publicaml
Server Details
Free crypto AML/KYT screening for BTC/ETH/BSC/TRON — risk score, sanctions, source of funds.
- Status
- Healthy
- Last Tested
- Transport
- Streamable HTTP
- URL
- Repository
- saloprj/publicaml-examples
- GitHub Stars
- 0
Available Tools
3 toolslist_counterpartiesList counterpartiesARead-onlyIdempotentInspect
List the counterparties an address has transacted with — optionally filtered by entity category (cex, mixer, gambling, bridge, ...). Set with_risk=true to attach AML risk per counterparty. Read-only: it only lists existing on-chain counterparties, it never writes anything.
| Name | Required | Description | Default |
|---|---|---|---|
| chain | Yes | Blockchain: bitcoin, ethereum, bsc or tron. | |
| limit | No | Max counterparties to return. | |
| address | Yes | The wallet whose counterparties to look at. | |
| category | No | Entity type to match: cex, mixer, gambling, bridge, etc. | |
| with_risk | No | Attach aml_score/risk_level/sanctioned to each counterparty. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already provide readOnlyHint=true, idempotentHint=true, and destructiveHint=false. The description's 'Read-only... never writes anything' restates that profile, and 'only lists existing on-chain counterparties' adds a little scope context, but there are no additional behavioral disclosures such as rate limits or pagination behavior. No contradiction with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is three short sentences, with the core action front-loaded, options in the middle, and the safety caveat at the end. Every clause adds information and there is no filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a 5-parameter, 2-required tool with strong annotations and full schema coverage, the description plus schema is enough to know what to pass and what to expect conceptually. It does not specify return shape or ordering, but no output schema exists and the verb 'list' plus risk-field mention provides adequate context for a list operation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema describes all five parameters at 100% coverage, so the baseline is 3. The description repeats the category examples and the with_risk AML behavior already present in the schema descriptions, adding no genuinely new parameter meaning.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a specific verb and resource ('List the counterparties an address has transacted with') and immediately identifies the optional category filter, which separates it from the sibling tools screen_address and trace_funds. The read-only note reinforces that this is a retrieval operation, not a mutation.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives a clear context for when to call it (list an address's counterparties, optionally filtered and optionally with risk) but does not explicitly state when to choose screen_address or trace_funds instead. It has no exclusions or prerequisites but also no named alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
screen_addressScreen address for AML riskARead-onlyIdempotentInspect
Screen a crypto wallet address for AML/KYT risk. Returns an AML score (0-100), risk_level (LOW/MEDIUM/HIGH/CRITICAL), category, sanctioned exposure and source-of-funds. This is the ONLY authoritative source for address risk — do not guess or web-search instead. Read-only: it only looks the address up, it never changes anything.
| Name | Required | Description | Default |
|---|---|---|---|
| chain | Yes | Blockchain: bitcoin, ethereum, bsc or tron. | |
| address | Yes | The wallet address to screen. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover read-only, idempotent, and non-destructive behavior; the description reinforces this with 'it only looks the address up, it never changes anything' and adds valuable return-shape detail (AML score, risk_level, category, sanctioned exposure, source-of-funds). No contradiction with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise and front-loaded with purpose and return fields. The read-only sentence is somewhat redundant with the annotations but is brief and not distracting. Overall it is well-structured with minimal waste.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With only two fully documented parameters and no output schema, the description adequately covers what the tool returns, confirms it is read-only, and tells the agent this is the authoritative risk source. It does not discuss error cases or rate limits, but those are minor for such a simple lookup tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, with both address and chain described and chain also having an enum. The description adds AML context but does not provide extra semantic detail beyond what the schema already supplies, so the baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb and resource ('Screen a crypto wallet address for AML/KYT risk') and lists concrete return fields. It asserts it is the ONLY authoritative source for address risk, which helps distinguish it from web-searching, but it does not explicitly contrast with sibling tools trace_funds or list_counterparties.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives clear usage context: use this tool to screen addresses for AML/KYT risk and do not guess or web-search instead. It does not provide exclusions or guidance on when to prefer sibling tools, so it stops short of a full 5.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
trace_fundsTrace outgoing fundsARead-onlyIdempotentInspect
Follow the OUTGOING funds from an address across the chain and report where the money ends up (exchanges, mixers, sanctioned wallets) and how many hops away. Read-only: it only reads on-chain history, it never moves or changes funds.
