain address (any chain) against active sanctioned and frozen addresses: OFAC SDN, OpenSanctions, UK, Circle USDC and Tether USDT freeze lists, and Ransomwhere ransomware wallets. Use it before sending or accepting funds; owner_name also screens the owner's name and returns a composite risk (critical when the address is listed, elevated when only the name matched). For names alone use screen_entity, for a Travel Rule record create_travel_rule_packet, and for an EVM agent's on-chain reputation verify_agent_identity. Matching is exact and case-insensitive on the full address: clear means the address itself is not listed, not that its counterparties are clean. The result states when each list was last updated (lists_as_of). Costs $0.001 USDC, or $0.003 with owner_name, via x402 on Base; unpaid calls return an x402 PaymentRequired result and failed calls are not charged.

Parametersaddressrequiredowner_name

get_jurisdiction_risk

Get a Country's AML Risk Profile

Look up one country's anti-money-laundering risk: FATF status (black/grey list), Basel AML Index, Corruption Perceptions Index, EU and US high-risk designations, tax-haven flag, and a derived risk level (critical, high, medium, low or standard). Use it to assess a counterparty's country or a payment corridor; it takes one country code per call, so check each end of a corridor separately. For a named person or company use run_due_diligence, which already assesses the countries found in its hits. A code not in the dataset returns found=false with risk_level unknown (a successful, charged call). Costs $0.001 USDC per successful call via x402 on Base; unpaid calls return an x402 PaymentRequired result and failed calls are not charged.

Parameterscountry_coderequired

search_mauritius_registry

Search Mauritius Regulatory & Offshore Records

Search Mauritius-specific records by name: Financial Services Commission licensees (category fsc_licensee), licensed banks, insurers, payment and other financial institutions (licensed_entity), offshore entities from the ICIJ leak databases (offshore_entity), local politically exposed persons (pep) and adverse-media mentions (adverse_media); omit category to search all. Use it for Mauritius counterparties or to confirm a licence; use screen_entity for global sanctions and watchlists, and run_due_diligence to combine both with a risk score. Case-insensitive substring match on the name; an offshore-leak or adverse-media record is a lead to investigate, not proof of wrongdoing. The result states when each list was last updated (lists_as_of). Costs $0.005 USDC per successful call via x402 on Base; unpaid calls return an x402 PaymentRequired result and failed calls are not charged.

Parametersnamerequiredlimitcategory

run_due_diligence

Run Entity Due Diligence with a Risk Score

Profile one person or company in a single call: global watchlist screening, AML risk of every country found in the hits, Mauritius registry records (with their FSC-licensing and PEP-role links), and a composite 0-100 risk score with its factors. Use it for onboarding (KYC/KYB) or enhanced due diligence; use screen_entity when a list check is enough and screen_cross_border_payment for both parties of a payment. Names match as case-insensitive substrings; exact matches weigh far more than partial ones, which alone only reach review level. Bank of Mauritius exchange rates are added when countries are found, unless include_forex is false. The score is a triage aid from public lists, not a legal determination. Limited to 10 calls per minute per client. The result states when each list was last updated (lists_as_of). Costs $0.010 USDC per successful call via x402 on Base; unpaid calls return an x402 PaymentRequired result and failed calls are not charged.

Parametersnamerequiredinclude_forex

screen_cross_border_payment

Pre-Screen a Cross-Border Payment

Screen both parties of a payment before it is sent: sender and receiver names against global watchlists, their countries' AML risk, and an optional Bank of Mauritius exchange rate for the corridor (set currency_from; currency_to defaults to MUR). Returns PROCEED (risk score below 15), REVIEW (15-39, minor indicators such as partial name matches), FLAG (40-74, enhanced due diligence) or BLOCK (75+, e.g. an exact sanctions match: stop and escalate), with a reason and each party's risk. Use it for fiat or crypto payments where you have names; use screen_wallet for wallet addresses only, and create_travel_rule_packet for a stored, verifiable Travel Rule record. The result states when each list was last updated (lists_as_of). Costs $0.008 USDC per successful call via x402 on Base; unpaid calls return an x402 PaymentRequired result and failed calls are not charged.

