Web3 VASP Compliance Check

Before interacting with a crypto service provider, verify they're licensed under EU MiCA regulation. Checks the ESMA register of authorized CASPs, the non-compliant entity list, sanctions status, and domain reputation.

4 steps x402 eligible web3-vasp-check

What it runs

VASP Verification
Source: ESMA Crypto-Asset Service Providers (CASP) Register
VASP Non-Compliant Check
Source: ESMA Crypto-Asset Service Providers (CASP) Register
Sanctions Check
Source: Dilisense consolidated (OFAC SDN, EU FSF, UN SC, UK Sanctions List, CH SECO, BIS, World Bank, EBRD, ADB + 125 national sanctions/debarment lists; full attribution at https://dilisense.com/en/sources/sanction-sources)
Domain Reputation
Source: Threat intelligence feeds (multi-source scoring)

The answer returns every step’s result, so your agent can show or check each one.

Inputs

Field	Type	Required	What it is
`website`	string	No	Entity website domain
`entity_name`	string	Yes	CASP/VASP name or company name

How to call it

# Needs an API key. The whole check is charged once, at the listed price.
curl -X POST https://api.strale.io/v1/solutions/web3-vasp-check/execute \
  -H "Authorization: Bearer $STRALE_API_KEY" \
  -H 'Content-Type: application/json' \
  -d '{
    "inputs": {
      "website": "coinbase.com",
      "entity_name": "Coinbase"
    },
    "max_price_cents": 10
  }'

# No account. The first request answers 402 with the price in USDC;
# an x402 client pays it from your wallet and repeats the request.
curl -i -X POST https://api.strale.io/x402/v2/solutions/web3-vasp-check \
  -H 'Content-Type: application/json' \
  -d '{
    "website": "coinbase.com",
    "entity_name": "Coinbase"
  }'

The bundle’s published example input.

Limitations

Output reflects ESMA Crypto-Asset Service Providers (CASP) Register at query time. Dependent on upstream API availability; may degrade if the provider rate-limits or is temporarily unavailable.
From step: VASP Verification
Output reflects ESMA Crypto-Asset Service Providers (CASP) Register at query time. Dependent on upstream API availability; may degrade if the provider rate-limits or is temporarily unavailable.
From step: VASP Non-Compliant Check
Sanctions lists updated daily from OFAC, EU, and UN sources — newly sanctioned entities may take up to 24 hours to appear
From step: Sanctions Check
What to do instead: For same-day compliance, subscribe to OFAC's RSS feed and cross-reference against today's additions
Name matching uses fuzzy logic — common names may produce false positives. Always verify flagged results
From step: Sanctions Check
What to do instead: Filter results by match confidence score and verify flagged entities against the primary sanctions list PDF
Reputation scores aggregate multiple blocklists — a single listing may not indicate actual malicious activity
From step: Domain Reputation
What to do instead: Check which specific blocklist flagged the domain in the response details and verify the listing reason before blocking
Blocklist data refreshed daily — recently resolved issues may still show negative reputation for 24-48 hours
From step: Domain Reputation
What to do instead: If a domain was recently cleaned, re-check after 48 hours and use the trend direction to assess improvement