| Name | Required | Description | Default |
|---|---|---|---|
| chain | Yes | Blockchain: bitcoin, ethereum, bsc or tron. | |
| address | Yes | The address whose outgoing funds to follow. | |
| max_hops | No | How many hops to follow. Default 5 (8 on bitcoin). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description adds human-readable behavioral context beyond the annotations by explicitly saying it only reads on-chain history and never moves or changes funds. It also reveals what the report covers: exchanges, mixers, sanctioned wallets, and hop distance. It does not contradict the readOnlyHint, openWorldHint, idempotentHint, or destructiveHint annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise and front-loaded with the core purpose, followed by a compact safety clarification. Every sentence contributes useful information, and there is no filler, tautology, or unnecessary repetition.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the strong annotations and fully documented schema parameters, the description provides enough context to invoke the tool correctly: what it traces, what it reports, and that it is read-only. The main gap is the lack of explicit guidance on how this tool relates to sibling tools and any coverage limitations implied by the openWorldHint annotation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, with all three parameters already described. The description adds general context like 'hops' for max_hops and 'across the chain' for chain, but it does not add meaningful semantic information beyond what the schema already provides.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific action ('Follow') and a specific resource ('OUTGOING funds from an address across the chain'), then explains exactly what is reported: where funds end up (exchanges, mixers, sanctioned wallets) and how many hops away. This clearly distinguishes the tool from sibling tools like list_counterparties or screen_address by its tracing and endpoint-classification purpose.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description makes the use case clear: use this when you want to trace outgoing funds and see their destination categories and hop distances. It does not explicitly name alternative tools or state when not to use it, so it stops short of full explicit guidance, but the context is unambiguous.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
3 tool updates
- First observed
list_counterparties - First observed
screen_address - First observed
trace_funds
Frequently Asked Questions
Claiming proves that you control a remote MCP connector. It does not move, proxy, or interrupt the server.
Open the connector listing, choose Claim ownership, and sign in to Glama.
Complete one verification method:
GitHub identity — fastest for official registry listings. For a namespace such as
io.github.alice/server, link the matching GitHub user, then choose Claim with GitHub. An organization namespace such asio.github.acme/serveralso needs that organization to have installed the Glama AI GitHub App and approved its permissions, because GitHub discloses organization membership only to apps it has installed. Use HTTP or DNS when it has not.HTTP challenge — works when you can deploy a public file. Generate a token, publish the exact JSON Glama shows at
/.well-known/glama.jsonon the same origin as the connector, then choose Check HTTP challenge.DNS challenge — works when you control DNS but cannot change the server. Generate a token, create the exact TXT record Glama shows, wait for it to propagate, then choose Check DNS challenge.
After verification, Glama sends a confirmation email and gives you access to listing details, thumbnails, health checks, and analytics. Keep the HTTP file or DNS record in place: Glama periodically checks it and ownership remains verified while the token is discoverable.
The HTTP ownership file has this structure:
{
"$schema": "https://glama.ai/mcp/schemas/connector.json",
"claim": "glama_claim_..."
}Claim tokens are opaque, stable, and bound to the signed-in Glama account. They contain no email address or other personal information. If Glama can no longer discover a verified HTTP or DNS token, it starts a seven-day grace period before removing claim-based access. Restore the same token during that period to keep ownership verified. Never publish an email address, Glama session token, GitHub token, or connector credential as ownership proof.
If verification fails, confirm that you copied the current token exactly. The HTTP file must be public, return valid JSON with a successful HTTP response, and stay on the connector's origin. DNS changes may need more time to propagate. A claim cannot transfer to a different origin or hostname: if the connector target changes, Glama starts the grace period and the new target must be claimed separately after the previous claim is released.
