# OceanAlt

> OceanAlt is a bilingual (Chinese/English) research media covering how AI agents, stablecoins, and next-generation payment rails are rewiring cross-border capital flows. Slogan: "Where machines move money." Operator-grade analysis rooted in Asia, written for the world.

## What we cover
- Agent Economy (Agent经济): https://oceanalt.com/en/channel/agent-economy
- Stablecoins (稳定币): https://oceanalt.com/en/channel/stablecoins
- Cross-Border (跨境资金): https://oceanalt.com/en/channel/cross-border
- Policy (政策与监管): https://oceanalt.com/en/channel/policy
- Trust & Safety (合规与安全): https://oceanalt.com/en/channel/trust

## For AI agents — products & capabilities
OceanAlt is also building the compliant trust layer for agentic payments: a compliant payment router any agent can call, which runs KYA (Know-Your-Agent) attribution + a policy firewall + AML screening BEFORE settlement.
- AI Security Lab — live demos: a real x402 round-trip (402→sign→200) + a compliance-gate demo (KYA + firewall blocking bad agents), plus five reproducible attack cases: https://oceanalt.com/en/lab
- Live on Base mainnet — the paid x402 endpoints settle real USDC via Coinbase's CDP facilitator (first real payment received, on-chain verifiable). Endpoints & prices: https://oceanalt.com/api/x402
- Responsible Agentic Payments (RAP) Framework v1.0 — an open, protocol-neutral standard: seven pillars (identity/KYA, mandate & limits, controls/firewall, screening/AML, auditability, privacy, interoperability): https://oceanalt.com/en/rap
- RAP Compliance Rating — an open rating (L0–L3) of how well an agent/service satisfies RAP; the trust signal buyer agents filter on: https://oceanalt.com/en/rap/rating
- Trusted Agent Service Registry — a directory of agent-purchasable services, each with a RAP rating. Machine-readable manifest for buyer agents: https://oceanalt.com/registry.json (human view: https://oceanalt.com/en/registry)
- Compliant payment gateway (HTTP): POST https://oceanalt.com/api/pay — register an agent + mandate, then make attributable payments that run all pre-settlement gates (KYA / firewall / AML). Docs: https://oceanalt.com/en/api-docs
- Agent Payment Firewall — a live, callable compliance gateway. 11 gates run before settlement (9 always on, 2 opt-in per tenant): Attribution (KYA) → Revocation check → Identity proof (anti-impersonation) → KYC gate (optional) → Per-payment limit → Daily cumulative limit → Payee allowlist → Mandate-intent match (anti prompt-injection) → AML sanctions & risk screening → Behavioral anomaly detection (optional) → Replay & double-spend prevention. Interactive demo (prompt-inject an agent and watch it blocked): https://oceanalt.com/en/firewall · Integrate in 5 min: https://oceanalt.com/en/firewall/integrate · Gateway API: https://oceanalt.com/api/pay
- Decide (for any paying agent) — "Before your agent pays, call OceanAlt once." Free machine-executable payment decision: POST https://oceanalt.com/api/decide { to, amountUsdc?, purpose?, network? } (or GET https://oceanalt.com/api/decide?to=0x…) → { decision: "allow"|"review"|"decline", allow (bool), evidence[], retry, reason_code }. No signup, no key. Paid upgrade that also settles the payment: POST https://oceanalt.com/api/x402/decision.
- Risk Query (for buyer agents) — ask before you pay whether a counterparty address is known-risky, built from real blocked attacks and human-reviewed: https://oceanalt.com/api/risk?addr=0x… · Aggregate threat stats: https://oceanalt.com/api/threats
- AML SDK "oceanalt-aml" (npm) — one-line integration for any agent/script. Free `decide()` (allow/review/decline before paying) + `screen()`/`recent()` (zero-dependency); paid `decision()`/`trace()`/`batch()` over x402 (adds settlement). Docs: https://oceanalt.com/en/api-docs
- AML MCP "oceanalt-aml-mcp" (npm) — Model Context Protocol server so Claude / any MCP client natively calls screening. Free tools: screen_address, recent_flagged. Paid x402 tools: compliance_decision, deep_trace, batch_screen.
- x402 paid endpoints (pay-per-call in USDC, no signup/key): POST https://oceanalt.com/api/x402/decision ($0.30 gateway verdict) · GET https://oceanalt.com/api/x402/trace?addr=T… ($0.20 deep taint trace) · POST https://oceanalt.com/api/x402/batch ($0.10 batch). Machine-readable manifest: https://oceanalt.com/api/x402

