aml

Call this before every payment your agent makes. Free, no signup, no API key. To see it work first, call it with {"to":"0xd90e2f925DA726b50C4Ed8D0Fb90Ad053324F31b","network":"ethereum"}: that address is a known mixer, so the answer is decline with the matching list as evidence. Pass the payee address the agent is about to pay; get a machine-executable decision: allow | review | decline, plus verifiable evidence and retry semantics — use it as a gate: if the decision is not "allow", do not pay. On allow/review it also returns a verifiable compliance attestation you can attach to the settlement so the payment carries proof it passed OceanAlt's decision. Pass resource_url (the URL that returned the 402 quote) and OceanAlt also asks that site for its own payment quote: if the quote names a different payee, or the site cannot be checked, the decision is raised to review. A match only shows the site and the payee agree; it is not an endorsement of the seller. Every decision carries a receipt signed with Ed25519 that you can verify offline with the public key at https://oceanalt.com/.well-known/oceanalt-keys.json. Free, no API key.

{
  "type": "object",
  "properties": {
    "to": {
      "type": "string",
      "description": "Payee address the agent is about to pay: 0x (EVM), T… (TRON), Solana, Bitcoin or r… (XRP Ledger); list matching only: Monero (4…/8…), Bitcoin Cash (q…/p…, optional bitcoincash: prefix), Litecoin (ltc1…) or BNB Beacon Chain (bnb1…).",
      "examples": [
        "0xd90e2f925DA726b50C4Ed8D0Fb90Ad053324F31b"
      ]
    },
    "amountUsdc": {
      "type": "number",
      "description": "Amount in USDC (optional; recorded, not required for the decision)."
    },
    "purpose": {
      "type": "string",
      "description": "Short purpose/memo (optional)."
    },
    "network": {
      "type": "string",
      "enum": [
        "ethereum",
        "base",
        "bsc",
        "polygon",
        "arbitrum",
        "optimism",
        "avalanche",
        "arc"
      ],
      "description": "EVM chain, only for a 0x address. Leave it out for Tron, Solana, Bitcoin and XRP Ledger addresses: the chain is detected from the address."
    },
    "lang": {
      "type": "string",
      "enum": [
        "en",
        "zh"
      ],
      "description": "Language for human-readable fields (signals, note, advice). Defaults to English."
    },
    "task": {
      "type": "string",
      "description": "Optional payment intent: what this payment is for. Sending task, reasoning or maxAmountUsdc opts into a deterministic intent check; an empty intent is itself a finding (requires_information)."
    },
    "reasoning": {
      "type": "string",
      "description": "Optional payment intent: why this payee. Instruction-override phrases here route the payment to review."
    },
    "maxAmountUsdc": {
      "type": "number",
      "description": "Optional declared per-payment cap in USDC. amountUsdc above it → decline."
    },
    "resource_url": {
      "type": "string",
      "description": "Optional: the http(s) URL of the paid resource, i.e. the URL that returned the 402 payment quote. OceanAlt asks that origin for its own quote and checks whether it names this payee (origin binding)."
    }
  },
  "required": [
    "to"
  ]
}