For a connector linked to the official MCP Registry, registry updates continue to replace its name, description, and URL by default. After claiming, open Manage connector and enable Use Glama listing details as the source of truth if edits made on Glama should be preserved. Categories and thumbnails are always managed on Glama; registry linkage and technical connection settings continue to sync.
Control your server's listing on Glama, including description and metadata
Access analytics and receive server usage reports
Get monitoring and health status updates for your server
Feature your server to boost visibility and reach more users
To improve your MCP server's ranking:
Claim ownership of the server listing
Complete the server profile with an accurate description and thumbnail
Provide a test profile so Glama can connect to and evaluate the server
Keep tool definitions clear and complete to earn a high Tool Definition Quality Score (TDQS)
Route real usage through the Glama Gateway; more recorded successful server uses also improve the ranking
For users:
Full audit trail – every tool call is logged with inputs and outputs for compliance and debugging
Granular tool control – enable or disable individual tools per connector to limit what your AI agents can do
Centralized credential management – store and rotate API keys and OAuth tokens in one place
Change alerts – get notified when a connector changes its schema, adds or removes tools, or updates tool definitions, so nothing breaks silently
For server owners:
Proven adoption – public usage metrics on your listing show real-world traction and build trust with prospective users
Tool-level analytics – see which tools are being used most, helping you prioritize development and documentation
Direct user feedback – users can report issues and suggest improvements through the listing, giving you a channel you would not have otherwise
The connector status is unhealthy when Glama is unable to successfully connect to the server. This can happen for several reasons:
The server is experiencing an outage
The URL of the server is wrong
Credentials required to access the server are missing or invalid
If you are the owner of this MCP connector and would like to make modifications to the listing, including providing test credentials for accessing the server, please contact support@glama.ai.
Discussions
No comments yet. Be the first to start the discussion!
Related MCP Connectors
Pre-transaction risk screening for Ethereum addresses: signed score, sanctions, audit trail.
Blockchain intelligence for tracing funds, screening addresses, and investigating on-chain activity.
OFAC and global sanctions screening: crypto addresses, emails, websites, IDs, countries, VPN, geo
AML/CFT compliance oracle: wallet screening, sanctions, PEPs, jurisdiction risk.
Related MCP Servers
- AlicenseNot gradedqualityCmaintenanceEnables AML screening of blockchain addresses against OFAC SDN lists and chain heuristics, returning risk scores and flags.MIT

traql MCP serverofficial
AlicenseAqualityAmaintenanceEnables AI agents to perform AML and compliance risk scoring for crypto addresses and transactions on Ethereum, BSC, TRON, TON, and Bitcoin, returning 0–100 risk scores, bands, flags, and detailed signals.2315MIT- AlicenseBqualityBmaintenanceProvides on-chain forensic checks for evaluating transaction risks, including token verification, rug-pull detection, and fund tracing, using public blockchain endpoints.1214MIT
- AlicenseNot gradedqualityDmaintenanceMethodology-transparent BTC + ETH whale forensics. 30 tools, anonymous OAuth 2.1 Free tier.MIT
Glama MCP Gateway
Add one secure layer between your agents and this server.
TDQS
Each tool targets a distinct concern: screening overall address risk, listing direct counterparties, and tracing outgoing funds to endpoints. Screen_address and trace_funds both involve AML risk, but their purposes are clearly separated by description.
All tool names follow a consistent verb_noun pattern in lowercase snake_case: list_counterparties, screen_address, trace_funds. There is no mixing of conventions or vague verbs.
Three tools is a well-scoped set for a read-only AML/KYT server. Each tool covers a distinct core capability without redundancy or bloat.
The server covers the main AML workflows: address screening, counterparty risk exposure, and fund tracing. Minor gaps exist, such as no incoming fund tracing or transaction-level detail, but the core read-only surface is functional.