Parameterscurrency_tosender_namerequiredcurrency_fromreceiver_namerequiredsender_countryreceiver_country

create_travel_rule_packet

Create a Verifiable Travel Rule Screening Packet

Screen the originator and beneficiary of a crypto transfer (wallets, plus names and countries when given) and store the result as a Travel Rule packet. The strictest threshold among the parties' countries applies (EU/EEA 0, Japan about 700, otherwise the FATF Recommendation 16 de-minimis of 1,000 USD); pass amount_usd to learn whether it applies. Returns a packetId, a free verification URL and an EdDSA-signed attestation valid for 90 days for the counterparty VASP. Use it when a transfer needs a Travel Rule record; use screen_wallet for a quick address check, and verify_travel_rule_packet to check a packet you received. Each call stores a new packet; names are stored only as keyed hashes and never returned, wallet addresses are stored. Costs $0.005 USDC per successful call via x402 on Base; unpaid calls return an x402 PaymentRequired result and failed calls are not charged.

Parameterspurposeamount_usdoriginator_namebeneficiary_nameoriginator_addressrequiredoriginator_countrybeneficiary_addressrequiredbeneficiary_country

verify_travel_rule_packet

Verify a Travel Rule Packet (Free)

Verify a Travel Rule packet you received from a counterparty: returns its stored risk level, recommendation, flags, threshold result and masked wallet addresses. Pass the packet_id you received and, optionally, the originator and beneficiary names and wallet addresses you hold; each is compared with what was screened and reported only as match true/false, so names are never revealed. Use it on the beneficiary side after receiving a packetId; use create_travel_rule_packet to create one. Free, no payment needed, limited to 60 calls per minute per client; an unknown packet_id returns a not-found error.

Parameterspacket_idrequiredoriginator_namebeneficiary_nameoriginator_addressbeneficiary_address

create_watchlist_monitor

Monitor a Wallet or Name for 30 Days

Start 30 days of watchlist monitoring for one wallet address (type wallet) or one person/company name (type entity): it is screened now, re-screened every 6 hours against the latest lists, and an optional HMAC-signed webhook (a public HTTPS URL) is called whenever its status changes between clear, review and alerted. Use it for ongoing monitoring after onboarding; use screen_entity or screen_wallet for a one-off check, check_watchlist_monitors to read statuses, and cancel_watchlist_monitor to stop. Each call creates a new monitor. The response contains the monitor id and, if a webhook is set, its signing secret, both shown only once: store them. Costs $0.010 USDC per successful call via x402 on Base; unpaid calls return an x402 PaymentRequired result and failed calls are not charged.

Parameterstyperequiredchainlabelvaluerequiredwebhook_url

check_watchlist_monitors

Check Watchlist Monitor Statuses

Read the status of watchlist monitors created with create_watchlist_monitor. With exactly one id, the target is re-screened against the latest lists right now (and its webhook fires if the status changed); with 2-20 ids, the stored statuses from the last 6-hourly re-screen are returned without re-screening. Use one id when you need a fresh answer before acting and several ids for a periodic sweep; for a name or wallet without a monitor use screen_entity or screen_wallet, and to stop monitoring use cancel_watchlist_monitor. Unknown ids are reported as not found. Costs $0.001 USDC for one id or $0.002 for 2-20 ids via x402 on Base; unpaid calls return an x402 PaymentRequired result and failed calls are not charged.

Parametersmonitor_idsrequired

cancel_watchlist_monitor

Cancel a Watchlist Monitor (Free)

Permanently stop a watchlist monitor: re-screening ends, its webhook URL is deleted and later checks report status cancelled. It cannot be resumed; create a new monitor with create_watchlist_monitor instead. Use it when monitoring is no longer needed or the webhook endpoint is retired; to read a monitor's status use check_watchlist_monitors. Pass the MON- id returned when the monitor was created: it is the only credential, so anyone holding it can cancel the monitor. Free, limited to 30 calls per minute per client.

Parametersmonitor_idrequired

verify_agent_identity

Verify an AI Agent's Wallet (Know Your Agent, Free)

Run a Know-Your-Agent check on an AI agent's EVM wallet: ERC-8004 agent-registry lookup and operator, sanctions screening (result clear or sanctioned), on-chain behaviour (wallet age, activity, fund-flow taint, mixer and scam contacts, threat-intel alerts), a 0-100 risk score with its band (minimal, low, moderate, elevated, high or critical), and a signed W3C Verifiable Credential plus a sanctions-list Merkle proof that third parties can verify. Use it before paying, hiring or accepting payment from an autonomous agent, passing that agent's 0x wallet address; for an address on another chain, or a list-only check, use screen_wallet. Free, limited to 60 calls per minute per client; it reads public blockchain data live, so it can take several seconds and results change as the wallet transacts.

Parametersaddressrequired

Version history

1
  1. v1.0.0LatestSep 16, 2026

Score

75% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • License10 pts

    Declare a license in the repository or the registry entry.