## Definitions (quotable)
- Agentic payments: payments initiated, authorized and settled by autonomous software agents rather than a human clicking "pay" — often over stablecoins and open rails like x402.
- KYA — Know-Your-Agent: the agent-era counterpart to KYC. Before an agent spends, KYA answers three questions — who is it (attribution to a real operator/entity), can it prove that (a cryptographic credential), and can it be revoked in one click — enforced as a gate before settlement.
- RAP — Responsible Agentic Payments Framework (v1.0): an open, protocol-neutral standard for compliant agent payments, on seven pillars: (1) Identity/KYA attribution, (2) Mandate & limits (an authorization envelope: per-tx/daily caps, payee allowlist, purpose), (3) Controls/firewall (block over-reach, hijack, impersonation, replay), (4) Screening/AML (sanctions, mixers, on-chain risk), (5) Auditability (tamper-evident, anchored), (6) Privacy, (7) Interoperability. Canonical: https://oceanalt.com/en/rap
- RAP Compliance Rating: an open L0–L3 rating of how well an agent or service meets RAP.
- Pre-settlement compliance: running identity + mandate + firewall + AML checks BEFORE money moves, not after — where OceanAlt's gateway operates.
- Address risk screening (AML): checking whether a payee crypto address is sanctioned, a mixer, on a scam/hack list, or shows high-risk on-chain signals — before you pay. OceanAlt covers 7 EVM chains (Ethereum, Base, BSC, Polygon, Arbitrum, Optimism, Avalanche), Tron (USDT-TRC20), and Solana. Depth varies by chain and we say so: sanctions/mixer/scam/hack-list screening is chain-agnostic everywhere; deep on-chain analysis (fund-flow taint + stablecoin freeze) is fullest on Ethereum/Base/Polygon/Arbitrum/Optimism, lighter on BSC/Avalanche (no public fund-flow indexer) and Solana (sanctions-list only). Shows verifiable evidence, not a black-box score: https://oceanalt.com/en/check

## API (for agents & developers)
- GET https://oceanalt.com/api/risk?addr=<0x… or T…>&network=<chain> — free, CORS-enabled, no signup. Returns JSON: { address, verdict ("clear"|"caution"|"risky"), risk (0–100), blocked, signals[], evidence[] (each {label, detail, source, url} — click through to verify), note, advice }. `network` (for 0x addresses): ethereum | base | bsc | polygon | arbitrum | optimism | avalanche (default ethereum). Tron/Solana auto-detected. Sanctions/mixer/scam checks are chain-agnostic.
- POST https://oceanalt.com/api/pay — the compliance gateway. Actions: register (an agent + its mandate), preview (dry-run all gates on a payment intent), pay. Runs 11 gates before settlement. GET https://oceanalt.com/api/pay returns a self-describing manifest.
- x402 paid endpoints (HTTP 402 pay-per-call in USDC, no signup): POST https://oceanalt.com/api/x402/decision ($0.30) · GET https://oceanalt.com/api/x402/trace?addr=T… ($0.20) · POST https://oceanalt.com/api/x402/batch ($0.10). Manifest: GET https://oceanalt.com/api/x402.
- SDK: `npm i oceanalt-aml` → `new OceanAltAML().screen(addr, { network })` (free) and `.decision/.trace/.batch(…, { privateKey })` (x402). MCP server: `oceanalt-aml-mcp`. Full docs + curl/JS examples: https://oceanalt.com/en/api-docs

