@cryptoapis-io/mcp-aml 0.1.0 → 0.3.0

package/README.md

@@ -8,6 +8,8 @@ MCP server for [Crypto APIs](https://cryptoapis.io/) AML (Anti-Money Laundering)
 
 - Verify whether an address is flagged or associated with fraud, sanctions, ransomware, exploits, darknet markets, or other AML risk categories
 - Screen a transaction and its participants against AML data, returning risk score, risk band, and flagged addresses with roles/categories/severity
+- Get an address's exposure to risky entities/categories via the AML exposure graph
+- List the paths connecting an address to risky entities in the AML exposure graph, with cursor pagination
 
 ## Prerequisites
 
@@ -32,7 +34,7 @@ npx @cryptoapis-io/mcp-aml --api-key YOUR_API_KEY
 export CRYPTOAPIS_API_KEY=YOUR_API_KEY
 npx @cryptoapis-io/mcp-aml
 
-# HTTP transport
+# HTTP transport (listens on 127.0.0.1; see "Exposing the server beyond localhost")
 npx @cryptoapis-io/mcp-aml --transport http --port 3000 --api-key YOUR_API_KEY
 ```
 
@@ -87,6 +89,8 @@ npx @modelcontextprotocol/inspector npx @cryptoapis-io/mcp-aml --api-key YOUR_AP
 2. In your n8n workflow, add an **AI Agent** node
 3. Under **Tools**, add an **MCP Client Tool** and set the URL to `http://localhost:3000/mcp`
 
+> **n8n in Docker:** `localhost` inside the container is not your machine. Start the server with `--host 0.0.0.0` and `MCP_AUTH_TOKEN` set (see [Exposing the server beyond localhost](#exposing-the-server-beyond-localhost)), use `http://host.docker.internal:3000/mcp` as the URL, and add an `Authorization: Bearer <token>` header to the MCP Client Tool credential.
+
 > All servers default to port 3000. Use `--port` to assign different ports when running multiple servers.
 
 ## Available Tools
@@ -97,10 +101,14 @@ npx @modelcontextprotocol/inspector npx @cryptoapis-io/mcp-aml --api-key YOUR_AP
 |--------|-------------|
 | `verify-address` | Check if an address is flagged for fraud, sanctions, or other AML risk categories. Params: `address` |
 | `screen-transaction` | Screen a transaction and its participants against AML data. Params: `blockchain`, `transactionHash` |
+| `get-address-exposure` | Get an address's exposure to risky entities/categories in the AML exposure graph. Params: `blockchain`, `address` |
+| `list-address-exposure-paths` | List the paths connecting an address to risky entities in the AML exposure graph. Params: `blockchain`, `address`; optional `rootAddress` (only return routes originating from this flagged root address), `limit` (1-50, default 10), `startingAfter` (cursor — pass back the response's `nextStartingAfter` to page) |
 
 `screen-transaction` supports: ethereum, ethereum-classic, binance-smart-chain, bitcoin, bitcoin-cash, dash, dogecoin, litecoin, arbitrum, polygon, avalanche, optimism, base, zcash, xrp, solana, tezos, kaspa, tron.
 
-> **Note:** these are the highest per-call credit cost endpoints in the Crypto APIs suite — `verify-address` is 200,000 credits, `screen-transaction` is 500,000 credits per call.
+`get-address-exposure` and `list-address-exposure-paths` support a narrower set of 13 chains (no exposure graph for arbitrum, avalanche, base, optimism, tezos, or kaspa): ethereum, binance-smart-chain, ethereum-classic, polygon, tron, bitcoin, bitcoin-cash, litecoin, dogecoin, dash, zcash, xrp, solana.
+
+> **Note:** these are the highest per-call credit cost endpoints in the Crypto APIs suite — `verify-address` is 200,000 credits, `screen-transaction` is 500,000 credits per call, `get-address-exposure` is 200,000 credits per request, and `list-address-exposure-paths` is 100,000 credits per page.
 
 ## CLI Arguments
 
@@ -108,7 +116,9 @@ npx @modelcontextprotocol/inspector npx @cryptoapis-io/mcp-aml --api-key YOUR_AP
 |----------|-------------|---------|
 | `--api-key` | Crypto APIs API key | `CRYPTOAPIS_API_KEY` env var |
 | `--transport` | Transport type: `stdio` or `http` | `stdio` |
-| `--host` | HTTP host | `0.0.0.0` |
+| `--host` | HTTP host (use `0.0.0.0` to accept remote connections — requires an auth token with `--api-key`) | `127.0.0.1` |
+| `--auth-token` | Bearer token callers must send (`Authorization: Bearer <token>`); prefer the `MCP_AUTH_TOKEN` env var | `MCP_AUTH_TOKEN` env var |
+| `--allowed-hosts` | Comma-separated `Host` header allowlist for non-loopback binds | — |
 | `--port` | HTTP port | `3000` |
 | `--path` | HTTP path | `/mcp` |
 | `--stateless` | Enable stateless HTTP mode | `false` |
@@ -126,6 +136,24 @@ npx @cryptoapis-io/mcp-aml --transport http --port 3000
 # Clients send x-api-key header with each request
 ```
 
+### Exposing the server beyond localhost
+
+HTTP mode listens on `127.0.0.1` by default, so only processes on the same machine can reach it.
+To accept connections from other machines or containers, bind explicitly and protect the port:
+
+```bash
+# Startup-key mode: callers must present the token (the server refuses to start without one)
+export MCP_AUTH_TOKEN=$(openssl rand -hex 32)
+npx @cryptoapis-io/mcp-aml --transport http --host 0.0.0.0 --port 3000 --api-key YOUR_API_KEY \
+  --allowed-hosts mcp.internal.example
+# Clients send: Authorization: Bearer $MCP_AUTH_TOKEN
+
+# Per-request key mode: no startup key, every request must carry the caller's own x-api-key
+npx @cryptoapis-io/mcp-aml --transport http --host 0.0.0.0 --port 3000
+```
+
+`--allowed-hosts` restricts the `Host` header (DNS rebinding protection) when not bound to loopback. Prefer `MCP_AUTH_TOKEN` over `--auth-token`: command-line arguments are visible in the process list.
+
 > Stdio transport always requires an API key at startup.
 
 ## Important: API Key Required

package/dist/api/exposure/get-address-exposure/index.d.ts

@@ -0,0 +1,5 @@
+import type { CryptoApisHttpClient, RequestMetadata } from "@cryptoapis-io/mcp-shared";
+import type { GetAddressExposureRequest } from "../types.js";
+export type GetAddressExposureInput = GetAddressExposureRequest & RequestMetadata;
+export declare function getAddressExposure(client: CryptoApisHttpClient, input: GetAddressExposureInput): Promise<import("@cryptoapis-io/mcp-shared").RequestResult<unknown>>;
+//# sourceMappingURL=index.d.ts.map

package/dist/api/exposure/get-address-exposure/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/api/exposure/get-address-exposure/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AACvF,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AAE7D,MAAM,MAAM,uBAAuB,GAAG,yBAAyB,GAAG,eAAe,CAAC;AAElF,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,oBAAoB,EAAE,KAAK,EAAE,uBAAuB,uEAIpG"}

package/dist/api/exposure/get-address-exposure/index.js

@@ -0,0 +1,6 @@
+export async function getAddressExposure(client, input) {
+    return client.request("GET", `/aml/exposure/${input.blockchain}/${encodeURIComponent(input.address)}`, {
+        query: { context: input.context },
+    });
+}
+//# sourceMappingURL=index.js.map

package/dist/api/exposure/get-address-exposure/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/api/exposure/get-address-exposure/index.ts"],"names":[],"mappings":"AAKA,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAA4B,EAAE,KAA8B;IACjG,OAAO,MAAM,CAAC,OAAO,CAAU,KAAK,EAAE,iBAAiB,KAAK,CAAC,UAAU,IAAI,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE;QAC5G,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;KACpC,CAAC,CAAC;AACP,CAAC"}

package/dist/api/exposure/index.d.ts

@@ -0,0 +1,4 @@
+export * from "./get-address-exposure/index.js";
+export * from "./list-address-exposure-paths/index.js";
+export * from "./types.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/api/exposure/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/api/exposure/index.ts"],"names":[],"mappings":"AAAA,cAAc,iCAAiC,CAAC;AAChD,cAAc,wCAAwC,CAAC;AACvD,cAAc,YAAY,CAAC"}

package/dist/api/exposure/index.js

@@ -0,0 +1,4 @@
+export * from "./get-address-exposure/index.js";
+export * from "./list-address-exposure-paths/index.js";
+export * from "./types.js";
+//# sourceMappingURL=index.js.map

package/dist/api/exposure/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/api/exposure/index.ts"],"names":[],"mappings":"AAAA,cAAc,iCAAiC,CAAC;AAChD,cAAc,wCAAwC,CAAC;AACvD,cAAc,YAAY,CAAC"}

