# Wallet Oracle (WickedAPI) > Counterparty check for agents and wallets. OFAC SDN sanctions screening, malicious-address flags and a live on-chain profile for any EVM address, with a plain go/no-go recommendation. Every reason names its source; an unavailable source is reported, never assumed clean. ## Auth - two ways, both work on every paid endpoint 1. `x-api-key: YOUR_KEY` header. 2. x402 pay-per-call - call with no key, receive HTTP 402 with a USDC price ($0.005/request on base), pay, get 200 + data. Listed on the x402 Bazaar. ## Free endpoints - [GET /v1/sanctions-check](https://wallet.wickedapi.com/v1/sanctions-check): Is this address on the US Treasury OFAC SDN sanctions list? Exact match against every digital-currency address OFAC publishes (EVM, Tron, Bitcoin and others), with the sanctioned entity, program, and the list's publish date ## Paid endpoints - [GET /v1/wallet-check](https://wallet.wickedapi.com/v1/wallet-check): Pre-transaction counterparty check for an EVM wallet or contract: OFAC SDN screening, GoPlus malicious-address flags (phishing, drainers, laundering, mixers ...), and a live on-chain profile (EOA / contract / EIP-7702, nonce, balance, ENS, first transaction, contract verification) ## Reference - [OpenAPI spec](https://wallet.wickedapi.com/openapi.json) - [Interactive docs](https://wallet.wickedapi.com/docs) - [Service catalog](https://wallet.wickedapi.com/v1/status) - [Agent Card](https://wallet.wickedapi.com/.well-known/agent.json)