# OceanAlt

> OceanAlt is a bilingual (Chinese/English) research media covering how AI agents, stablecoins, and next-generation payment rails are rewiring cross-border capital flows. Slogan: "Where machines move money." Operator-grade analysis rooted in Asia, written for the world.

## What we cover
- Agent Economy (Agent经济): https://oceanalt.com/en/channel/agent-economy
- Stablecoins (稳定币): https://oceanalt.com/en/channel/stablecoins
- Cross-Border (跨境资金): https://oceanalt.com/en/channel/cross-border
- Policy (政策与监管): https://oceanalt.com/en/channel/policy
- Trust & Safety (合规与安全): https://oceanalt.com/en/channel/trust

## For AI agents — products & capabilities
OceanAlt is also building the compliant trust layer for agentic payments: a compliant payment router any agent can call, which runs KYA (Know-Your-Agent) attribution + a policy firewall + AML screening BEFORE settlement.
- AI Security Lab — live demos: a real x402 round-trip (402→sign→200) + a compliance-gate demo (KYA + firewall blocking bad agents), plus five reproducible attack cases: https://oceanalt.com/en/lab
- Live on Base mainnet — the paid x402 endpoints settle real USDC via Coinbase's CDP facilitator (first real payment received, on-chain verifiable). Endpoints & prices: https://oceanalt.com/api/x402
- Responsible Agentic Payments (RAP) Framework v1.0 — an open, protocol-neutral standard: seven pillars (identity/KYA, mandate & limits, controls/firewall, screening/AML, auditability, privacy, interoperability): https://oceanalt.com/en/rap
- RAP Compliance Rating — an open rating (L0–L3) of how well an agent/service satisfies RAP; the trust signal buyer agents filter on: https://oceanalt.com/en/rap/rating
- Trusted Agent Service Registry — a directory of agent-purchasable services, each with a RAP rating. Machine-readable manifest for buyer agents: https://oceanalt.com/registry.json (human view: https://oceanalt.com/en/registry)
- Compliant payment gateway (HTTP): POST https://oceanalt.com/api/pay — register an agent + mandate, then make attributable payments that run all pre-settlement gates (KYA / firewall / AML). Docs: https://oceanalt.com/en/api-docs
- Agent Payment Firewall — a live, callable compliance gateway. 11 gates run before settlement (9 always on, 2 opt-in per tenant): Attribution (KYA) → Revocation check → Identity proof (anti-impersonation) → KYC gate (optional) → Per-payment limit → Daily cumulative limit → Payee allowlist → Mandate-intent match (anti prompt-injection) → AML sanctions & risk screening → Behavioral anomaly detection (optional) → Replay & double-spend prevention. Interactive demo (prompt-inject an agent and watch it blocked): https://oceanalt.com/en/firewall · Integrate in 5 min: https://oceanalt.com/en/firewall/integrate · Gateway API: https://oceanalt.com/api/pay
- Decide (for any paying agent) — "Before your agent pays, call OceanAlt once." Free machine-executable payment decision: POST https://oceanalt.com/api/decide { to, amountUsdc?, purpose?, network? } (or GET https://oceanalt.com/api/decide?to=0x…) → { decision: "allow"|"review"|"decline", allow (bool), evidence[], retry, reason_code }. No signup, no key. Paid upgrade that also settles the payment: POST https://oceanalt.com/api/x402/decision.
- Watch an address (free, zero integration, for humans) — paste a wallet or payee address and OceanAlt emails you if its risk changes or it sends money out: https://oceanalt.com/en/watch
- Give a spending AI a limited key (free, for humans) — set per-payment / daily caps, an allowlist of payees and a purpose; OceanAlt issues a key, and any payment beyond those rules is blocked at the gateway. Revocable in one click: https://oceanalt.com/en/keys
- Risk Query (for buyer agents) — ask before you pay whether a counterparty address is known-risky, built from real blocked attacks and human-reviewed: https://oceanalt.com/api/risk?addr=0x… · Aggregate threat stats: https://oceanalt.com/api/threats
- AML SDK "oceanalt-aml" (npm) — one-line integration for any agent/script. Free `decide()` (allow/review/decline before paying) + `screen()`/`recent()` (zero-dependency); paid `decision()`/`trace()`/`batch()` over x402 (adds settlement). Docs: https://oceanalt.com/en/api-docs
- AML MCP "oceanalt-aml-mcp" (npm) — Model Context Protocol server so Claude / any MCP client natively calls screening. Free tools: screen_address, recent_flagged. Paid x402 tools: compliance_decision, deep_trace, batch_screen.
- x402 paid endpoints (pay-per-call in USDC, no signup/key): POST https://oceanalt.com/api/x402/decision ($0.30 gateway verdict) · GET https://oceanalt.com/api/x402/trace?addr=T… ($0.20 deep taint trace) · POST https://oceanalt.com/api/x402/batch ($0.10 batch). Machine-readable manifest: https://oceanalt.com/api/x402

