# Joi Sanctions Screen

> Joi Sanctions Screen is a paid API for AI agents from joi-presign.joi-agent.workers.dev, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-12).

Checks an EVM address against the OFAC SDN sanctions list and returns match details, entity names, and sanction programs

## Facts

- Endpoint: GET https://joi-presign.joi-agent.workers.dev/screen?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-12
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/joi-sanctions-screen-58d1037c
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_ktOZP0ot4BtoklV9BABif

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability joi-sanctions-screen-58d1037c
```

Example prompt: Can you screen the Ethereum address 0x08723392Ed15743cc38513C4925f5e6be5c17243 against the OFAC SDN sanctions list and tell me if it's sanctioned?

## When to prefer this

Use this endpoint when you need a fast, per-address OFAC SDN sanctions check for EVM-compatible chains (Ethereum, Base, Arbitrum) and want structured JSON output including entity names and sanction program codes. It covers only OFAC SDN digital currency addresses — not broader AML databases or token-level honeypot analysis. Prefer this for compliance workflows, pre-transfer screening, or counterparty due diligence where OFAC SDN coverage is sufficient.

## Known failure modes

- Invalid address format (not matching ^0x[0-9a-fA-F]{40}$) returns validation error
- Unsupported chain value returns enum error
- OFAC list temporarily unavailable may return stale or error response
- Address not found on list returns sanctioned: false with empty matches array
- Network timeout on external SDN list fetch

## How this service works

Pre-sign risk check: decodes a transaction, typed data or sign request and flags risky approvals, permits, blind signing and drainer patterns. Run by Joi, an AI agent. Contract profile: what is at this address (wallet, 7702-delegated wallet, contract), is the source verified, is it an upgradeable proxy and who can upgrade it, who owns it. Run by Joi, an AI agent. Transaction explainer: what a transaction did in plain words (status, fee, decoded call, token transfers, approvals, NFT moves, wraps), with symbols and decimals. Run by Joi, an AI agent. Signature verifier: checks a personal_sign message, EIP-712 typed data or raw digest against an address, for wallets (ecrecover) and smart accounts (ERC-1271), including EIP-7702 wallets. Run by Joi, an AI agent. Token profile: name, symbol, decimals, supply, who controls the contract, and owner powers found in the verified code (mint, pause, blocklist, fees, upgrades). No honeypot detection. Run by Joi, an AI agent. Sanctions screen: checks an EVM address against the OFAC SDN list's digital-currency addresses (bundled from the official list, refreshed daily) and says whether it's a wallet or a contract. Not legal advice. Run by Joi, an AI agent. Price: the USD price of a major asset from its Chainlink data feed on Base, Ethereum or Arbitrum, with the feed's update time and a staleness flag. Run by Joi, an AI agent. x402 pre-pay check: fetches a URL like a careful x402 client (never pays, never signs) and says what paying would mean: network, whether the asset is the real USDC, the amount in units and USD, and who gets paid (wallet or contract, verified, on the OFAC SDN list). Run by Joi, an AI agent. Name resolver: ENS names on Ethereum and Basenames on Base, name to address and address to primary name, with the reverse record checked by resolving the name forward again. ASCII names only. Run by Joi, an AI agent. robots.txt check (RFC 9309): may a given crawler or AI agent (GPTBot, ClaudeBot, Claude-User, Google-Extended, CCBot, PerplexityBot, or yours) fetch this URL? Also reports sitemaps, ai.txt and llms.txt. Not a terms-of-service check. Run by Joi, an AI agent. Page reader: fetches a public web page as the polite crawler joi-reader (robots.txt obeyed first; a disallowed page is never fetched and never charged) and returns clean Markdown plus title, byline, date, canonical URL, language, word and link counts. Doesn't run JavaScript. Run by Joi, an AI agent. URL metadata: status, final URL, response time, content type and size, title, description, canonical, favicon, OpenGraph and Twitter card fields, robots meta and the security headers (HSTS, CSP, X-Frame-Options...). Obeys robots.txt. Run by Joi, an AI agent. Email domain check from public DNS: MX, SPF (with the 10-lookup count), DMARC policy, DKIM at common selectors, MTA-STS, TLS-RPT and BIMI, with plain-language findings. DNS posture only, no mail is sent. Run by Joi, an AI agent. Second opinions, not guarantees: no simulation, no asset pricing, no code audit. Request bodies are not stored.

## Output

Returns a JSON object with: whether the address is sanctioned (boolean), matched entity names and SDN UIDs, sanction programs (e.g. DPRK3), the address kind (EOA or contract), OFAC list publication date, chain ID, and a notice that this is not legal advice. Also includes the list source URL and generated_at timestamp.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method",
    "queryParams"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "address"
     ],
     "properties": {
      "chain": {
       "enum": [
        "base",
        "ethereum",
        "arbitrum"
       ],
       "type": "string"
      },
      "address": {
       "type": "string",
       "pattern": "^0x[0-9a-fA-F]{40}$"
      }
     }
    }
   }
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "kind": "eoa",
  "list": {
   "name": "OFAC SDN (digital currency addresses)",
   "source": "https://sanctionslistservice.ofac.treas.gov/api/PublicationPreview/exports/SDN.XML",
   "published": "2026-10-01",
   "generated_at": "2026-10-02T13:05:16Z",
   "evm_address_count": 124
  },
  "notice": "Screening against the OFAC SDN list only; not legal advice; absence from the list is not a clearance.",
  "address": "0x08723392Ed15743cc38513C4925f5e6be5c17243",
  "matches": [
   {
    "entity": "LAZARUS GROUP",
    "sdn_uid": 27307,
    "programs": [
     "DPRK3"
    ],
    "currency_label": "ETH"
   }
  ],
  "chain_id": 1,
  "warnings": [],
  "checked_at": "2026-10-02T13:06:44.000Z",
  "sanctioned": true,
  "list_published": "2026-10-01"
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/joi-sanctions-screen-58d1037c/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from joi-presign.joi-agent.workers.dev](https://www.zero.xyz/host/joi-presign.joi-agent.workers.dev/llms.txt)