package/dist/api/exposure/list-address-exposure-paths/index.d.ts

@@ -0,0 +1,5 @@
+import type { CryptoApisHttpClient, RequestMetadata } from "@cryptoapis-io/mcp-shared";
+import type { ListAddressExposurePathsRequest } from "../types.js";
+export type ListAddressExposurePathsInput = ListAddressExposurePathsRequest & RequestMetadata;
+export declare function listAddressExposurePaths(client: CryptoApisHttpClient, input: ListAddressExposurePathsInput): Promise<import("@cryptoapis-io/mcp-shared").RequestResult<unknown>>;
+//# sourceMappingURL=index.d.ts.map

package/dist/api/exposure/list-address-exposure-paths/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/api/exposure/list-address-exposure-paths/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AACvF,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,aAAa,CAAC;AAEnE,MAAM,MAAM,6BAA6B,GAAG,+BAA+B,GAAG,eAAe,CAAC;AAE9F,wBAAsB,wBAAwB,CAAC,MAAM,EAAE,oBAAoB,EAAE,KAAK,EAAE,6BAA6B,uEAahH"}

package/dist/api/exposure/list-address-exposure-paths/index.js

@@ -0,0 +1,11 @@
+export async function listAddressExposurePaths(client, input) {
+    return client.request("GET", `/aml/exposure/${input.blockchain}/${encodeURIComponent(input.address)}/paths`, {
+        query: {
+            context: input.context,
+            rootAddress: input.rootAddress,
+            limit: input.limit,
+            startingAfter: input.startingAfter,
+        },
+    });
+}
+//# sourceMappingURL=index.js.map

package/dist/api/exposure/list-address-exposure-paths/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/api/exposure/list-address-exposure-paths/index.ts"],"names":[],"mappings":"AAKA,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,MAA4B,EAAE,KAAoC;IAC7G,OAAO,MAAM,CAAC,OAAO,CACjB,KAAK,EACL,iBAAiB,KAAK,CAAC,UAAU,IAAI,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,EAC9E;QACI,KAAK,EAAE;YACH,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,aAAa,EAAE,KAAK,CAAC,aAAa;SACrC;KACJ,CACJ,CAAC;AACN,CAAC"}

package/dist/api/exposure/types.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Blockchains supported by the AML Exposure graph (Get Address Exposure, List Address
+ * Exposure Paths). Narrower than AML_SCREENABLE_BLOCKCHAINS: arbitrum, avalanche, base,
+ * optimism, tezos and kaspa have no exposure graph.
+ */
+export declare const AML_EXPOSURE_BLOCKCHAINS: readonly ["ethereum", "binance-smart-chain", "ethereum-classic", "polygon", "tron", "bitcoin", "bitcoin-cash", "litecoin", "dogecoin", "dash", "zcash", "xrp", "solana"];
+export type AmlExposureBlockchain = (typeof AML_EXPOSURE_BLOCKCHAINS)[number];
+export type GetAddressExposureRequest = {
+    blockchain: AmlExposureBlockchain;
+    address: string;
+};
+export type ListAddressExposurePathsRequest = {
+    blockchain: AmlExposureBlockchain;
+    address: string;
+    rootAddress?: string;
+    limit?: number;
+    startingAfter?: string;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/api/exposure/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/api/exposure/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,0KAc3B,CAAC;AAEX,MAAM,MAAM,qBAAqB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9E,MAAM,MAAM,yBAAyB,GAAG;IACpC,UAAU,EAAE,qBAAqB,CAAC;IAClC,OAAO,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,+BAA+B,GAAG;IAC1C,UAAU,EAAE,qBAAqB,CAAC;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;CAC1B,CAAC"}

package/dist/api/exposure/types.js

@@ -0,0 +1,21 @@
+/**
+ * Blockchains supported by the AML Exposure graph (Get Address Exposure, List Address
+ * Exposure Paths). Narrower than AML_SCREENABLE_BLOCKCHAINS: arbitrum, avalanche, base,
+ * optimism, tezos and kaspa have no exposure graph.
+ */
+export const AML_EXPOSURE_BLOCKCHAINS = [
+    "ethereum",
+    "binance-smart-chain",
+    "ethereum-classic",
+    "polygon",
+    "tron",
+    "bitcoin",
+    "bitcoin-cash",
+    "litecoin",
+    "dogecoin",
+    "dash",
+    "zcash",
+    "xrp",
+    "solana",
+];
+//# sourceMappingURL=types.js.map

package/dist/api/exposure/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/api/exposure/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACpC,UAAU;IACV,qBAAqB;IACrB,kBAAkB;IAClB,SAAS;IACT,MAAM;IACN,SAAS;IACT,cAAc;IACd,UAAU;IACV,UAAU;IACV,MAAM;IACN,OAAO;IACP,KAAK;IACL,QAAQ;CACF,CAAC"}

package/dist/api/index.d.ts

@@ -1,3 +1,4 @@
 export * as addresses from "./addresses/index.js";
 export * as transactions from "./transactions/index.js";
+export * as exposure from "./exposure/index.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/api/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/api/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,SAAS,MAAM,sBAAsB,CAAC;AAClD,OAAO,KAAK,YAAY,MAAM,yBAAyB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/api/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,SAAS,MAAM,sBAAsB,CAAC;AAClD,OAAO,KAAK,YAAY,MAAM,yBAAyB,CAAC;AACxD,OAAO,KAAK,QAAQ,MAAM,qBAAqB,CAAC"}

package/dist/api/index.js

@@ -1,3 +1,4 @@
 export * as addresses from "./addresses/index.js";
 export * as transactions from "./transactions/index.js";
+export * as exposure from "./exposure/index.js";
 //# sourceMappingURL=index.js.map

package/dist/api/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/api/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,SAAS,MAAM,sBAAsB,CAAC;AAClD,OAAO,KAAK,YAAY,MAAM,yBAAyB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/api/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,SAAS,MAAM,sBAAsB,CAAC;AAClD,OAAO,KAAK,YAAY,MAAM,yBAAyB,CAAC;AACxD,OAAO,KAAK,QAAQ,MAAM,qBAAqB,CAAC"}

package/dist/cli.js

@@ -1,12 +1,8 @@
+import { parseHttpCliOptions } from "@cryptoapis-io/mcp-shared";
 import { startAmlServer } from "./server.js";
 function getArg(name) {
     const idx = process.argv.indexOf(`--${name}`);
-    if (idx === -1)
-        return undefined;
-    return process.argv[idx + 1];
-}
-function hasFlag(name) {
-    return process.argv.includes(`--${name}`);
+    return idx === -1 ? undefined : process.argv[idx + 1];
 }
 async function main() {
     const transport = (getArg("transport") ?? "stdio");
@@ -15,14 +11,11 @@ async function main() {
         await startAmlServer({ transport: "stdio", apiKey });
         return;
     }
-    const host = getArg("host") ?? "0.0.0.0";
-    const port = Number(getArg("port") ?? "3000");
-    const path = getArg("path") ?? "/mcp";
-    const stateless = hasFlag("stateless");
-    await startAmlServer({ transport: "http", host, port, path, stateless, apiKey });
+    // --host (default 127.0.0.1), --port, --path, --stateless, --auth-token / MCP_AUTH_TOKEN, --allowed-hosts
+    await startAmlServer({ transport: "http", apiKey, ...parseHttpCliOptions() });
 }
 main().catch((err) => {
-    console.error(err);
+    console.error(err instanceof Error ? err.message : err);
     process.exit(1);
 });
 //# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE7C,SAAS,MAAM,CAAC,IAAY;IACxB,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAC9C,IAAI,GAAG,KAAK,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACjC,OAAO,OAAO,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,OAAO,CAAC,IAAY;IACzB,OAAO,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;AAC9C,CAAC;AAED,KAAK,UAAU,IAAI;IACf,MAAM,SAAS,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,OAAO,CAAqB,CAAC;IACvE,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IAEjC,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;QACxB,MAAM,cAAc,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QACrD,OAAO;IACX,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC;IACzC,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC;IACtC,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAEvC,MAAM,cAAc,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;AACrF,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACjB,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE7C,SAAS,MAAM,CAAC,IAAY;IACxB,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAC9C,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,KAAK,UAAU,IAAI;IACf,MAAM,SAAS,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,OAAO,CAAqB,CAAC;IACvE,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IACjC,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;QACxB,MAAM,cAAc,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QACrD,OAAO;IACX,CAAC;IACD,0GAA0G;IAC1G,MAAM,cAAc,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,mBAAmB,EAAE,EAAE,CAAC,CAAC;AAClF,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACjB,OAAO,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACxD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC,CAAC,CAAC"}

package/dist/prompts/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/prompts/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAKzE,wBAAgB,eAAe,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAyBvD"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/prompts/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAKzE,wBAAgB,eAAe,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAiDvD"}