{
  "type": "object",
  "properties": {
    "decision": {
      "type": "string",
      "enum": [
        "allow",
        "review",
        "decline"
      ]
    },
    "allow": {
      "type": "boolean",
      "description": "if (!allow) do not pay."
    },
    "address": {
      "type": "string"
    },
    "blocked": {
      "type": "boolean"
    },
    "lang": {
      "type": "string",
      "enum": [
        "en",
        "zh"
      ]
    },
    "screened_network": {
      "type": "string"
    },
    "screening_scope": {
      "type": "object",
      "description": "Present only for list-only chains: coverage is list_only, no on-chain analysis is performed.",
      "properties": {
        "chain": {
          "type": "string"
        },
        "coverage": {
          "type": "string",
          "enum": [
            "list_only"
          ]
        },
        "onchain_analysis": {
          "type": "boolean"
        },
        "note": {
          "type": "string"
        }
      }
    },
    "verdict": {
      "type": "string",
      "enum": [
        "clear",
        "caution",
        "risky",
        "uncertain",
        "unknown"
      ],
      "description": "clear means no match in the data held, not that it is safe. uncertain must never be treated as clear."
    },
    "risk": {
      "type": [
        "number",
        "null"
      ],
      "minimum": 0,
      "maximum": 100,
      "description": "Rounded to 10 when detail_level is coarse."
    },
    "risk_band": {
      "type": [
        "string",
        "null"
      ],
      "enum": [
        "low",
        "medium",
        "high",
        null
      ]
    },
    "signals": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "Human-readable. Do not branch on these."
    },
    "signal_keys": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "Language-independent keys. Branch on these. Full list at https://oceanalt.com/api/contract."
    },
    "evidence": {
      "type": "array",
      "items": {
        "type": "object"
      }
    },
    "reason_code": {
      "type": "string",
      "description": "Stable reason code; table at https://oceanalt.com/api/contract."
    },
    "signal_class": {
      "type": "string"
    },
    "retry": {
      "type": "string",
      "enum": [
        "non_retryable",
        "not_applicable",
        "policy_dependent_backoff",
        "retry_after_authorization",
        "retry_after_fix",
        "retryable_after_funding"
      ]
    },
    "retry_hint": {
      "type": "string"
    },
    "note": {
      "type": "string"
    },
    "detail_level": {
      "type": "string",
      "enum": [
        "full",
        "coarse"
      ]
    },
    "detail_note": {
      "type": "string"
    },
    "error": {
      "type": "string",
      "description": "Present only on an input error (isError: true)."
    },
    "code": {
      "type": "string",
      "description": "Input error code, e.g. unknown_network, network_address_mismatch, unparsable_url."
    },
    "accepted_networks": {
      "type": "array",
      "items": {
        "type": "string"
      }
    },
    "evaluated_at": {
      "type": "string",
      "format": "date-time"
    },
    "evidence_as_of": {
      "type": "object",
      "additionalProperties": {
        "type": "string"
      }
    },
    "evidence_oldest": {
      "type": [
        "string",
        "null"
      ]
    },
    "evidence_qualification": {
      "type": "object"
    },
    "cached": {
      "type": "boolean"
    },
    "requires_information": {
      "type": "object"
    },
    "intent_check": {
      "type": "object"
    },
    "payee_fulfillment": {
      "type": "object"
    },
    "settlement": {
      "type": "object",
      "properties": {
        "attestation_id": {
          "type": "string"
        },
        "verify_url": {
          "type": "string",
          "format": "uri"
        }
      }
    },
    "intelligence": {
      "type": "object"
    },
    "origin_binding": {
      "type": "object",
      "properties": {
        "payee_origin_binding": {
          "type": "string",
          "enum": [
            "bound",
            "unbound",
            "not_evaluated",
            "indeterminate"
          ]
        }
      }
    },
    "receipt": {
      "type": "object",
      "description": "Ed25519-signed decision receipt: { signed, signature_ed25519, note }. Verify with https://oceanalt.com/.well-known/oceanalt-keys.json."
    },
    "standard": {
      "type": "string",
      "format": "uri"
    }
  },
  "anyOf": [
    {
      "required": [
        "decision",
        "allow",
        "address",
        "verdict",
        "signal_keys",
        "reason_code",
        "retry"
      ]
    },
    {
      "required": [
        "reason_code",
        "code",
        "retry"
      ],
      "properties": {
        "reason_code": {
          "const": "invalid_input"
        }
      }
    }
  ]
}

Run an AML compliance screen on a single blockchain address BEFORE paying or receiving from it — the pre-payment check on a counterparty. Checks OFAC sanctions, known mixers, scam and phishing lists, stablecoin issuer freezes, and on-chain heuristics. Returns a verdict (clear | caution | risky), a 0–100 risk score, a blocked flag, and the matching signals — receipts, not a black-box score. A clear verdict means nothing was found in the data OceanAlt holds; it is not a statement that the address is safe. Depth varies by chain (see coverage.chains at /.well-known/agent-capabilities). Supports EVM (0x…), Tron (T…), Solana, Bitcoin and XRP Ledger (r…); Monero, Bitcoin Cash, Litecoin (ltc1) and BNB Beacon (bnb1) by list matching only. Free, no API key.

