paladinfi-com Trust Check API

openapi: 3.2.0
info:
  title: Paladinfi Com Trust Check API
  version: 0.1.0
  contact:
    name: PaladinFi
    email: dev@paladinfi.com
    url: https://paladinfi.com
  license:
    name: Hosted backend proprietary; MIT for client spec + examples in this repo
    url: https://paladinfi.com/terms/
  description: 'Operations tagged Trust Check across 2 of this provider''s published API definitions: trust-check-mcp.yaml, paladinfi-trust-check-mcp-openapi.yaml. Each path carries the servers of the definition it was published in.'
servers:
- url: https://swap.paladinfi.com
  description: Production REST backend (the MCP server at trust.paladinfi.com/mcp wraps these endpoints)
security: []
tags:
- name: Trust Check
paths:
  /v1/trust-check/preview:
    post:
      operationId: postTrustCheckPreview
      summary: Sample-fixture preview of the trust check (free)
      description: 'Returns a static fixture mimicking the trust-check response shape — useful

        for validating client request payloads and inspecting the response schema

        without paying. NO live data sources are queried. Every factor in the

        response is marked `real: false`, the `recommendation` is prefixed

        `sample-` (e.g., `sample-allow`), and the top-level response includes

        `_real: false`. **Do not use the preview verdict to gate real swaps,

        signing, or any production agent decision.**'
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/TrustCheckRequest'
            example:
              chainId: 8453
              address: '0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913'
      responses:
        '200':
          description: Sample-fixture trust response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/TrustCheckPreviewResponse'
        '400':
          description: Invalid request (malformed address, unsupported chain)
      tags:
      - Trust Check
    servers:
    - url: https://swap.paladinfi.com
      description: Production REST backend (the MCP server at trust.paladinfi.com/mcp wraps these endpoints)
  /v1/trust-check/ofac:
    post:
      operationId: postTrustCheckOfacFree
      summary: Free wallet-OFAC SDN screen (real data)
      description: 'Screens a wallet/EOA address against the US Treasury OFAC SDN list,

        refreshed daily from the Treasury XML feed. Anonymous; rate-limited

        at 1 request per second + burst 3 + 3 concurrent per IP. Returns a

        binary `recommendation: "allow" | "block"` verdict (no `warn` state —

        OFAC is binary). Response is marked `_real: true` and includes

        `_ofac_list_updated_at` (ISO timestamp of last refresh) plus

        `_ofac_sdn_count` (number of entries in the list at refresh time) so

        callers can verify freshness without trusting a separate bookkeeping

        layer.


        **Scope**: US OFAC SDN wallet/EOA addresses only (~93 entries).

        No token-contract risk evaluation, no GoPlus signals, no Etherscan

        verification, no anomaly heuristics — those run on the paid

        composition endpoint `/v1/trust-check` (not exposed through this MCP).'
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/TrustCheckRequest'
            example:
              chainId: 8453
              address: '0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913'
      responses:
        '200':
          description: OFAC SDN screen result
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/TrustCheckOfacResponse'
        '400':
          description: Invalid request (malformed address, unsupported chain)
        '429':
          description: Rate limit exceeded (1 r/s + burst 3)
        '503':
          description: OFAC list refresh stale or feature flag disabled
      tags:
      - Trust Check
    servers:
    - url: https://swap.paladinfi.com
      description: Production REST backend (the MCP server at trust.paladinfi.com/mcp wraps these endpoints)
components:
  schemas:
    TrustCheckRequest:
      type: object
      required:
      - address
      properties:
        chainId:
          type: integer
          description: EVM chain ID. Defaults to 8453 (Base — currently the only supported chain).
          default: 8453
        address:
          type: string
          description: 0x-prefixed address to evaluate (wallet/EOA for `/ofac`; ERC-20 contract for `/preview`).
          pattern: ^0x[a-fA-F0-9]{40}$
    TrustCheckOfacResponse:
      type: object
      description: Live OFAC SDN wallet-screen result. `_real` is `true`.
      required:
      - address
      - chainId
      - request_id
      - trust
      properties:
        address:
          type: string
        chainId:
          type: integer
        request_id:
          type: string
          description: Server-issued UUID for this request.
        _real:
          type: boolean
          enum:
          - true
        _ofac_list_updated_at:
          type: string
          format: date-time
          description: ISO-8601 timestamp of the OFAC list refresh that produced this verdict.
        _ofac_sdn_count:
          type: integer
          description: Number of SDN entries consulted at refresh time.
        _scope:
          type: string
          description: Scope marker — always `"ofac-only"` on this endpoint.
          example: ofac-only
        trust:
          type: object
          properties:
            recommendation:
              type: string
              enum:
              - allow
              - block
              description: Binary OFAC verdict. No `warn` state on this endpoint.
            factors:
              type: array
              items:
                type: object
                properties:
                  source:
                    type: string
                    example: ofac
                  real:
                    type: boolean
                    enum:
                    - true
            version:
              type: string
              description: Trust-block schema version.
    TrustCheckPreviewResponse:
      type: object
      description: 'Sample fixture. `_real` is always `false`. The `trust` block is illustrative

        only — every factor includes `real: false` and `recommendation` is prefixed

        `sample-`. Note: `_real` and `_HUMAN_DO_NOT_USE_AS_REAL_VERDICT` are

        guaranteed at the MCP wrapper layer (added if not present in the raw

        backend response); direct REST callers should test for their presence

        and treat missing-or-non-`false` `_real` as a contract violation.

        '
      required:
      - address
      - chainId
      - request_id
      - trust
      properties:
        address:
          type: string
        chainId:
          type: integer
        request_id:
          type: string
        _real:
          type: boolean
          enum:
          - false
        _HUMAN_DO_NOT_USE_AS_REAL_VERDICT:
          type: string
          description: Misuse-prevention banner (always present on preview responses).
        trust:
          type: object
          properties:
            recommendation:
              type: string
              description: Always prefixed `sample-` on preview responses.
              example: sample-allow
            _preview:
              type: boolean
              enum:
              - true
            factors:
              type: array
              items:
                type: object
                properties:
                  real:
                    type: boolean
                    enum:
                    - false
x-refined-from:
- trust-check-mcp.yaml
- paladinfi-trust-check-mcp-openapi.yaml