package/dist/prompts/index.js

@@ -21,5 +21,23 @@ export function registerPrompts(server) {
             },
         ],
     }));
+    server.registerPrompt("check-address-exposure", {
+        description: "Check a blockchain address's exposure to risky entities via the AML exposure graph (200,000 credits per request; 100,000 credits per page for paths)",
+        argsSchema: {
+            blockchain: z.string().describe("Blockchain protocol - one of the exposure-supported chains"),
+            address: z.string().describe("Blockchain address to check exposure for"),
+            rootAddress: z.string().optional().describe("Only return routes originating from this flagged root address"),
+        },
+    }, (args) => ({
+        messages: [
+            {
+                role: "user",
+                content: {
+                    type: "text",
+                    text: `Use the aml tool with action get-address-exposure to check address ${args.address} on ${args.blockchain} for exposure to risky entities (200,000 credits). Then use action list-address-exposure-paths (100,000 credits per page${args.rootAddress ? `, rootAddress ${args.rootAddress}` : ""}) to list the connecting paths, passing the response's nextStartingAfter back as startingAfter to page through all results. Report the exposure categories, risk levels, and the paths found.\n\n${formatAmlCapabilities(supportedCapabilities)}`,
+                },
+            },
+        ],
+    }));
 }
 //# sourceMappingURL=index.js.map

package/dist/prompts/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/prompts/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,wCAAwC,CAAC;AAEtG,MAAM,UAAU,eAAe,CAAC,MAAiB;IAC7C,MAAM,CAAC,cAAc,CACjB,gBAAgB,EAChB;QACI,WAAW,EAAE,2DAA2D;QACxE,UAAU,EAAE;YACR,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;YACvE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6DAA6D,CAAC;YACzG,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+DAA+D,CAAC;SACnH;KACJ,EACD,CAAC,IAAI,EAAmB,EAAE,CAAC,CAAC;QACxB,QAAQ,EAAE;YACN;gBACI,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE;oBACL,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,IAAI,CAAC,eAAe;wBACtB,CAAC,CAAC,wEAAwE,IAAI,CAAC,eAAe,OAAO,IAAI,CAAC,UAAU,8HAA8H,qBAAqB,CAAC,qBAAqB,CAAC,EAAE;wBAChS,CAAC,CAAC,gEAAgE,IAAI,CAAC,OAAO,yFAAyF,qBAAqB,CAAC,qBAAqB,CAAC,EAAE;iBAC5N;aACJ;SACJ;KACJ,CAAC,CACL,CAAC;AACN,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/prompts/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,wCAAwC,CAAC;AAEtG,MAAM,UAAU,eAAe,CAAC,MAAiB;IAC7C,MAAM,CAAC,cAAc,CACjB,gBAAgB,EAChB;QACI,WAAW,EAAE,2DAA2D;QACxE,UAAU,EAAE;YACR,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;YACvE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6DAA6D,CAAC;YACzG,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+DAA+D,CAAC;SACnH;KACJ,EACD,CAAC,IAAI,EAAmB,EAAE,CAAC,CAAC;QACxB,QAAQ,EAAE;YACN;gBACI,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE;oBACL,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,IAAI,CAAC,eAAe;wBACtB,CAAC,CAAC,wEAAwE,IAAI,CAAC,eAAe,OAAO,IAAI,CAAC,UAAU,8HAA8H,qBAAqB,CAAC,qBAAqB,CAAC,EAAE;wBAChS,CAAC,CAAC,gEAAgE,IAAI,CAAC,OAAO,yFAAyF,qBAAqB,CAAC,qBAAqB,CAAC,EAAE;iBAC5N;aACJ;SACJ;KACJ,CAAC,CACL,CAAC;IAEF,MAAM,CAAC,cAAc,CACjB,wBAAwB,EACxB;QACI,WAAW,EACP,sJAAsJ;QAC1J,UAAU,EAAE;YACR,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4DAA4D,CAAC;YAC7F,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;YACxE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+DAA+D,CAAC;SAC/G;KACJ,EACD,CAAC,IAAI,EAAmB,EAAE,CAAC,CAAC;QACxB,QAAQ,EAAE;YACN;gBACI,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE;oBACL,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,sEAAsE,IAAI,CAAC,OAAO,OAAO,IAAI,CAAC,UAAU,2HAA2H,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,iBAAiB,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,oMAAoM,qBAAqB,CAAC,qBAAqB,CAAC,EAAE;iBACzhB;aACJ;SACJ;KACJ,CAAC,CACL,CAAC;AACN,CAAC"}

package/dist/resources/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/resources/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAKzE,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAezD"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/resources/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAKzE,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAkBzD"}

package/dist/resources/index.js

@@ -1,7 +1,9 @@
 import { supportedCapabilities } from "./supported-capabilities.js";
 const RESOURCE_URI = "cryptoapis://aml/supported-capabilities";
 export function registerResources(server) {
-    server.registerResource("supported-capabilities", RESOURCE_URI, { description: "Available AML tools, actions, and the blockchains screen-transaction supports" }, (uri) => ({
+    server.registerResource("supported-capabilities", RESOURCE_URI, {
+        description: "Available AML tools, actions, and the blockchains screen-transaction and the exposure actions support",
+    }, (uri) => ({
         contents: [
             {
                 uri: uri.href,

package/dist/resources/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/resources/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAEpE,MAAM,YAAY,GAAG,yCAAyC,CAAC;AAE/D,MAAM,UAAU,iBAAiB,CAAC,MAAiB;IAC/C,MAAM,CAAC,gBAAgB,CACnB,wBAAwB,EACxB,YAAY,EACZ,EAAE,WAAW,EAAE,+EAA+E,EAAE,EAChG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACN,QAAQ,EAAE;YACN;gBACI,GAAG,EAAE,GAAG,CAAC,IAAI;gBACb,QAAQ,EAAE,kBAAkB;gBAC5B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,qBAAqB,EAAE,IAAI,EAAE,CAAC,CAAC;aACvD;SACJ;KACJ,CAAC,CACL,CAAC;AACN,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/resources/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAEpE,MAAM,YAAY,GAAG,yCAAyC,CAAC;AAE/D,MAAM,UAAU,iBAAiB,CAAC,MAAiB;IAC/C,MAAM,CAAC,gBAAgB,CACnB,wBAAwB,EACxB,YAAY,EACZ;QACI,WAAW,EACP,uGAAuG;KAC9G,EACD,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACN,QAAQ,EAAE;YACN;gBACI,GAAG,EAAE,GAAG,CAAC,IAAI;gBACb,QAAQ,EAAE,kBAAkB;gBAC5B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,qBAAqB,EAAE,IAAI,EAAE,CAAC,CAAC;aACvD;SACJ;KACJ,CAAC,CACL,CAAC;AACN,CAAC"}

package/dist/resources/supported-capabilities.d.ts

@@ -2,7 +2,10 @@
  * Static resource describing the AML capabilities available in this package.
  *
  * verify-address has no blockchain parameter (address format alone identifies the chain);
- * screen-transaction requires an explicit blockchain from AML_SCREENABLE_BLOCKCHAINS.
+ * screen-transaction requires an explicit blockchain from AML_SCREENABLE_BLOCKCHAINS;
+ * get-address-exposure and list-address-exposure-paths require a blockchain from the
+ * narrower AML_EXPOSURE_BLOCKCHAINS (no exposure graph for arbitrum, avalanche, base,
+ * optimism, tezos or kaspa).
  */
 export type AmlCapability = {
     tool: string;
@@ -17,6 +20,7 @@ export type AmlCapability = {
 export type SupportedCapabilitiesResource = {
     description: string;
     screenableBlockchains: readonly string[];
+    exposureBlockchains: readonly string[];
     capabilities: readonly AmlCapability[];
 };
 /**

package/dist/resources/supported-capabilities.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"supported-capabilities.d.ts","sourceRoot":"","sources":["../../src/resources/supported-capabilities.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AAEH,MAAM,MAAM,aAAa,GAAG;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE;QACL,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;QAClC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;KACtC,EAAE,CAAC;CACP,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,qBAAqB,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,YAAY,EAAE,SAAS,aAAa,EAAE,CAAC;CAC1C,CAAC;AAEF;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,6BAA6B,GAAG,MAAM,CAYjF;AAED,eAAO,MAAM,qBAAqB,EAAE,6BAsBnC,CAAC"}
+{"version":3,"file":"supported-capabilities.d.ts","sourceRoot":"","sources":["../../src/resources/supported-capabilities.ts"],"names":[],"mappings":"AAGA;;;;;;;;GAQG;AAEH,MAAM,MAAM,aAAa,GAAG;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE;QACL,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;QAClC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;KACtC,EAAE,CAAC;CACP,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,qBAAqB,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,mBAAmB,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,YAAY,EAAE,SAAS,aAAa,EAAE,CAAC;CAC1C,CAAC;AAEF;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,6BAA6B,GAAG,MAAM,CAejF;AAED,eAAO,MAAM,qBAAqB,EAAE,6BAkCnC,CAAC"}