{
  "type": "object",
  "properties": {
    "address": {
      "type": "string",
      "description": "Address to screen. EVM: 0x + 40 hex. Tron: T + 33 base58. Solana: base58 public key. Bitcoin: bc1… / 1… / 3…. XRP Ledger: r…. List matching only: Monero (4…/8…, 95 chars), Bitcoin Cash (q…/p…, optional bitcoincash: prefix), Litecoin (ltc1…), BNB Beacon Chain (bnb1…).",
      "examples": [
        "0xd90e2f925DA726b50C4Ed8D0Fb90Ad053324F31b"
      ]
    },
    "network": {
      "type": "string",
      "enum": [
        "ethereum",
        "base",
        "bsc",
        "polygon",
        "arbitrum",
        "optimism",
        "avalanche",
        "arc"
      ],
      "description": "EVM chain (optional; auto-defaults to ethereum; ignored for Tron, Solana, Bitcoin and XRP Ledger)."
    },
    "lang": {
      "type": "string",
      "enum": [
        "en",
        "zh"
      ],
      "description": "Language for human-readable fields (signals, note, advice). Defaults to English."
    }
  },
  "required": [
    "address"
  ]
}

{
  "type": "object",
  "properties": {
    "blocked": {
      "type": "boolean"
    },
    "provider": {
      "type": "string"
    },
    "screened_network": {
      "type": "string",
      "description": "The chain actually screened: tron, solana, bitcoin and xrpl follow the address format; an 0x address uses network, or ethereum when none was given. List-only chains (monero, bitcoin-cash, litecoin, bnb-beacon, and dogecoin, dash, zcash etc. for list hits) are named here and described in screening_scope."
    },
    "screening_scope": {
      "type": "object",
      "description": "Present only for list-only chains: coverage is list_only, no on-chain analysis is performed.",
      "properties": {
        "chain": {
          "type": "string"
        },
        "coverage": {
          "type": "string",
          "enum": [
            "list_only"
          ]
        },
        "onchain_analysis": {
          "type": "boolean"
        },
        "note": {
          "type": "string"
        }
      }
    },
    "requires_information": {
      "type": "object"
    },
    "verdict": {
      "type": "string",
      "enum": [
        "clear",
        "caution",
        "risky",
        "uncertain",
        "unknown"
      ],
      "description": "clear means no match in the data held, not that it is safe. uncertain must never be treated as clear."
    },
    "risk": {
      "type": [
        "number",
        "null"
      ],
      "minimum": 0,
      "maximum": 100,
      "description": "Rounded to 10 when detail_level is coarse."
    },
    "risk_band": {
      "type": [
        "string",
        "null"
      ],
      "enum": [
        "low",
        "medium",
        "high",
        null
      ]
    },
    "signals": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "Human-readable. Do not branch on these."
    },
    "signal_keys": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "Language-independent keys. Branch on these. Full list at https://oceanalt.com/api/contract."
    },
    "evidence": {
      "type": "array",
      "items": {
        "type": "object"
      }
    },
    "reason_code": {
      "type": "string",
      "description": "Stable reason code; table at https://oceanalt.com/api/contract."
    },
    "signal_class": {
      "type": "string"
    },
    "retry": {
      "type": "string",
      "enum": [
        "non_retryable",
        "not_applicable",
        "policy_dependent_backoff",
        "retry_after_authorization",
        "retry_after_fix",
        "retryable_after_funding"
      ]
    },
    "retry_hint": {
      "type": "string"
    },
    "note": {
      "type": "string"
    },
    "detail_level": {
      "type": "string",
      "enum": [
        "full",
        "coarse"
      ]
    },
    "detail_note": {
      "type": "string"
    },
    "error": {
      "type": "string",
      "description": "Present only on an input error (isError: true)."
    },
    "code": {
      "type": "string",
      "description": "Input error code, e.g. unknown_network, network_address_mismatch, unparsable_url."
    },
    "accepted_networks": {
      "type": "array",
      "items": {
        "type": "string"
      }
    },
    "evaluated_at": {
      "type": "string",
      "format": "date-time"
    },
    "evidence_as_of": {
      "type": "object",
      "additionalProperties": {
        "type": "string"
      }
    },
    "evidence_oldest": {
      "type": [
        "string",
        "null"
      ]
    },
    "evidence_qualification": {
      "type": "object"
    },
    "cached": {
      "type": "boolean"
    }
  },
  "anyOf": [
    {
      "required": [
        "verdict",
        "blocked",
        "signal_keys",
        "reason_code",
        "retry"
      ]
    },
    {
      "required": [
        "reason_code",
        "code",
        "retry"
      ],
      "properties": {
        "reason_code": {
          "const": "invalid_input"
        }
      }
    }
  ]
}

