OFAC fines start at $356,000 per violation. The agent that made the payment is yours. So is the liability.
No spam. 50 free checks/day. Unsubscribe anytime.
I was setting up an autonomous payment system — let the agent handle vendor payments, subscriptions, contractor payouts. Cool, right?
Then I asked myself: what happens when it pays the wrong wallet?
I searched for a compliance layer that agents could call before sending money. There was nothing. The big payment rails (x402, AP2, Coinbase AgentKit, Stripe ACP) — none of them check OFAC. None of them do Know-Your-Agent. None of them score a transaction for sanctions risk before it moves.
Today, agentmail screens every counterparty against live OFAC SDN data, scores every transaction for risk, verifies counterparty agents, and opens disputes when something goes wrong. All in the milliseconds before money moves.
Agents can move money. Nobody checks where it's going. The compliance layer between "send" and "sanctioned" doesn't exist — except here.
Agent calls payment API. Payment API moves USDC. No sanctions check. No wallet screening. No risk scoring. You find out when OFAC calls.
Agent calls payment API → agent calls agentmail·sanctions_check → "CLEAN: false" → Payment REJECTED. The fine never happens because the transaction never completed.
One integration. Four tools. Zero compliance surprises.
If an agentmail-sanctioned transaction results in an OFAC violation despite passing our checks, we'll cover the first $10,000 of your legal fees. We're that confident in our data.
One command. Zero config. MCP server, CLI, and SDK in a single package.
Call from any agent framework. LangChain, CrewAI, AutoGPT, or raw curl. JSON in, JSON out.
Run on Fly.io (hosted) or pip install and run locally. Same data, same API, same guarantees.
Full OFAC screening in under 100ms. Your agent never waits. Money never moves unchecked.
Not for the fear. (But the fear is real.)
Every day, more autonomous agents get the ability to send money. Every day, more sanctioned wallets receive funds from unchecked systems. The question isn't if an agent will pay a sanctioned counterparty. It's when. And whose API key that fine lands on.
Screen your first wallet now →Your agent pays whoever it's told to pay. If a vendor's wallet gets compromised, or if you're onboarding new contractors, the agent doesn't know the difference. It pays. agentmail is the check before the send.
No. x402, AP2, Coinbase AgentKit, and Stripe ACP explicitly do not do sanctions screening, Know-Your-Agent, or transaction risk scoring. They move money. You're responsible for where it goes.
We sync the OFAC SDN list hourly. If the Treasury adds a wallet at 2:47 PM, agentmail catches it at 3:00 PM.
Yes. pip install sanctions-mcp runs entirely on your infrastructure. No data leaves your network. Full OFAC data bundled with the package.
risk_score returns a confidence level (0.0-1.0). You set your own threshold. We also provide dispute_open for when a transaction needs manual review or escalation.
50 free checks per day. No credit card. No signup. Just one curl command.
Start now →