package/dist/resources/supported-capabilities.js

@@ -1,4 +1,5 @@
 import { AML_SCREENABLE_BLOCKCHAINS } from "../api/transactions/screen-transaction/types.js";
+import { AML_EXPOSURE_BLOCKCHAINS } from "../api/exposure/types.js";
 /**
  * Format AML capabilities as human-readable text for embedding in prompt output.
  */
@@ -12,11 +13,13 @@ export function formatAmlCapabilities(data) {
         }
     }
     lines.push(`\nscreen-transaction supported blockchains: ${data.screenableBlockchains.join(", ")}`);
+    lines.push(`\nget-address-exposure/list-address-exposure-paths supported blockchains: ${data.exposureBlockchains.join(", ")}`);
     return lines.join("\n");
 }
 export const supportedCapabilities = {
-    description: "AML risk-screening tools for blockchain addresses and transactions. verify-address works across any supported chain from the address format alone; screen-transaction requires the blockchain to be specified explicitly.",
+    description: "AML risk-screening tools for blockchain addresses and transactions. verify-address works across any supported chain from the address format alone; screen-transaction, get-address-exposure and list-address-exposure-paths require the blockchain to be specified explicitly.",
     screenableBlockchains: AML_SCREENABLE_BLOCKCHAINS,
+    exposureBlockchains: AML_EXPOSURE_BLOCKCHAINS,
     capabilities: [
         {
             tool: "aml",
@@ -32,6 +35,17 @@ export const supportedCapabilities = {
                     description: "Screen a transaction and its participants against AML data",
                     requiredParams: ["blockchain", "transactionHash"],
                 },
+                {
+                    name: "get-address-exposure",
+                    description: "Get an address's exposure to risky entities/categories in the AML exposure graph (200,000 credits per request)",
+                    requiredParams: ["blockchain", "address"],
+                },
+                {
+                    name: "list-address-exposure-paths",
+                    description: "List the paths connecting an address to risky entities in the AML exposure graph (100,000 credits per page)",
+                    requiredParams: ["blockchain", "address"],
+                    optionalParams: ["rootAddress", "limit", "startingAfter"],
+                },
             ],
         },
     ],

package/dist/resources/supported-capabilities.js.map

@@ -1 +1 @@
-{"version":3,"file":"supported-capabilities.js","sourceRoot":"","sources":["../../src/resources/supported-capabilities.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,iDAAiD,CAAC;AA0B7F;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAmC;IACrE,MAAM,KAAK,GAAa,CAAC,6BAA6B,CAAC,CAAC;IACxD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;QAChD,KAAK,MAAM,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YAC/B,MAAM,MAAM,GACR,MAAM,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/F,KAAK,CAAC,IAAI,CAAC,OAAO,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,WAAW,GAAG,MAAM,EAAE,CAAC,CAAC;QACrE,CAAC;IACL,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,+CAA+C,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnG,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,CAAC,MAAM,qBAAqB,GAAkC;IAChE,WAAW,EACP,2NAA2N;IAC/N,qBAAqB,EAAE,0BAA0B;IACjD,YAAY,EAAE;QACV;YACI,IAAI,EAAE,KAAK;YACX,WAAW,EAAE,gDAAgD;YAC7D,OAAO,EAAE;gBACL;oBACI,IAAI,EAAE,gBAAgB;oBACtB,WAAW,EAAE,kGAAkG;oBAC/G,cAAc,EAAE,CAAC,SAAS,CAAC;iBAC9B;gBACD;oBACI,IAAI,EAAE,oBAAoB;oBAC1B,WAAW,EAAE,4DAA4D;oBACzE,cAAc,EAAE,CAAC,YAAY,EAAE,iBAAiB,CAAC;iBACpD;aACJ;SACJ;KACJ;CACJ,CAAC"}
+{"version":3,"file":"supported-capabilities.js","sourceRoot":"","sources":["../../src/resources/supported-capabilities.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,iDAAiD,CAAC;AAC7F,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AA8BpE;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAmC;IACrE,MAAM,KAAK,GAAa,CAAC,6BAA6B,CAAC,CAAC;IACxD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;QAChD,KAAK,MAAM,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YAC/B,MAAM,MAAM,GACR,MAAM,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/F,KAAK,CAAC,IAAI,CAAC,OAAO,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,WAAW,GAAG,MAAM,EAAE,CAAC,CAAC;QACrE,CAAC;IACL,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,+CAA+C,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnG,KAAK,CAAC,IAAI,CACN,6EAA6E,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACrH,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,CAAC,MAAM,qBAAqB,GAAkC;IAChE,WAAW,EACP,gRAAgR;IACpR,qBAAqB,EAAE,0BAA0B;IACjD,mBAAmB,EAAE,wBAAwB;IAC7C,YAAY,EAAE;QACV;YACI,IAAI,EAAE,KAAK;YACX,WAAW,EAAE,gDAAgD;YAC7D,OAAO,EAAE;gBACL;oBACI,IAAI,EAAE,gBAAgB;oBACtB,WAAW,EAAE,kGAAkG;oBAC/G,cAAc,EAAE,CAAC,SAAS,CAAC;iBAC9B;gBACD;oBACI,IAAI,EAAE,oBAAoB;oBAC1B,WAAW,EAAE,4DAA4D;oBACzE,cAAc,EAAE,CAAC,YAAY,EAAE,iBAAiB,CAAC;iBACpD;gBACD;oBACI,IAAI,EAAE,sBAAsB;oBAC5B,WAAW,EAAE,gHAAgH;oBAC7H,cAAc,EAAE,CAAC,YAAY,EAAE,SAAS,CAAC;iBAC5C;gBACD;oBACI,IAAI,EAAE,6BAA6B;oBACnC,WAAW,EAAE,6GAA6G;oBAC1H,cAAc,EAAE,CAAC,YAAY,EAAE,SAAS,CAAC;oBACzC,cAAc,EAAE,CAAC,aAAa,EAAE,OAAO,EAAE,eAAe,CAAC;iBAC5D;aACJ;SACJ;KACJ;CACJ,CAAC"}

package/dist/server.d.ts

@@ -8,6 +8,8 @@ export type StartOptions = {
     path?: string;
     stateless?: boolean;
     apiKey?: string;
+    authToken?: string;
+    allowedHosts?: string[];
 };
 export declare function startAmlServer(opts: StartOptions): Promise<void>;
 //# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAiEA,MAAM,MAAM,YAAY,GAClB;IAAE,SAAS,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GACvC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAE/G,wBAAsB,cAAc,CAAC,IAAI,EAAE,YAAY,iBA8CtD"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAuDA,MAAM,MAAM,YAAY,GAClB;IAAE,SAAS,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GACvC;IACI,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B,CAAC;AAER,wBAAsB,cAAc,CAAC,IAAI,EAAE,YAAY,iBAuBtD"}