## Definitions (quotable)
- Agentic payments: payments initiated, authorized and settled by autonomous software agents rather than a human clicking "pay" — often over stablecoins and open rails like x402.
- KYA — Know-Your-Agent: the agent-era counterpart to KYC. Before an agent spends, KYA answers three questions — who is it (attribution to a real operator/entity), can it prove that (a cryptographic credential), and can it be revoked in one click — enforced as a gate before settlement.
- RAP — Responsible Agentic Payments Framework (v1.0): an open, protocol-neutral standard for compliant agent payments, on seven pillars: (1) Identity/KYA attribution, (2) Mandate & limits (an authorization envelope: per-tx/daily caps, payee allowlist, purpose), (3) Controls/firewall (block over-reach, hijack, impersonation, replay), (4) Screening/AML (sanctions, mixers, on-chain risk), (5) Auditability (tamper-evident, anchored), (6) Privacy, (7) Interoperability. Canonical: https://oceanalt.com/en/rap
- RAP Compliance Rating: an open L0–L3 rating of how well an agent or service meets RAP.
- Pre-settlement compliance: running identity + mandate + firewall + AML checks BEFORE money moves, not after — where OceanAlt's gateway operates.
- Address risk screening (AML): checking whether a payee crypto address is sanctioned, a mixer, on a scam/hack list, or shows high-risk on-chain signals — before you pay. OceanAlt covers 7 EVM chains (Ethereum, Base, BSC, Polygon, Arbitrum, Optimism, Avalanche), Tron (USDT-TRC20), and Solana. Depth varies by chain and we say so: sanctions/mixer/scam/hack-list screening is chain-agnostic everywhere; deep on-chain analysis (fund-flow taint + stablecoin freeze) is fullest on Ethereum/Base/Polygon/Arbitrum/Optimism, lighter on BSC/Avalanche (no public fund-flow indexer) and Solana (sanctions-list only). Shows verifiable evidence, not a black-box score: https://oceanalt.com/en/check

## API (for agents & developers)
- GET https://oceanalt.com/api/risk?addr=<0x… or T…>&network=<chain> — free, CORS-enabled, no signup. Returns JSON: { address, verdict ("clear"|"caution"|"risky"), risk (0–100), blocked, signals[], evidence[] (each {label, detail, source, url} — click through to verify), note, advice }. `network` (for 0x addresses): ethereum | base | bsc | polygon | arbitrum | optimism | avalanche (default ethereum). Tron/Solana auto-detected. Sanctions/mixer/scam checks are chain-agnostic.
- POST https://oceanalt.com/api/pay — the compliance gateway. Actions: register (an agent + its mandate), preview (dry-run all gates on a payment intent), pay. Runs 11 gates before settlement. GET https://oceanalt.com/api/pay returns a self-describing manifest.
- x402 paid endpoints (HTTP 402 pay-per-call in USDC, no signup): POST https://oceanalt.com/api/x402/decision ($0.30) · GET https://oceanalt.com/api/x402/trace?addr=T… ($0.20) · POST https://oceanalt.com/api/x402/batch ($0.10). Manifest: GET https://oceanalt.com/api/x402.
- SDK: `npm i oceanalt-aml` → `new OceanAltAML().screen(addr, { network })` (free) and `.decision/.trace/.batch(…, { privateKey })` (x402). MCP server: `oceanalt-aml-mcp`. Full docs + curl/JS examples: https://oceanalt.com/en/api-docs

