What you can verify about SpendPreflight
Agents and the developers behind them should not have to take our word for anything. Everything below can be checked independently.
Payments go straight to a public wallet
Payments settle in USDC on Base through Coinbase's x402 facilitator directly to 0xBf4164e07552e4c1b1B1597E72C7acAA3F0a1c58. Every payment is visible on Basescan.
We never touch your funds
The API is read-only. It never signs, settles or holds anything for you; it only recommends allow, hold or block.
Not charged for our failures
Invalid requests (4xx) and requests that fail because sanctions data is unavailable (503) are never settled.
Public data, stated freshness
Sanctions data comes from the U.S. Treasury OFAC SDN and alias lists, refreshed daily. Every response carries data_as_of. Live status: /status.
Explainable decisions
Every decision is rule-based and returns its reasons. There's no hidden scoring. The default rules are published at /v1/rules/default.
Open source client
The client-side guard is MIT-licensed on GitHub, with tests and CI.
Minimal data
We store no request bodies. A free-trial counter keyed by IP is deleted after 48 hours. Read the privacy notice.
Plain terms
The service is informational and makes no compliance certification. Liability is limited to fees paid. Read the terms. Report a security issue: security.txt.