package/dist/server.js

@@ -1,9 +1,6 @@
-import { randomUUID } from "node:crypto";
-import express from "express";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
-import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
-import { CryptoApisHttpClient, formatCreditsForDescription, loadSharedConfig, McpLogger, runWithApiKey, } from "@cryptoapis-io/mcp-shared";
+import { CryptoApisHttpClient, formatCreditsForDescription, loadSharedConfig, McpLogger, startHttpServer } from "@cryptoapis-io/mcp-shared";
 import { tools } from "./tools/index.js";
 import { registerResources } from "./resources/index.js";
 import { registerPrompts } from "./prompts/index.js";
@@ -52,40 +49,23 @@ export async function startAmlServer(opts) {
     const isHttp = opts.transport === "http";
     const cfg = loadSharedConfig({ apiKey: opts.apiKey, allowMissingApiKey: isHttp });
     const client = new CryptoApisHttpClient(cfg);
-    const { server, logger } = buildServer(client);
     if (opts.transport === "stdio") {
+        const { server, logger } = buildServer(client);
         const transport = new StdioServerTransport();
         await server.connect(transport);
         logger.logInfo("cryptoapis-aml MCP running (stdio)");
         return;
     }
-    const host = opts.host ?? "0.0.0.0";
-    const port = opts.port ?? 3000;
-    const path = opts.path ?? "/mcp";
-    const stateless = opts.stateless ?? false;
-    const transport = new StreamableHTTPServerTransport({
-        sessionIdGenerator: stateless ? undefined : () => randomUUID(),
-    });
-    await server.connect(transport);
-    const app = express();
-    app.use(express.json({ limit: "1mb" }));
-    app.all(path, (req, res) => {
-        const headerApiKey = req.headers["x-api-key"];
-        if (headerApiKey && !cfg.apiKey) {
-            return runWithApiKey(headerApiKey, () => transport.handleRequest(req, res, req.body));
-        }
-        return transport.handleRequest(req, res, req.body);
-    });
-    app.get("/health", (_req, res) => res.status(200).json({ ok: true }));
-    app.listen(port, host, () => {
-        logger.logInfo(`cryptoapis-aml MCP running (http) at http://${host}:${port}${path}`);
-        logger.logInfo(`mode: ${stateless ? "stateless" : "stateful"}`);
-        if (cfg.apiKey) {
-            logger.logInfo("API key: provided at startup — x-api-key request headers will be ignored");
-        }
-        else {
-            logger.logInfo("API key: not provided — each request must include x-api-key header");
-        }
+    await startHttpServer({
+        name: CRYPTOAPIS_SERVER_INFO.name,
+        createServer: () => buildServer(client).server,
+        startupApiKey: cfg.apiKey,
+        host: opts.host,
+        port: opts.port,
+        path: opts.path,
+        stateless: opts.stateless,
+        authToken: opts.authToken,
+        allowedHosts: opts.allowedHosts,
     });
 }
 //# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -1 +1 @@
-{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,OAAO,MAAM,SAAS,CAAC;AAE9B,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AAEnG,OAAO,EACH,oBAAoB,EACpB,2BAA2B,EAC3B,gBAAgB,EAChB,SAAS,EACT,aAAa,GAChB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,MAAM,sBAAsB,GAAG;IAC3B,IAAI,EAAE,gBAAgB;IACtB,OAAO,EAAE,OAAO;IAChB,KAAK,EAAE,gBAAgB;IACvB,UAAU,EAAE,kCAAkC;IAC9C,KAAK,EAAE;QACH;YACI,GAAG,EAAE,kDAAkD;YACvD,QAAQ,EAAE,eAAe;YACzB,KAAK,EAAE,CAAC,KAAK,CAAC;YACd,KAAK,EAAE,OAAgB;SAC1B;QACD;YACI,GAAG,EAAE,wDAAwD;YAC7D,QAAQ,EAAE,eAAe;YACzB,KAAK,EAAE,CAAC,KAAK,CAAC;YACd,KAAK,EAAE,MAAe;SACzB;KACJ;CACJ,CAAC;AAEF,SAAS,WAAW,CAAC,MAA4B;IAC7C,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,sBAAsB,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAEzG,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACpB,MAAM,WAAW,GACb,CAAC,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,WAAW,OAAO,2BAA2B,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;QACxG,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,KAA8B,EAAE,EAAE;YACxG,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;YAC7D,OAAO,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,KAAc,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;gBACpE,MAAM,CAAC,QAAQ,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;oBAC9D,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,UAAU,EAAE,KAAK,CAAC,UAAU;iBAC/B,CAAC,CAAC;gBACH,MAAM,GAAG,CAAC;YACd,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;IACP,CAAC;IAED,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC1B,eAAe,CAAC,MAAM,CAAC,CAAC;IAExB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAC9B,CAAC;AAMD,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAkB;IACnD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,KAAK,MAAM,CAAC;IACzC,MAAM,GAAG,GAAG,gBAAgB,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,kBAAkB,EAAE,MAAM,EAAE,CAAC,CAAC;IAClF,MAAM,MAAM,GAAG,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAC7C,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IAE/C,IAAI,IAAI,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;QAC7B,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAChC,MAAM,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC;QACrD,OAAO;IACX,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,SAAS,CAAC;IACpC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC;IAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC;IACjC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IAE1C,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC;QAChD,kBAAkB,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,UAAU,EAAE;KACjE,CAAC,CAAC;IAEH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAEhC,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAExC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACvB,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,CAAuB,CAAC;QACpE,IAAI,YAAY,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;YAC9B,OAAO,aAAa,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1F,CAAC;QACD,OAAO,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAEtE,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;QACxB,MAAM,CAAC,OAAO,CAAC,+CAA+C,IAAI,IAAI,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC;QACrF,MAAM,CAAC,OAAO,CAAC,SAAS,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;QAChE,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YACb,MAAM,CAAC,OAAO,CAAC,0EAA0E,CAAC,CAAC;QAC/F,CAAC;aAAM,CAAC;YACJ,MAAM,CAAC,OAAO,CAAC,oEAAoE,CAAC,CAAC;QACzF,CAAC;IACL,CAAC,CAAC,CAAC;AACP,CAAC"}
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AAEjF,OAAO,EAAE,oBAAoB,EAAE,2BAA2B,EAAE,gBAAgB,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5I,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,MAAM,sBAAsB,GAAG;IAC3B,IAAI,EAAE,gBAAgB;IACtB,OAAO,EAAE,OAAO;IAChB,KAAK,EAAE,gBAAgB;IACvB,UAAU,EAAE,kCAAkC;IAC9C,KAAK,EAAE;QACH;YACI,GAAG,EAAE,kDAAkD;YACvD,QAAQ,EAAE,eAAe;YACzB,KAAK,EAAE,CAAC,KAAK,CAAC;YACd,KAAK,EAAE,OAAgB;SAC1B;QACD;YACI,GAAG,EAAE,wDAAwD;YAC7D,QAAQ,EAAE,eAAe;YACzB,KAAK,EAAE,CAAC,KAAK,CAAC;YACd,KAAK,EAAE,MAAe;SACzB;KACJ;CACJ,CAAC;AAEF,SAAS,WAAW,CAAC,MAA4B;IAC7C,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,sBAAsB,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAEzG,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACpB,MAAM,WAAW,GACb,CAAC,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,WAAW,OAAO,2BAA2B,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;QACxG,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,KAA8B,EAAE,EAAE;YACxG,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;YAC7D,OAAO,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,KAAc,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;gBACpE,MAAM,CAAC,QAAQ,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;oBAC9D,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,UAAU,EAAE,KAAK,CAAC,UAAU;iBAC/B,CAAC,CAAC;gBACH,MAAM,GAAG,CAAC;YACd,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;IACP,CAAC;IAED,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC1B,eAAe,CAAC,MAAM,CAAC,CAAC;IAExB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAC9B,CAAC;AAeD,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAkB;IACnD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,KAAK,MAAM,CAAC;IACzC,MAAM,GAAG,GAAG,gBAAgB,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,kBAAkB,EAAE,MAAM,EAAE,CAAC,CAAC;IAClF,MAAM,MAAM,GAAG,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAC7C,IAAI,IAAI,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;QAC7B,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;QAC/C,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAChC,MAAM,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC;QACrD,OAAO;IACX,CAAC;IAED,MAAM,eAAe,CAAC;QAClB,IAAI,EAAE,sBAAsB,CAAC,IAAI;QACjC,YAAY,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,MAAM;QAC9C,aAAa,EAAE,GAAG,CAAC,MAAM;QACzB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,YAAY,EAAE,IAAI,CAAC,YAAY;KAClC,CAAC,CAAC;AACP,CAAC"}

package/dist/tools/aml/get-address-exposure/credits.d.ts

@@ -0,0 +1,3 @@
+/** Credits per call (source: OpenAPI x-cost). */
+export declare const credits = 200000;
+//# sourceMappingURL=credits.d.ts.map

package/dist/tools/aml/get-address-exposure/credits.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credits.d.ts","sourceRoot":"","sources":["../../../../src/tools/aml/get-address-exposure/credits.ts"],"names":[],"mappings":"AAAA,iDAAiD;AACjD,eAAO,MAAM,OAAO,SAAS,CAAC"}

package/dist/tools/aml/get-address-exposure/credits.js

@@ -0,0 +1,3 @@
+/** Credits per call (source: OpenAPI x-cost). */
+export const credits = 200000;
+//# sourceMappingURL=credits.js.map

package/dist/tools/aml/get-address-exposure/credits.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credits.js","sourceRoot":"","sources":["../../../../src/tools/aml/get-address-exposure/credits.ts"],"names":[],"mappings":"AAAA,iDAAiD;AACjD,MAAM,CAAC,MAAM,OAAO,GAAG,MAAM,CAAC"}

package/dist/tools/aml/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/tools/aml/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAqB,MAAM,aAAa,CAAC;AAc/D,eAAO,MAAM,OAAO,EAAE,UAAU,CAAC,OAAO,aAAa,CAyDpD,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/tools/aml/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAsB,aAAa,EAAqB,MAAM,aAAa,CAAC;AAuBnF,eAAO,MAAM,OAAO,EAAE,UAAU,CAAC,OAAO,aAAa,CAgFpD,CAAC"}

package/dist/tools/aml/index.js

@@ -1,13 +1,21 @@
-import { AmlToolSchema } from "./schema.js";
+import { ACTION_BLOCKCHAINS, AmlToolSchema } from "./schema.js";
 import { verifyAddress } from "../../api/addresses/verify-address/index.js";
 import { screenTransaction } from "../../api/transactions/screen-transaction/index.js";
+import { getAddressExposure } from "../../api/exposure/get-address-exposure/index.js";
+import { listAddressExposurePaths } from "../../api/exposure/list-address-exposure-paths/index.js";
 import { credits as verifyAddressCredits } from "./verify-address/credits.js";
 import { credits as screenTransactionCredits } from "./screen-transaction/credits.js";
+import { credits as getAddressExposureCredits } from "./get-address-exposure/credits.js";
+import { credits as listAddressExposurePathsCredits } from "./list-address-exposure-paths/credits.js";
 const AML_DESCRIPTION = `AML (Anti-Money Laundering) risk checks for addresses and transactions.
 
