Prax Data Services
ConnectQuick startSovereign AIPlansSign inGet API key
Prax Data Services

The security and compliance companion for financial services.

Counterparty, sanctions, payment and transfer screening with reasons — for CISOs, fraud and AML teams at banks, fintechs, payment providers and digital-asset institutions. Call it from your SOC tooling, your case system or your AI agents: MCP tools for Claude, ChatGPT and Cursor, plain REST — or natively inside the Prax Sovereign AI platform, on your own hardware. One key, one URL.

Free plan: 10 credits a day, no card. Nothing you look up is shared or added to a list. Use is subject to the Terms of Service.

Before the loss, not afterVerdicts come from Prax's own detection of attacker infrastructure, malicious contracts, clones and funding ancestry — reviewed before they reach your queue.
Audit-ready answersEvery answer is a short narrative plus structured fields: which list, which alert, which hop, when. Reasons your auditor, regulator and model-risk team can read — no black-box score.
Inside the authorization pathPre-authorization transfer screening needs no transaction and makes no chain call: milliseconds, safe inside a payment or signing flow.
Fits how you workREST with OpenAPI for your SIEM, case manager and payment stack; MCP for Claude, ChatGPT and Cursor; native inside the Prax Sovereign AI platform. Same backend, same contracts, same metering.

What one call looks like

What an analyst, an authorization engine or an agent gets back: verdict, reasons, references, timestamps. Never rule logic, thresholds or vendor names.

screen_wallet(eth, 0x8576…c1a9) { "risk_band": "critical", "story": "0x8576…c1a9 is a sanctioned address (OFAC, SDN, 2022-08-08, Tornado Cash). Flagged by Prax as a mixer and funding ancestry for 3 attacker wallets. Last alert 2 h ago. Verdict: BLOCK.", "sanctions": [ { "list": "OFAC SDN", "programs": ["CYBER2"] } ], "exposure": { "hops": 0 }, "computed_ms": 18 }

Who it is for

CISO & SOCPull the approved alert feed into your SIEM, enrich incidents with counterparty intelligence, give your agents a vetted threat-intel tool.
Fraud & paymentsPre-authorization screening of transfers and counterparties with reasons; batch re-screening of payment files and customer books.
AML & complianceSanctions screening by name or by wallet/contract address, with aliases and linked addresses; explainable records for SAR narratives and periodic review.
Digital-asset desks & custodiansWallet and contract screening, transaction analysis and pre-sign checks across major chains, inside your signing path.

API tools

Today's public API covers digital-asset counterparties and transactions plus name screening; traditional rails are part of the Enterprise platform below. Quotas are credits per day: lookups 1, batches 10, the alerts feed 100 per pull. The badge shows where a tool unlocks.

screen_walletFree

Counterparty screening — wallets & contracts

Who is behind an address before money moves. Attribution, sanctions hits, lists, Prax alerts naming it and why, exposure to flagged parties, verdict — as a short narrative plus structured fields for your case system. Milliseconds; live=true adds on-chain screening.

GET https://api.orabrain.com/v1/address/{chain}/{address}1 credit
screen_entityFree

Sanctions & watchlist screening — name or address

Pass a person, company or vessel name for fuzzy matching against the sanctions lists Prax tracks (names, aliases), or a wallet / contract address for an exact sanctions lookup. match / possible_match / no_match with programs, lists, linked addresses and scores — for onboarding, payments and periodic review.

GET https://api.orabrain.com/v1/screen?name=<name or address>1 credit
analyze_transactionBuilder+

Payment & transaction analysis

Chain facts plus the risk of both counterparties for a settled transaction: flagged recipients, look-alike addresses, malicious tokens, unlimited approvals, created contracts. Built for fraud and AML investigators who need reasons, not a score.

GET https://api.orabrain.com/v1/tx/{chain}/{hash}1 credit
screen_transferBuilder+

Pre-authorization transfer screening

Is it safe to send this amount of this asset from A to B? Verdict allow / review / block with reasons — sanctioned party, flagged counterparty, look-alike / address-poisoning, malicious asset. No chain call, so it fits inside an authorization or signing path.

POST https://api.orabrain.com/v1/transfer/check1 credit
screen_wallets_batch · screen_transfers_batchBuilder+

Batch screening

Up to 50 counterparties or transfers per call with a per-item verdict and a summary — periodic customer re-screening, payment files, exposure sweeps.

POST https://api.orabrain.com/v1/address/batch · /v1/transfer/batch10 credits
search / fetchBusiness+

Ask the intel

Plain-language questions over Prax's threat intelligence: counts by risk band, chain and role, latest approved alerts, record lookup by id. For analysts and agents; lists are never enumerable.

GET https://api.orabrain.com/v1/search?q=1 credit
get_alertsBusiness+

Approved threat-intel feed for the SOC

The reviewed alerts Prax pushes to webhooks — attacker wallets, malicious contracts, funding ancestry, clones — last 24 hours, newest first, cursor paging. Pull it into your SIEM, case manager or agent runbooks.

GET https://api.orabrain.com/v1/alerts?since=24h100 credits per pull

Chains: eth, bsc, polygon, arbitrum, optimism, base, avalanche. Auth: Authorization: Bearer prax_…, X-API-Key or ?key=. Full reference: REST docs · OpenAPI · MCP endpoint https://mcp.orabrain.com/mcp.