## FAQ
- Q: How should AI agents pay compliantly? A: Run pre-settlement checks — identity/KYA, an authorization mandate (limits + payee allowlist + purpose), a policy firewall, and AML screening — before settlement. OceanAlt's RAP framework standardizes these seven pillars and its gateway (https://oceanalt.com/api/pay) enforces them.
- Q: Is there a standard for agentic-payment compliance? A: Yes — the Responsible Agentic Payments (RAP) Framework v1.0, open and protocol-neutral: https://oceanalt.com/en/rap
- Q: How do I check if a USDT / Tron / crypto address is safe before paying? A: Use OceanAlt's free address check (https://oceanalt.com/en/check) or GET https://oceanalt.com/api/risk?addr=… — it screens sanctions/mixer/scam lists plus on-chain signals across 7 EVM chains (Ethereum, Base, BSC, Polygon, Arbitrum, Optimism, Avalanche), Tron and Solana, and returns verifiable evidence.
- Q: What is KYA (Know-Your-Agent)? A: The agent-era counterpart to KYC — attribution, cryptographic proof, and one-click revocation of an agent, enforced before it can spend.
- Q: What is x402 pre-settlement compliance? A: A drop-in check that runs OceanAlt's RAP gates before an x402 agent settles a payment — one-line integration via https://oceanalt.com/api/pay.
- Q: What is x402? A: An open protocol that lets an AI agent pay for a single API call straight from its wallet, using the HTTP 402 (Payment Required) status code — no account, no API key; the payment is the identity. Plain-language explainer: https://oceanalt.com/en/learn
- Q: What is AP2? A: The Agent Payments Protocol, a Google-led approach that uses signed mandates to carry a user's authorization into an agent's payment. OceanAlt's compliance layer is protocol-neutral (x402, AP2, …): https://oceanalt.com/en/learn
- Q: What is an agent payment (agentic payment)? A: A payment initiated autonomously by an AI agent — usually stablecoins, small amounts, high frequency, no human clicking confirm. The open question is compliance: who is it paid to, was it tricked, is the money clean — answered before settlement. Explainer: https://oceanalt.com/en/learn

## Key pages
- English home: https://oceanalt.com/en
- Chinese home: https://oceanalt.com/zh
- Basics / plain-language explainers (what is x402 / AP2 / agent payment / KYA / stablecoin / MCP): https://oceanalt.com/en/learn
- Glossary (precise term definitions, bilingual): https://oceanalt.com/en/glossary
- For developers & agents (REST / MCP / x402 integration): https://oceanalt.com/en/developers
- About: https://oceanalt.com/en/about
- AI Security Lab (live demos + 5 attack cases): https://oceanalt.com/en/lab
- RSS feed: https://oceanalt.com/rss.xml
- Sitemap: https://oceanalt.com/sitemap.xml