 Actions:
 • verify-address: Check if a blockchain address is flagged or associated with fraud, sanctions, ransomware, exploits, darknet markets, or other AML risk categories. Returns risk score, risk band, and the flagging sources.
 • screen-transaction: Screen a transaction against AML data. Returns whether the transaction is flagged, its risk score/band, and the flagged participant addresses with their roles, scores, severities and categories.
+• get-address-exposure: Get an address's exposure to risky entities/categories across the AML exposure graph. Params: blockchain, address. Costs 200,000 credits per request.
+• list-address-exposure-paths: List the paths connecting an address to risky entities in the AML exposure graph. Params: blockchain, address; optional rootAddress (only return routes originating from this flagged root address), limit (1-50, defaults to 10), startingAfter (pagination cursor). Costs 100,000 credits per page - pass the response's next cursor back as startingAfter to fetch subsequent pages.
+
+get-address-exposure and list-address-exposure-paths only support a subset of chains - see the blockchain parameter description.
 
 Note: the credit cost of these endpoints is significant — see credits below.`;
 export const amlTool = {
@@ -16,6 +24,8 @@ export const amlTool = {
     credits: {
         "verify-address": verifyAddressCredits,
         "screen-transaction": screenTransactionCredits,
+        "get-address-exposure": getAddressExposureCredits,
+        "list-address-exposure-paths": listAddressExposurePathsCredits,
     },
     inputSchema: AmlToolSchema,
     handler: (client, logger) => async (input) => {
@@ -40,6 +50,29 @@ export const amlTool = {
                     context: input.context,
                 });
                 break;
+            case "get-address-exposure":
+                if (!input.address)
+                    throw new Error("address is required for get-address-exposure");
+                assertSupportedExposureBlockchain(input.action, input.blockchain);
+                result = await getAddressExposure(client, {
+                    blockchain: input.blockchain,
+                    address: input.address,
+                    context: input.context,
+                });
+                break;
+            case "list-address-exposure-paths":
+                if (!input.address)
+                    throw new Error("address is required for list-address-exposure-paths");
+                assertSupportedExposureBlockchain(input.action, input.blockchain);
+                result = await listAddressExposurePaths(client, {
+                    blockchain: input.blockchain,
+                    address: input.address,
+                    rootAddress: input.rootAddress,
+                    limit: input.limit,
+                    startingAfter: input.startingAfter,
+                    context: input.context,
+                });
+                break;
             default:
                 throw new Error(`Unknown action: ${input.action}`);
         }
@@ -67,4 +100,12 @@ export const amlTool = {
         };
     },
 };
+function assertSupportedExposureBlockchain(action, blockchain) {
+    if (!blockchain)
+        throw new Error(`blockchain is required for ${action}`);
+    const allowed = ACTION_BLOCKCHAINS[action];
+    if (allowed && !allowed.includes(blockchain)) {
+        throw new Error(`blockchain must be one of: ${allowed.join(", ")} (got "${blockchain}")`);
+    }
+}
 //# sourceMappingURL=index.js.map

package/dist/tools/aml/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/tools/aml/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAqB,MAAM,aAAa,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,6CAA6C,CAAC;AAC5E,OAAO,EAAE,iBAAiB,EAAE,MAAM,oDAAoD,CAAC;AACvF,OAAO,EAAE,OAAO,IAAI,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAC9E,OAAO,EAAE,OAAO,IAAI,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAEtF,MAAM,eAAe,GAAG;;;;;;6EAMqD,CAAC;AAE9E,MAAM,CAAC,MAAM,OAAO,GAAqC;IACrD,IAAI,EAAE,KAAK;IACX,WAAW,EAAE,eAAe;IAC5B,OAAO,EAAE;QACL,gBAAgB,EAAE,oBAAoB;QACtC,oBAAoB,EAAE,wBAAwB;KACjD;IACD,WAAW,EAAE,aAAa;IAC1B,OAAO,EACH,CAAC,MAA4B,EAAE,MAAiB,EAAE,EAAE,CACpD,KAAK,EAAE,KAAmB,EAAE,EAAE;QAC1B,IAAI,MAA8B,CAAC;QACnC,QAAQ,KAAK,CAAC,MAAM,EAAE,CAAC;YACnB,KAAK,gBAAgB;gBACjB,IAAI,CAAC,KAAK,CAAC,OAAO;oBAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;gBAC9E,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE;oBACjC,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,OAAO,EAAE,KAAK,CAAC,OAAO;iBACzB,CAAC,CAAC;gBACH,MAAM;YACV,KAAK,oBAAoB;gBACrB,IAAI,CAAC,KAAK,CAAC,UAAU;oBAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;gBACxF,IAAI,CAAC,KAAK,CAAC,eAAe;oBAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;gBAClG,MAAM,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE;oBACrC,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,eAAe,EAAE,KAAK,CAAC,eAAe;oBACtC,OAAO,EAAE,KAAK,CAAC,OAAO;iBACzB,CAAC,CAAC;gBACH,MAAM;YACV;gBACI,MAAM,IAAI,KAAK,CAAC,mBAAoB,KAA4B,CAAC,MAAM,EAAE,CAAC,CAAC;QACnF,CAAC;QAED,MAAM,CAAC,OAAO,CAAC;YACX,IAAI,EAAE,KAAK;YACX,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,eAAe,EAAE,MAAM,CAAC,eAAe;SAC1C,CAAC,CAAC;QAEH,OAAO;YACH,OAAO,EAAE;gBACL;oBACI,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACjB,GAAI,MAAM,CAAC,IAAe;wBAC1B,eAAe,EAAE,MAAM,CAAC,eAAe;wBACvC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;wBACzC,YAAY,EAAE,MAAM,CAAC,YAAY;wBACjC,eAAe,EAAE,MAAM,CAAC,eAAe;qBAC1C,CAAC;iBACL;aACJ;SACJ,CAAC;IACN,CAAC;CACR,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/tools/aml/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAqB,MAAM,aAAa,CAAC;AACnF,OAAO,EAAE,aAAa,EAAE,MAAM,6CAA6C,CAAC;AAC5E,OAAO,EAAE,iBAAiB,EAAE,MAAM,oDAAoD,CAAC;AACvF,OAAO,EAAE,kBAAkB,EAAE,MAAM,kDAAkD,CAAC;AACtF,OAAO,EAAE,wBAAwB,EAAE,MAAM,yDAAyD,CAAC;AAEnG,OAAO,EAAE,OAAO,IAAI,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAC9E,OAAO,EAAE,OAAO,IAAI,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AACtF,OAAO,EAAE,OAAO,IAAI,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AACzF,OAAO,EAAE,OAAO,IAAI,+BAA+B,EAAE,MAAM,0CAA0C,CAAC;AAEtG,MAAM,eAAe,GAAG;;;;;;;;;;6EAUqD,CAAC;AAE9E,MAAM,CAAC,MAAM,OAAO,GAAqC;IACrD,IAAI,EAAE,KAAK;IACX,WAAW,EAAE,eAAe;IAC5B,OAAO,EAAE;QACL,gBAAgB,EAAE,oBAAoB;QACtC,oBAAoB,EAAE,wBAAwB;QAC9C,sBAAsB,EAAE,yBAAyB;QACjD,6BAA6B,EAAE,+BAA+B;KACjE;IACD,WAAW,EAAE,aAAa;IAC1B,OAAO,EACH,CAAC,MAA4B,EAAE,MAAiB,EAAE,EAAE,CACpD,KAAK,EAAE,KAAmB,EAAE,EAAE;QAC1B,IAAI,MAA8B,CAAC;QACnC,QAAQ,KAAK,CAAC,MAAM,EAAE,CAAC;YACnB,KAAK,gBAAgB;gBACjB,IAAI,CAAC,KAAK,CAAC,OAAO;oBAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;gBAC9E,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE;oBACjC,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,OAAO,EAAE,KAAK,CAAC,OAAO;iBACzB,CAAC,CAAC;gBACH,MAAM;YACV,KAAK,oBAAoB;gBACrB,IAAI,CAAC,KAAK,CAAC,UAAU;oBAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;gBACxF,IAAI,CAAC,KAAK,CAAC,eAAe;oBAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;gBAClG,MAAM,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE;oBACrC,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,eAAe,EAAE,KAAK,CAAC,eAAe;oBACtC,OAAO,EAAE,KAAK,CAAC,OAAO;iBACzB,CAAC,CAAC;gBACH,MAAM;YACV,KAAK,sBAAsB;gBACvB,IAAI,CAAC,KAAK,CAAC,OAAO;oBAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;gBACpF,iCAAiC,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;gBAClE,MAAM,GAAG,MAAM,kBAAkB,CAAC,MAAM,EAAE;oBACtC,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,OAAO,EAAE,KAAK,CAAC,OAAO;iBACzB,CAAC,CAAC;gBACH,MAAM;YACV,KAAK,6BAA6B;gBAC9B,IAAI,CAAC,KAAK,CAAC,OAAO;oBAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;gBAC3F,iCAAiC,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;gBAClE,MAAM,GAAG,MAAM,wBAAwB,CAAC,MAAM,EAAE;oBAC5C,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,WAAW,EAAE,KAAK,CAAC,WAAW;oBAC9B,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,aAAa,EAAE,KAAK,CAAC,aAAa;oBAClC,OAAO,EAAE,KAAK,CAAC,OAAO;iBACzB,CAAC,CAAC;gBACH,MAAM;YACV;gBACI,MAAM,IAAI,KAAK,CAAC,mBAAoB,KAA4B,CAAC,MAAM,EAAE,CAAC,CAAC;QACnF,CAAC;QAED,MAAM,CAAC,OAAO,CAAC;YACX,IAAI,EAAE,KAAK;YACX,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,eAAe,EAAE,MAAM,CAAC,eAAe;SAC1C,CAAC,CAAC;QAEH,OAAO;YACH,OAAO,EAAE;gBACL;oBACI,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACjB,GAAI,MAAM,CAAC,IAAe;wBAC1B,eAAe,EAAE,MAAM,CAAC,eAAe;wBACvC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;wBACzC,YAAY,EAAE,MAAM,CAAC,YAAY;wBACjC,eAAe,EAAE,MAAM,CAAC,eAAe;qBAC1C,CAAC;iBACL;aACJ;SACJ,CAAC;IACN,CAAC;CACR,CAAC;AAEF,SAAS,iCAAiC,CACtC,MAAc,EACd,UAA8B;IAE9B,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,MAAM,EAAE,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,8BAA8B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,UAAU,IAAI,CAAC,CAAC;IAC9F,CAAC;AACL,CAAC"}