Connect in one click

No key to paste. Add https://mcp.orabrain.com/mcp to your agent; it sends you to the portal to sign in (or create a free account) and approve. Listed in the official MCP registry as com.orabrain/prax-data-services.

Claude

Settings → Connectors → Add custom connector → paste the URL. Claude opens the portal; sign in, approve, done.

Claude Code

One command, then /mcp → prax → Authenticate.

Cursor

Installs the server into Cursor and starts the sign-in.

VS Code

Copilot agent mode; MCP: Add Server flow runs the sign-in.

ChatGPT

Settings → Connectors → Create (Developer mode) → paste the URL, auth OAuth.

Any MCP client

Streamable HTTP, OAuth 2.1 with dynamic registration — or a Bearer key from the portal.

Approved apps appear under Account → Connected apps, each with its own key on your plan; disconnect any time. README badge: ![Prax Data Services](https://mcp.orabrain.com/portal/badge.svg)

Quick start

Pick where your agents live. Claude, ChatGPT, Cursor and VS Code use the sign-in above; for code and the Messages API create a key in the portal and replace prax_live_YOUR_KEY. Inside the Prax Sovereign AI platform the tools are already there.

Inside the Prax Sovereign AI platform nothing to paste: the platform's agents and apps call Data Services natively,
on your own hardware, with no external model calls and no data leaving your environment.

Banks, payment providers and digital-asset institutions run it on-premises or air-gapped,
with the premium applications (payment fraud, investigation, source tracer, contract audit, ...)
and traditional rails + digital assets under one policy engine.

Talk to us: [email protected]

Prax Sovereign AI platform — the full companion

Banks, payment providers and digital-asset institutions run the complete Prax platform: a sovereign AI that reasons over your data on your own hardware — on-premises or air-gapped, no external model calls — with premium applications across traditional banking rails and digital assets, more chains and custom quotas. Data Services are built in; the same agents that answer your analysts call them natively.

Payment fraudReal-time decisions on card, ACH, wire, SWIFT and crypto payments with explainable reasons and case hand-off.
Intelligent investAsset, counterparty and venue due-diligence dossiers for treasury and investment desks.
Advanced wallet screeningExposure hops, entity attribution, behavioural patterns and watchlists beyond the basic lookup.
Address investigationFull investigation workspace: funding ancestry, counterparties, clusters, timelines and reports.
Source tracerFollow funds across hops, bridges and mixers to origin and destination with evidence trails.
Smart-contract auditBytecode and source analysis, clone detection, privileged-function and upgrade-risk review.
Indexer healthMonitoring of your own chain indexers and data pipelines, with alerting on lag, gaps and anomalies.
Traditional rails & more chainsCards, ACH, wires and SWIFT alongside extended chain coverage, under one policy engine and one audit trail.
Talk to us about EnterpriseCustom quotas, SLA, private feeds, registry export, dedicated support.

Plans

Change plan any time from the portal. Enterprise adds private feeds, custom quotas and registry export.

Free
$0
Try it. One key, 10 credits a day, no card.
  • 10 credits / day
  • Basic wallet & contract screening
  • Sanctions screening by name or address
  • 1 API key · one account per network
Start free
Builder
$49 / month
For products and agents in development.
  • 200 credits / day · 60 req/min
  • Everything in Free
  • Transaction analysis
  • Pre-sign transfer screening
  • Batch screening (50 per call)
Get started
Business
$499 / month
Production traffic, the intel search and the live feed.
  • 5,000 credits / day · 300 req/min
  • Everything in Builder
  • Ask the intel (search / fetch)
  • Approved alerts feed (100 credits per pull)
  • Priority support
Get started
Enterprise
Custom
The full Prax platform for banks and digital-asset institutions.
  • Custom quotas
  • Everything in Business, custom quotas, SLA
  • Payment fraud & intelligent invest
  • Advanced wallet screening & address investigation
  • Source tracer & smart-contract audit
  • Indexer health, more chains, traditional banking rails
  • Private feeds, registry export, on-prem option
Talk to us

Questions

Where does the intelligence come from?

Prax's own detection pipelines (contract scanning, chain monitoring, deployer and funding analysis), the sanctions lists Prax tracks (OFAC, UN and others), partner reputation data and human-reviewed alerts. Responses carry scores, labels and references — never the detection logic.

Is anything I send stored?

Requests are metered (key, tool, latency, size) for quotas and billing. Addresses, hashes and names you look up are not added to any list and are not shared.

Is this only for crypto only?

No. The public API tools cover digital-asset counterparties, transactions and transfers plus sanctions name screening, which any financial institution needs. Traditional payment rails (cards, ACH, wires, SWIFT), payment-fraud decisioning and the investigation applications are part of the Enterprise platform.

How is this different from a chain-analytics suite?

It is built for your systems and agents: a pre-authorization verdict with reasons, a name-screening tool, a plain-words search, and MCP out of the box. It is not a case-management UI, and it does not execute transactions on a fork.

Can my auditor or regulator rely on the output?

Every answer carries its reasons and references (list, alert, hop, timestamp), which is what examiners ask for. The output is intelligence to support your decision, not a legal determination — see the Terms.

Can I run it in my own environment?

Yes — the Enterprise platform runs on your own hardware, air-gapped if required, with no external model calls. Talk to us.