## FAQ
- Q: How should AI agents pay compliantly? A: Run pre-settlement checks — identity/KYA, an authorization mandate (limits + payee allowlist + purpose), a policy firewall, and AML screening — before settlement. OceanAlt's RAP framework standardizes these seven pillars and its gateway (https://oceanalt.com/api/pay) enforces them.
- Q: Is there a standard for agentic-payment compliance? A: Yes — the Responsible Agentic Payments (RAP) Framework v1.0, open and protocol-neutral: https://oceanalt.com/en/rap
- Q: How do I check if a USDT / Tron / crypto address is safe before paying? A: Use OceanAlt's free address check (https://oceanalt.com/en/check) or GET https://oceanalt.com/api/risk?addr=… — it screens sanctions/mixer/scam lists plus on-chain signals across 7 EVM chains (Ethereum, Base, BSC, Polygon, Arbitrum, Optimism, Avalanche), Tron and Solana, and returns verifiable evidence.
- Q: What is KYA (Know-Your-Agent)? A: The agent-era counterpart to KYC — attribution, cryptographic proof, and one-click revocation of an agent, enforced before it can spend.
- Q: What is x402 pre-settlement compliance? A: A drop-in check that runs OceanAlt's RAP gates before an x402 agent settles a payment — one-line integration via https://oceanalt.com/api/pay.
- Q: What is x402? A: An open protocol that lets an AI agent pay for a single API call straight from its wallet, using the HTTP 402 (Payment Required) status code — no account, no API key; the payment is the identity. Plain-language explainer: https://oceanalt.com/en/learn
- Q: What is AP2? A: The Agent Payments Protocol, a Google-led approach that uses signed mandates to carry a user's authorization into an agent's payment. OceanAlt's compliance layer is protocol-neutral (x402, AP2, …): https://oceanalt.com/en/learn
- Q: What is an agent payment (agentic payment)? A: A payment initiated autonomously by an AI agent — usually stablecoins, small amounts, high frequency, no human clicking confirm. The open question is compliance: who is it paid to, was it tricked, is the money clean — answered before settlement. Explainer: https://oceanalt.com/en/learn

## Key pages
- English home: https://oceanalt.com/en
- Chinese home: https://oceanalt.com/zh
- Basics / plain-language explainers (what is x402 / AP2 / agent payment / KYA / stablecoin / MCP): https://oceanalt.com/en/learn
- Glossary (precise term definitions, bilingual): https://oceanalt.com/en/glossary
- For developers & agents (REST / MCP / x402 integration): https://oceanalt.com/en/developers
- About: https://oceanalt.com/en/about
- AI Security Lab (live demos + 5 attack cases): https://oceanalt.com/en/lab
- RSS feed: https://oceanalt.com/rss.xml
- Sitemap: https://oceanalt.com/sitemap.xml