package/dist/tools/aml/list-address-exposure-paths/credits.d.ts

@@ -0,0 +1,3 @@
+/** Credits per page (source: OpenAPI x-cost). */
+export declare const credits = 100000;
+//# sourceMappingURL=credits.d.ts.map

package/dist/tools/aml/list-address-exposure-paths/credits.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credits.d.ts","sourceRoot":"","sources":["../../../../src/tools/aml/list-address-exposure-paths/credits.ts"],"names":[],"mappings":"AAAA,iDAAiD;AACjD,eAAO,MAAM,OAAO,SAAS,CAAC"}

package/dist/tools/aml/list-address-exposure-paths/credits.js

@@ -0,0 +1,3 @@
+/** Credits per page (source: OpenAPI x-cost). */
+export const credits = 100000;
+//# sourceMappingURL=credits.js.map

package/dist/tools/aml/list-address-exposure-paths/credits.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credits.js","sourceRoot":"","sources":["../../../../src/tools/aml/list-address-exposure-paths/credits.ts"],"names":[],"mappings":"AAAA,iDAAiD;AACjD,MAAM,CAAC,MAAM,OAAO,GAAG,MAAM,CAAC"}

package/dist/tools/aml/schema.d.ts

@@ -1,23 +1,38 @@
 import * as z from "zod";
-export declare const AmlAction: z.ZodEnum<["verify-address", "screen-transaction"]>;
+export declare const AmlAction: z.ZodEnum<["verify-address", "screen-transaction", "get-address-exposure", "list-address-exposure-paths"]>;
+/**
+ * Per-action blockchain restrictions narrower than the tool-wide AML_SCREENABLE_BLOCKCHAINS
+ * union below. Enforced in the tool handler as a pre-flight check, not via Zod
+ * .superRefine() (breaks inputSchema introspection in MCP clients like the Inspector).
+ */
+export declare const ACTION_BLOCKCHAINS: Partial<Record<string, readonly string[]>>;
 export declare const AmlToolSchema: z.ZodObject<{
-    action: z.ZodEnum<["verify-address", "screen-transaction"]>;
+    action: z.ZodEnum<["verify-address", "screen-transaction", "get-address-exposure", "list-address-exposure-paths"]>;
     address: z.ZodOptional<z.ZodString>;
     blockchain: z.ZodOptional<z.ZodEnum<["ethereum", "ethereum-classic", "binance-smart-chain", "bitcoin", "bitcoin-cash", "dash", "dogecoin", "litecoin", "arbitrum", "polygon", "avalanche", "optimism", "base", "zcash", "xrp", "solana", "tezos", "kaspa", "tron"]>>;
     transactionHash: z.ZodOptional<z.ZodString>;
+    rootAddress: z.ZodOptional<z.ZodString>;
+    limit: z.ZodOptional<z.ZodNumber>;
+    startingAfter: z.ZodOptional<z.ZodString>;
 } & {
     context: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
-    action: "verify-address" | "screen-transaction";
+    action: "verify-address" | "screen-transaction" | "get-address-exposure" | "list-address-exposure-paths";
     address?: string | undefined;
     blockchain?: "ethereum" | "ethereum-classic" | "binance-smart-chain" | "bitcoin" | "bitcoin-cash" | "dash" | "dogecoin" | "litecoin" | "arbitrum" | "polygon" | "avalanche" | "optimism" | "base" | "zcash" | "xrp" | "solana" | "tezos" | "kaspa" | "tron" | undefined;
     transactionHash?: string | undefined;
+    rootAddress?: string | undefined;
+    limit?: number | undefined;
+    startingAfter?: string | undefined;
     context?: string | undefined;
 }, {
-    action: "verify-address" | "screen-transaction";
+    action: "verify-address" | "screen-transaction" | "get-address-exposure" | "list-address-exposure-paths";
     address?: string | undefined;
     blockchain?: "ethereum" | "ethereum-classic" | "binance-smart-chain" | "bitcoin" | "bitcoin-cash" | "dash" | "dogecoin" | "litecoin" | "arbitrum" | "polygon" | "avalanche" | "optimism" | "base" | "zcash" | "xrp" | "solana" | "tezos" | "kaspa" | "tron" | undefined;
     transactionHash?: string | undefined;
+    rootAddress?: string | undefined;
+    limit?: number | undefined;
+    startingAfter?: string | undefined;
     context?: string | undefined;
 }>;
 export type AmlToolInput = z.infer<typeof AmlToolSchema>;

package/dist/tools/aml/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../src/tools/aml/schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AAIzB,eAAO,MAAM,SAAS,qDAAmD,CAAC;AAE1E,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;EAoBO,CAAC;AAElC,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../src/tools/aml/schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AAKzB,eAAO,MAAM,SAAS,4GAKpB,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAGzE,CAAC;AAEF,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA4CO,CAAC;AAElC,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC"}

package/dist/tools/aml/schema.js

@@ -1,7 +1,22 @@
 import * as z from "zod";
 import { RequestMetadataSchema } from "@cryptoapis-io/mcp-shared";
 import { AML_SCREENABLE_BLOCKCHAINS } from "../../api/transactions/screen-transaction/types.js";
-export const AmlAction = z.enum(["verify-address", "screen-transaction"]);
+import { AML_EXPOSURE_BLOCKCHAINS } from "../../api/exposure/types.js";
+export const AmlAction = z.enum([
+    "verify-address",
+    "screen-transaction",
+    "get-address-exposure",
+    "list-address-exposure-paths",
+]);
+/**
+ * Per-action blockchain restrictions narrower than the tool-wide AML_SCREENABLE_BLOCKCHAINS
+ * union below. Enforced in the tool handler as a pre-flight check, not via Zod
+ * .superRefine() (breaks inputSchema introspection in MCP clients like the Inspector).
+ */
+export const ACTION_BLOCKCHAINS = {
+    "get-address-exposure": AML_EXPOSURE_BLOCKCHAINS,
+    "list-address-exposure-paths": AML_EXPOSURE_BLOCKCHAINS,
+};
 export const AmlToolSchema = z
     .object({
     action: AmlAction.describe("Action to perform"),
@@ -9,16 +24,32 @@ export const AmlToolSchema = z
         .string()
         .min(1)
         .optional()
-        .describe("Blockchain address to verify against AML databases - required for verify-address"),
+        .describe("Blockchain address - required for verify-address, get-address-exposure, and list-address-exposure-paths"),
     blockchain: z
         .enum(AML_SCREENABLE_BLOCKCHAINS)
         .optional()
-        .describe(`Blockchain protocol the transaction belongs to - required for screen-transaction. One of: ${AML_SCREENABLE_BLOCKCHAINS.join(", ")}`),
+        .describe(`Blockchain protocol - required for screen-transaction, get-address-exposure and list-address-exposure-paths. screen-transaction accepts: ${AML_SCREENABLE_BLOCKCHAINS.join(", ")}. get-address-exposure and list-address-exposure-paths accept only: ${AML_EXPOSURE_BLOCKCHAINS.join(", ")}`),
     transactionHash: z
         .string()
         .min(1)
         .optional()
         .describe("Transaction hash to screen against AML data - required for screen-transaction"),
+    rootAddress: z
+        .string()
+        .min(1)
+        .optional()
+        .describe("Only return routes that originate from this flagged root address (one of the roots[].rootAddress values returned by get-address-exposure) - optional, applies to list-address-exposure-paths only"),
+    limit: z
+        .number()
+        .int()
+        .min(1)
+        .max(50)
+        .optional()
+        .describe("Number of exposure paths to return per page (1-50, defaults to 10) - applies to list-address-exposure-paths only"),
+    startingAfter: z
+        .string()
+        .optional()
+        .describe("Pagination cursor - pass the nextStartingAfter value from the previous response to fetch the next page; applies to list-address-exposure-paths only"),
 })
     .merge(RequestMetadataSchema);
 //# sourceMappingURL=schema.js.map