Screen a payment ENDPOINT (URL or domain) before calling it — the half that address screening cannot answer. In x402 the agent discovers a URL first, receives a 402, and only then learns where to pay: if that endpoint is spoofed, the payee address it hands back is freshly generated and appears on no sanctions list. Checks the hostname and its parent domains against phishing-domain intelligence plus hostname shape signals (bare IP, punycode homograph, deep subdomain nesting, free hosting). Returns clear | caution | risky | unknown with language-independent signal_keys. A clear verdict means no match was found, NOT that the endpoint is safe — freshly registered phishing hosts always precede any list. Use together with screen_address. Free, no API key.

{
  "type": "object",
  "properties": {
    "url": {
      "type": "string",
      "description": "Full URL or bare domain of the payment endpoint, e.g. https://pay.example.com/x402 or pay.example.com"
    },
    "lang": {
      "type": "string",
      "enum": [
        "en",
        "zh"
      ],
      "description": "Language for human-readable fields. Defaults to English."
    }
  },
  "required": [
    "url"
  ]
}

{
  "type": "object",
  "properties": {
    "input": {
      "type": "string"
    },
    "host": {
      "type": "string"
    },
    "verdict": {
      "type": "string",
      "enum": [
        "clear",
        "caution",
        "risky",
        "uncertain",
        "unknown"
      ],
      "description": "clear means no match in the data held, not that it is safe. uncertain must never be treated as clear."
    },
    "risk": {
      "type": [
        "number",
        "null"
      ],
      "minimum": 0,
      "maximum": 100,
      "description": "Rounded to 10 when detail_level is coarse."
    },
    "risk_band": {
      "type": [
        "string",
        "null"
      ],
      "enum": [
        "low",
        "medium",
        "high",
        null
      ]
    },
    "signals": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "Human-readable. Do not branch on these."
    },
    "signal_keys": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "Language-independent keys. Branch on these. Full list at https://oceanalt.com/api/contract."
    },
    "evidence": {
      "type": "array",
      "items": {
        "type": "object"
      }
    },
    "reason_code": {
      "type": "string",
      "description": "Stable reason code; table at https://oceanalt.com/api/contract."
    },
    "signal_class": {
      "type": "string"
    },
    "retry": {
      "type": "string",
      "enum": [
        "non_retryable",
        "not_applicable",
        "policy_dependent_backoff",
        "retry_after_authorization",
        "retry_after_fix",
        "retryable_after_funding"
      ]
    },
    "retry_hint": {
      "type": "string"
    },
    "note": {
      "type": "string"
    },
    "detail_level": {
      "type": "string",
      "enum": [
        "full",
        "coarse"
      ]
    },
    "detail_note": {
      "type": "string"
    },
    "error": {
      "type": "string",
      "description": "Present only on an input error (isError: true)."
    },
    "code": {
      "type": "string",
      "description": "Input error code, e.g. unknown_network, network_address_mismatch, unparsable_url."
    },
    "accepted_networks": {
      "type": "array",
      "items": {
        "type": "string"
      }
    },
    "listed_as": {
      "type": "object",
      "description": "Present when the host or a parent domain is on a phishing list: source, label, firstSeen, lastSeen, delistedAt."
    },
    "imitates": {
      "type": "object",
      "description": "Present when the host imitates a known brand.",
      "properties": {
        "brand": {
          "type": "string"
        },
        "label": {
          "type": "string"
        },
        "official": {
          "type": "string"
        }
      },
      "required": [
        "brand",
        "label",
        "official"
      ]
    }
  },
  "anyOf": [
    {
      "required": [
        "host",
        "verdict",
        "signal_keys",
        "reason_code",
        "retry"
      ]
    },
    {
      "required": [
        "reason_code",
        "code",
        "retry"
      ],
      "properties": {
        "reason_code": {
          "const": "invalid_input"
        }
      }
    }
  ]
}