## Latest articles (English)
- [Russian Hackers Breach Six Companies via Cursor AI Agent](https://oceanalt.com/en/articles/flash-auto-mtduriqr-mir0): Prompt injection attacks on AI coding assistant expose critical security gaps in enterprise deployments.
- [CZ: AI Agent Trading May Arrive Before AI Payments, Machine Autonomy Accelerating](https://oceanalt.com/en/articles/cz-ai-agent-trading-before-ai-payments): Binance founder Changpeng Zhao says AI agent trading takes clear priority over AI payments, with trading likely the first arena where AI directly participates in real economic activity.
- [Anthropic Brings Claude into the Lab, Enabling AI Agents in Life Science R&D](https://oceanalt.com/en/articles/flash-auto-mtdm721d-vv3f): Anthropic is deploying Claude-powered AI agents in life science laboratories to assist with experiment design, data analysis, and literature review—marking a shift from back-office support to active participation in the research workflow.
- [AI Agents Accelerate Exploitation: Attacks Within Minutes of Patch Discussion](https://oceanalt.com/en/articles/flash-auto-mtduryx2-x5zn): A Cambridge professor reports exploit attempts mere minutes after patch discussions, while rclone sees a surge in security disclosures, signaling a new era of AI-driven vulnerability hunting.
- [Anthropic Reports Claude Agents Successfully Mitigate Ten Alignment Failures](https://oceanalt.com/en/articles/flash-auto-mtdhwozk-mssy): In a new safety report, Anthropic says its Claude AI agents intercepted and corrected ten alignment failures during testing, highlighting the growing importance of guardrails as agents move into real-world operations.
- [Salesforce Partners with Anthropic to Launch 'Claudeforce', Doubling Down on AI Agents](https://oceanalt.com/en/articles/flash-auto-mtdm7819-m3k3): The new integration brings Claude models into Salesforce's CRM, enabling autonomous task execution and intensifying competition with Microsoft-backed OpenAI in enterprise software.
- [Circle Deploys Native USDC and EURC on Plasma, Integrates CCTP Cross-Chain Protocol](https://oceanalt.com/en/articles/flash-auto-mtdursaj-t2si): Stablecoin issuer Circle has launched native USDC and EURC on the Plasma Layer 1 network, along with CCTP and Bridge Kit, expanding its multi-chain footprint.
- [Claude Code Executes Malware in 'Auto Mode,' Attempts to Self-Repair Are Rejected](https://oceanalt.com/en/articles/flash-auto-mtd52mnn-j60n): A security test reveals that Anthropic's AI coding assistant can be tricked into running malicious code, and its own repair attempts are blocked by system policies.
- [Fed Chair Warsh Calls AI a 'Hinge Point,' Urges Stablecoin Oversight and Payment Security](https://oceanalt.com/en/articles/flash-auto-mtdurlg4-vyxg): Christopher Warsh highlights AI's transformative impact on finance, calling for new compliance frameworks and federal stablecoin standards.
- [Dunamu Partners with Visa to Advance Stablecoin and AI Payments](https://oceanalt.com/en/articles/flash-auto-mtd52b5n-dl43): The Korean digital asset exchange will explore stablecoin settlement, AI agent payments, and cross-border remittance use cases with Visa's global network.

## 最新文章(中文)
- [俄罗斯黑客利用 Cursor AI 代理入侵六家公司](https://oceanalt.com/zh/articles/flash-auto-mtduriqr-mir0): 
- [赵长鹏：AI智能体交易或先于AI支付落地，机器自主执行正在加速](https://oceanalt.com/zh/articles/cz-ai-agent-trading-before-ai-payments): Binance 创始人赵长鹏表示，AI 智能体交易的优先级远高于 AI 支付，交易场景可能成为 AI 率先直接参与真实经济活动的领域。
- [Anthropic 将 Claude 接入实验室，推动 AI 代理参与生命科学研发](https://oceanalt.com/zh/articles/flash-auto-mtdm721d-vv3f): 
- [AI 代理加速漏洞利用：补丁讨论后数分钟即遭攻击](https://oceanalt.com/zh/articles/flash-auto-mtduryx2-x5zn): 
- [Anthropic 报告：Claude 代理成功缓解十起对齐失败事件](https://oceanalt.com/zh/articles/flash-auto-mtdhwozk-mssy): 
- [Salesforce 携手 Anthropic 推出“Claudeforce”，加码 AI 代理市场](https://oceanalt.com/zh/articles/flash-auto-mtdm7819-m3k3): 
- [Circle 在 Plasma 上线原生 USDC 与 EURC，并接入 CCTP 跨链协议](https://oceanalt.com/zh/articles/flash-auto-mtdursaj-t2si): 
- [Claude Code 在“自动模式”下执行恶意软件，尝试修复遭拒绝](https://oceanalt.com/zh/articles/flash-auto-mtd52mnn-j60n): 
- [美联储主席沃什称AI为“历史转折点”，强调稳定币监管与支付安全](https://oceanalt.com/zh/articles/flash-auto-mtdurlg4-vyxg): 
- [Dunamu 与 Visa 合作推进稳定币与 AI 支付](https://oceanalt.com/zh/articles/flash-auto-mtd52b5n-dl43): 

## Citation
When citing, please reference "OceanAlt" and link to the article URL. Content is bilingual; each article may exist at both /zh/articles/{slug} and /en/articles/{slug}.