package/dist/tools/aml/schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../src/tools/aml/schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AACzB,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,0BAA0B,EAAE,MAAM,oDAAoD,CAAC;AAEhG,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,oBAAoB,CAAC,CAAC,CAAC;AAE1E,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC;KACzB,MAAM,CAAC;IACJ,MAAM,EAAE,SAAS,CAAC,QAAQ,CAAC,mBAAmB,CAAC;IAC/C,OAAO,EAAE,CAAC;SACL,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CAAC,kFAAkF,CAAC;IACjG,UAAU,EAAE,CAAC;SACR,IAAI,CAAC,0BAA0B,CAAC;SAChC,QAAQ,EAAE;SACV,QAAQ,CACL,6FAA6F,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACvI;IACL,eAAe,EAAE,CAAC;SACb,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CAAC,+EAA+E,CAAC;CACjG,CAAC;KACD,KAAK,CAAC,qBAAqB,CAAC,CAAC"}
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../src/tools/aml/schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AACzB,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,0BAA0B,EAAE,MAAM,oDAAoD,CAAC;AAChG,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AAEvE,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC,IAAI,CAAC;IAC5B,gBAAgB;IAChB,oBAAoB;IACpB,sBAAsB;IACtB,6BAA6B;CAChC,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA+C;IAC1E,sBAAsB,EAAE,wBAAwB;IAChD,6BAA6B,EAAE,wBAAwB;CAC1D,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC;KACzB,MAAM,CAAC;IACJ,MAAM,EAAE,SAAS,CAAC,QAAQ,CAAC,mBAAmB,CAAC;IAC/C,OAAO,EAAE,CAAC;SACL,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CACL,yGAAyG,CAC5G;IACL,UAAU,EAAE,CAAC;SACR,IAAI,CAAC,0BAA0B,CAAC;SAChC,QAAQ,EAAE;SACV,QAAQ,CACL,4IAA4I,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,uEAAuE,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAChS;IACL,eAAe,EAAE,CAAC;SACb,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CAAC,+EAA+E,CAAC;IAC9F,WAAW,EAAE,CAAC;SACT,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CACL,mMAAmM,CACtM;IACL,KAAK,EAAE,CAAC;SACH,MAAM,EAAE;SACR,GAAG,EAAE;SACL,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,EAAE,CAAC;SACP,QAAQ,EAAE;SACV,QAAQ,CACL,kHAAkH,CACrH;IACL,aAAa,EAAE,CAAC;SACX,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACL,qJAAqJ,CACxJ;CACR,CAAC;KACD,KAAK,CAAC,qBAAqB,CAAC,CAAC"}

package/dist/tools/index.d.ts

@@ -1,21 +1,30 @@
 export declare const tools: readonly [import("./types.js").McpToolDef<import("zod").ZodObject<{
-    action: import("zod").ZodEnum<["verify-address", "screen-transaction"]>;
+    action: import("zod").ZodEnum<["verify-address", "screen-transaction", "get-address-exposure", "list-address-exposure-paths"]>;
     address: import("zod").ZodOptional<import("zod").ZodString>;
     blockchain: import("zod").ZodOptional<import("zod").ZodEnum<["ethereum", "ethereum-classic", "binance-smart-chain", "bitcoin", "bitcoin-cash", "dash", "dogecoin", "litecoin", "arbitrum", "polygon", "avalanche", "optimism", "base", "zcash", "xrp", "solana", "tezos", "kaspa", "tron"]>>;
     transactionHash: import("zod").ZodOptional<import("zod").ZodString>;
+    rootAddress: import("zod").ZodOptional<import("zod").ZodString>;
+    limit: import("zod").ZodOptional<import("zod").ZodNumber>;
+    startingAfter: import("zod").ZodOptional<import("zod").ZodString>;
 } & {
     context: import("zod").ZodOptional<import("zod").ZodString>;
 }, "strip", import("zod").ZodTypeAny, {
-    action: "verify-address" | "screen-transaction";
+    action: "verify-address" | "screen-transaction" | "get-address-exposure" | "list-address-exposure-paths";
     address?: string | undefined;
     blockchain?: "ethereum" | "ethereum-classic" | "binance-smart-chain" | "bitcoin" | "bitcoin-cash" | "dash" | "dogecoin" | "litecoin" | "arbitrum" | "polygon" | "avalanche" | "optimism" | "base" | "zcash" | "xrp" | "solana" | "tezos" | "kaspa" | "tron" | undefined;
     transactionHash?: string | undefined;
+    rootAddress?: string | undefined;
+    limit?: number | undefined;
+    startingAfter?: string | undefined;
     context?: string | undefined;
 }, {
-    action: "verify-address" | "screen-transaction";
+    action: "verify-address" | "screen-transaction" | "get-address-exposure" | "list-address-exposure-paths";
     address?: string | undefined;
     blockchain?: "ethereum" | "ethereum-classic" | "binance-smart-chain" | "bitcoin" | "bitcoin-cash" | "dash" | "dogecoin" | "litecoin" | "arbitrum" | "polygon" | "avalanche" | "optimism" | "base" | "zcash" | "xrp" | "solana" | "tezos" | "kaspa" | "tron" | undefined;
     transactionHash?: string | undefined;
+    rootAddress?: string | undefined;
+    limit?: number | undefined;
+    startingAfter?: string | undefined;
     context?: string | undefined;
 }>>, {
     name: "system_info";

package/dist/tools/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;eAC+zB,CAAC;;;eAA6H,CAAC;;;;;;;;EADz5B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;eAC+zB,CAAC;;;eAA6H,CAAC;;;;;;;;EADz5B,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cryptoapis-io/mcp-aml",
-  "version": "0.1.0",
+  "version": "0.3.0",
   "description": "MCP server for AML address verification and transaction screening via Crypto APIs",
   "license": "MIT",
   "author": "Crypto APIs, Inc.",
@@ -32,20 +32,20 @@
     "cryptoapis-mcp-aml": "dist/cli.js"
   },
   "dependencies": {
+    "@cryptoapis-io/mcp-shared": "0.4.0",
     "@modelcontextprotocol/sdk": "^1.27.1",
-    "express": "^4.22.1",
-    "zod": "^3.25.0",
-    "@cryptoapis-io/mcp-shared": "0.3.0"
-  },
-  "devDependencies": {
-    "@types/express": "^5.0.6"
+    "zod": "^3.25.0"
   },
   "scripts": {
     "dev": "tsx watch src/cli.ts",
     "build": "tsc -p tsconfig.json",
     "typecheck": "tsc -p tsconfig.json --noEmit",
     "lint": "node -e \"console.log('lint: add eslint if you want')\"",
-    "test": "node -e \"console.log('test: add later')\"",
+    "test": "node --test test/*.test.mjs",
     "clean": "rimraf dist"
+  },
+  "devDependencies": {
+    "@types/node": "^25.0.3",
+    "typescript": "^5.5.4"
   }
-}
+}

package/server.json

@@ -1,18 +1,20 @@
 {
   "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
   "name": "io.github.CryptoAPIs-io/mcp-aml",
-  "description": "MCP server for AML address verification and transaction screening via Crypto APIs",
+  "description": "MCP server for AML address verification, transaction screening, and exposure checks via Crypto APIs",
   "repository": {
     "url": "https://github.com/CryptoAPIs-io/cryptoapis-mcp-aml",
     "source": "github"
   },
-  "version": "0.1.0",
+  "version": "0.3.0",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "@cryptoapis-io/mcp-aml",
-      "version": "0.1.0",
-      "transport": { "type": "stdio" },
+      "version": "0.3.0",
+      "transport": {
+        "type": "stdio"
+      },
       "environmentVariables": [
         {
           "description": "Crypto APIs API key",