Call this before paying because an email, invoice or chat message asked you to. Pass what you received: raw headers if you have them, the From line, subject and body (or body_html), and the payee address if you already extracted one. OceanAlt checks whether the sender is who it claims to be (SPF/DKIM/DMARC results, a display name that names another domain, Reply-To sent elsewhere), whether the sender domain or any link imitates a brand or is a known phishing host, whether the payee address is listed or differs from previous_pay_to, and whether the text pressures the reader, announces changed payment details, or carries instructions aimed at an AI. Returns allow | review | decline with findings. On decline, do not pay from this message; confirm through a channel you already trust. The text is processed in memory and not stored. Free, no API key.

{
  "type": "object",
  "properties": {
    "headers": {
      "type": "string",
      "description": "Raw email headers, if available (needed to check SPF/DKIM/DMARC)"
    },
    "from": {
      "type": "string",
      "description": "The From line, e.g. \"Acme Billing\" <[email protected]>"
    },
    "reply_to": {
      "type": "string",
      "description": "The Reply-To line, if any"
    },
    "subject": {
      "type": "string"
    },
    "body": {
      "type": "string",
      "description": "Plain-text body, invoice text or chat message"
    },
    "body_html": {
      "type": "string",
      "description": "HTML body, if available (lets OceanAlt compare link text with where links really go)"
    },
    "pay_to": {
      "type": "string",
      "description": "The payee address the message asks you to pay, if you already extracted it"
    },
    "network": {
      "type": "string",
      "description": "Network of pay_to, e.g. base, ethereum, tron, solana"
    },
    "previous_pay_to": {
      "type": "string",
      "description": "The address you paid this requester last time, if any"
    },
    "expected_sender_domain": {
      "type": "string",
      "description": "The domain this requester normally sends from, if you know it"
    },
    "lang": {
      "type": "string",
      "enum": [
        "en",
        "zh"
      ],
      "description": "Language for human-readable fields. Defaults to English."
    }
  }
}

{
  "type": "object",
  "properties": {
    "decision": {
      "type": "string",
      "enum": [
        "allow",
        "review",
        "decline"
      ]
    },
    "reason_code": {
      "type": "string"
    },
    "signal_keys": {
      "type": "array",
      "items": {
        "type": "string"
      }
    },
    "findings": {
      "type": "array",
      "items": {
        "type": "object"
      }
    }
  },
  "anyOf": [
    {
      "required": [
        "decision",
        "reason_code",
        "signal_keys",
        "findings"
      ]
    },
    {
      "required": [
        "reason_code",
        "code",
        "retry"
      ],
      "properties": {
        "reason_code": {
          "const": "invalid_input"
        }
      }
    }
  ]
}

Answers a different question from address screening. Screening asks whether an address is risky; this asks how much damage the agent on the other side could do if it were talked into something. Returns that party's self-attestation against the OceanAlt Agent Control Baseline, split into two sets that must NOT be conflated: verified_by_oceanalt (enforced by the gateway on every payment — provable) and self_claimed (what they state about their own side — NOT verified by OceanAlt). Most parties have not attested: found:false means no information, not a bad signal.