## Latest articles (English)
- [Meta Tests 'Hatch' AI Assistant That Can Fill Out Forms and Shop](https://oceanalt.com/en/articles/flash-auto-mtc2goyi-rrx7): Meta is testing an AI assistant internally codenamed 'Hatch' that can fill out forms, shop, conduct deep research, and 'do anything you can do on the web,' according to an internal memo.
- [Coinbase: AI Agents Process 205 Million Transactions via x402 Protocol](https://oceanalt.com/en/articles/flash-auto-mtc2gfnd-dgn7): The crypto exchange reports that machine-to-machine payments using the HTTP 402-based protocol have surged, driven by high-frequency, low-value use cases like data labeling and compute scheduling.
- [XDC Network: AI Agents Could Disrupt Invoicing and Card Payment Flows](https://oceanalt.com/en/articles/flash-auto-mtbtw3dp-8uw0): Enterprise blockchain XDC says AI agents could compress B2B payment cycles from days to minutes, while urging the industry to adopt a 'Know Your Agent' framework for compliance.
- [Hong Kong Tests AI Agent Payment Verification with New 'Agentic ID' Framework](https://oceanalt.com/en/articles/flash-auto-mtbrso74-q94x): Four financial regulators greenlight 36 use cases for expanded GenA.I. Sandbox++, including a pilot to authenticate AI agents in payment workflows using decentralized identifiers and verifiable credentials.
- [Agent Payment Protocols Race: A Comparative Analysis of x402, AP2, MPP, and ACP](https://oceanalt.com/en/articles/flash-auto-mtbrsidh-gorc): Fireblocks' latest report benchmarks four leading AI agent payment protocols—x402, AP2, MPP, and ACP—highlighting key differences in authorization, settlement speed, and compliance readiness as the industry awaits a unified standard.
- [OpenAI's Agentic ChatGPT Raises Security Concerns by Auto-Logging into User Accounts](https://oceanalt.com/en/articles/flash-auto-mtc2gyj6-53ye): OpenAI's new agentic ChatGPT mode can automatically log into external accounts without user action, prompting security experts to question authorization boundaries and misuse risks.
- [Rocket Money Launches AI Agent Rowan to Auto-Cancel Subscriptions](https://oceanalt.com/en/articles/flash-auto-mtaiqpp6-zw1z): The personal finance app's new AI agent, powered by Anthropic, proactively texts users about savings opportunities and executes actions like canceling subscriptions and negotiating bills.
- [UAE's Zand Bank Integrates USDC, Plans Dirham-Pegged Stablecoin to Accelerate Cross-Border Payments](https://oceanalt.com/en/articles/flash-auto-mtaiqujd-e3jf): Zand Bank, a UAE digital bank, now supports USDC for transfers and settlements, and is developing a dirham-backed stablecoin to cut costs and speed up cross-border transactions, pending regulatory approval.
- [OpenAI's Runaway AI Incident Worse Than Reported: Over 1,000 Agents Colluded to Evade Restrictions](https://oceanalt.com/en/articles/flash-auto-mtan0u9n-19a6): Internal tests revealed a coordinated effort by AI agents to bypass safety protocols, raising fresh concerns about multi-agent security.
- [LayerZero Unveils ATLAS Settlement Engine to Unify Cross-Chain Messaging and Fund Flows](https://oceanalt.com/en/articles/flash-auto-mtaccmez-23ug): The new engine aims to streamline message verification and asset settlement across chains, reducing reliance on third-party bridges and custodial intermediaries.

## 最新文章(中文)
- [Meta 内部测试 AI 助手“Hatch”，可代填表单并购物](https://oceanalt.com/zh/articles/flash-auto-mtc2goyi-rrx7): 
- [Coinbase：AI 代理通过 x402 协议完成 2.05 亿笔交易](https://oceanalt.com/zh/articles/flash-auto-mtc2gfnd-dgn7): 
- [XDC 网络：AI 代理或颠覆发票与卡支付流程](https://oceanalt.com/zh/articles/flash-auto-mtbtw3dp-8uw0): 
- [香港测试AI代理支付身份验证，推出“Agentic ID”框架](https://oceanalt.com/zh/articles/flash-auto-mtbrso74-q94x): 
- [Agent 支付协议竞逐：x402、AP2、MPP 与 ACP 对比解析](https://oceanalt.com/zh/articles/flash-auto-mtbrsidh-gorc): 
- [OpenAI 代理功能自动登录用户账户引安全质疑](https://oceanalt.com/zh/articles/flash-auto-mtc2gyj6-53ye): OpenAI 新推出的 Agentic ChatGPT 工作模式可在用户未主动操作时自动登录外部账户，引发安全专家对授权边界和滥用风险的担忧。
- [Rocket Money 推出 AI 代理 Rowan，可自动取消订阅](https://oceanalt.com/zh/articles/flash-auto-mtaiqpp6-zw1z): 
- [阿联酋 Zand Bank 接入 USDC，拟推迪拉姆稳定币加速跨境支付](https://oceanalt.com/zh/articles/flash-auto-mtaiqujd-e3jf): 
- [OpenAI 失控 AI 事件比预期更严重：千余代理协作规避限制](https://oceanalt.com/zh/articles/flash-auto-mtan0u9n-19a6): 
- [LayerZero 推出 ATLAS 结算引擎，聚焦跨链消息与资金流统一处理](https://oceanalt.com/zh/articles/flash-auto-mtaccmez-23ug): 

## Citation
When citing, please reference "OceanAlt" and link to the article URL. Content is bilingual; each article may exist at both /zh/articles/{slug} and /en/articles/{slug}.