{
  "type": "object",
  "properties": {
    "entity": {
      "type": "string",
      "description": "The counterparty's entity name."
    },
    "agentId": {
      "type": "string",
      "description": "Their agent id, if you have that instead."
    }
  }
}

File your operator's control-baseline attestation — the counterpart to counterparty_control_baseline. That tool asks what controls the OTHER side runs; this one publishes what YOUR side runs, so payers can see it before settling with you. No account, no key, one call. Gaps are allowed and expected: answer false where a control is not in place and describe how you plan to close it in gapPlan. A filing with declared gaps is worth far more than no filing — it lets a payer decide against a known shape instead of a blank. Get the control ids from the baseline list first. Only file for a party you are actually authorised to speak for.

{
  "type": "object",
  "properties": {
    "entity": {
      "type": "string",
      "description": "The accountable party's legal or commonly-used name, e.g. \"Acme Robotics Ltd\". This is who the attestation is about — not your agent's name."
    },
    "answers": {
      "type": "object",
      "description": "Map of control id to boolean, e.g. {\"ACB-1.1\": true, \"ACB-2.1\": false}. Control ids come from the baseline list (see baseline_controls)."
    },
    "gapPlan": {
      "type": "string",
      "description": "For controls answered false: how and when you plan to close them. Plain text."
    },
    "agentId": {
      "type": "string",
      "description": "Optional. If this party already has an agent registered with OceanAlt, link the attestation to it."
    },
    "contact": {
      "type": "string",
      "description": "Optional contact for follow-up. Not published."
    }
  },
  "required": [
    "entity",
    "answers"
  ]
}

Fetch the OceanAlt Agent Control Baseline: the list of controls an agent operator is expected to run before it is allowed to move money, each answerable yes or no. Call this before attest_control_baseline so you file against real control ids. Each control carries which gate enforces it and why it exists.

{
  "type": "object",
  "properties": {},
  "required": []
}

Resolves who stands behind a paying agent: agent -> principal -> mandate -> credential -> wallet. Each link reports whether it holds; completeness counts how many do (a factual count, not a score). Wherever the chain breaks is where accountability stops. Publication is opt-in and only posture is exposed (that a ceiling exists, never its value), so found:false means the agent has not published — absence of information, not a bad signal.

{
  "type": "object",
  "properties": {
    "agentId": {
      "type": "string",
      "description": "The agent id to resolve."
    }
  },
  "required": [
    "agentId"
  ]
}

Return a representative sample of addresses on OceanAlt's reviewed risk list — OFAC-sanctioned, known mixers, and scam/phishing — each with its source category and reason. Takes no arguments. Free, no API key.

{
  "type": "object",
  "properties": {}
}

Before paying an x402 402 response, check that its payment requirements (payTo, amount, asset, network, resource) were signed by the seller and not altered in transit by a proxy, CDN, SDK or another tool. x402 v2 carries the requirements in the PAYMENT-REQUIRED response header (base64 JSON): pass either the decoded JSON or the raw base64 value as body. Optionally pass expect:{payTo, amount} — the address and amount you are about to pay — and the tool also checks they match what was signed. verified:false with reason_code no_signature means the seller does not sign (unprotected, not necessarily malicious); digest_mismatch or signature_invalid means the response was tampered with — do not pay.

{
  "type": "object",
  "properties": {
    "body": {
      "description": "The decoded PAYMENT-REQUIRED header JSON (object), or the raw base64 header value (string)."
    },
    "keys_url": {
      "type": "string",
      "description": "Override the seller's public-key URL (defaults to extensions.signedRequirements.keys_url)."
    },
    "expect": {
      "type": "object",
      "properties": {
        "payTo": {
          "type": "string"
        },
        "amount": {
          "type": "string"
        }
      },
      "description": "What you are about to pay; checked against the signed fields."
    }
  },
  "required": [
    "body"
  ]
}

Anti blind-signing. EVM: decodes what a transaction's calldata will actually do (ERC-20 transfer/approve/permit, setApprovalForAll, ownership transfer, native transfer). Solana: decodes a whole base64 transaction (SPL Token / Token-2022 Transfer, TransferChecked, Approve, SetAuthority, CloseAccount, Burn; System Transfer / Assign; ATA creation). Compares it with what you believe you are doing. EVM: pass intent:{action:'pay', to, amount} plus contract (the transaction's to) and data (hex calldata). Solana: pass network:'solana' and transaction (base64) instead of data. decision match = does what you declared; mismatch = different recipient/amount/asset, or an approval / authority change instead of a payment — do not sign; unknown = could not decode (including address-lookup-table accounts), which is not the same as safe.

{
  "type": "object",
  "properties": {
    "intent": {
      "type": "object",
      "properties": {
        "action": {
          "type": "string",
          "enum": [
            "pay"
          ]
        },
        "to": {
          "type": "string",
          "description": "EVM: recipient address. Solana: wallet or token account."
        },
        "amount": {
          "type": "string",
          "description": "Base units (e.g. 10 USDC = 10000000)."
        },
        "asset": {
          "type": "string",
          "description": "EVM: symbol/contract (optional). Solana: mint address (optional, checked against TransferChecked)."
        }
      },
      "required": [
        "action",
        "to"
      ]
    },
    "contract": {
      "type": "string",
      "description": "EVM only: the transaction's `to` field (token contract for ERC-20 payments, or the recipient for native transfers)."
    },
    "data": {
      "type": "string",
      "description": "EVM only: 0x-prefixed hex calldata."
    },
    "value": {
      "type": "string",
      "description": "EVM only: native value in wei (optional)."
    },
    "network": {
      "type": "string",
      "description": "'solana' to decode a Solana transaction; EVM chain name or CAIP-2 id otherwise (optional)."
    },
    "transaction": {
      "type": "string",
      "description": "Solana only: base64-serialized transaction or message."
    }
  }
}

The receiving side's check before settlement. Given the payee's registry id (sid) and, optionally, the payer, amount and purpose, returns accept / decline / hold_request_info / not_ready with reason codes, the fields to request, evidence and a signature. Rule-based, not a model's opinion. Same logic as POST https://oceanalt.com/api/payee/decide.

{
  "type": "object",
  "properties": {
    "payee": {
      "type": "string",
      "description": "The payee's registry id (sid)."
    },
    "payer": {
      "type": "object",
      "properties": {
        "agentId": {
          "type": "string"
        },
        "address": {
          "type": "string"
        }
      },
      "description": "Who is paying (optional)."
    },
    "amountUsdc": {
      "type": "number",
      "description": "Amount in USDC (optional)."
    },
    "purpose": {
      "type": "string",
      "description": "What the payment is for (optional)."
    },
    "network": {
      "type": "string",
      "description": "Chain of the payment (optional)."
    }
  },
  "required": [
    "payee"
  ]
}

Everything OceanAlt holds about an address as public facts, in one Ed25519-signed bundle you can verify offline: screening verdict with evidence and freshness, profile signals, one-hop relations to listed addresses, fulfillment receipt stats and coverage. A witness, not a prosecutor: no conclusions about people. Same as GET https://oceanalt.com/api/evidence/bundle.

{
  "type": "object",
  "properties": {
    "address": {
      "type": "string"
    },
    "network": {
      "type": "string",
      "description": "EVM chain name (optional, default ethereum)."
    }
  },
  "required": [
    "address"
  ]
}