> ## Documentation Index
> Fetch the complete documentation index at: https://docs.gu1.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# AML Crypto

> Wallet and transaction AML checks via Gu1 AML Crypto — address labels, risk scores, activity, dark web, and history.

## Overview

Gu1 AML Crypto lets you screen crypto **wallet addresses** and **transaction hashes** for AML risk signals (labels, risk score, suspicious activity, dark web presence).

Gu1 performs the lookup on your behalf. Integrators **do not** call the external service directly.

<Info>
  Requires the **AML Crypto** platform module enabled for your organization and the `aml_crypto:execute` (run checks) or `aml_crypto:read` (history) permissions.
</Info>

## Base path

```
https://api.gu1.ai/api/aml-crypto
```

## Endpoints

| Endpoint                                                                      | Permission           | Persists history | Description                           |
| ----------------------------------------------------------------------------- | -------------------- | ---------------- | ------------------------------------- |
| [Health](/en/api-reference/aml-crypto/health)                                 | `aml_crypto:read`    | No               | Upstream availability                 |
| [Address label](/en/api-reference/aml-crypto/address-label)                   | `aml_crypto:execute` | Yes (if data)    | Categories / labels for a wallet      |
| [Address risk score](/en/api-reference/aml-crypto/address-risk-score)         | `aml_crypto:execute` | Yes (if data)    | Risk score / level for a wallet       |
| [Address risk activity](/en/api-reference/aml-crypto/address-risk-activity)   | `aml_crypto:execute` | Yes (sanitized)  | Suspicious activity for a wallet      |
| [Dark web wallet](/en/api-reference/aml-crypto/dark-web-wallet)               | `aml_crypto:execute` | Yes              | Dark web presence indicator           |
| [Transaction risk score](/en/api-reference/aml-crypto/transaction-risk-score) | `aml_crypto:execute` | Yes              | Risk score for a tx hash (`eth` only) |
| [List checks](/en/api-reference/aml-crypto/list-checks)                       | `aml_crypto:read`    | —                | Paginated history for the org         |
| [Get check](/en/api-reference/aml-crypto/get-check)                           | `aml_crypto:read`    | —                | Single check by id                    |

## Response shape

Successful execute responses use:

```json theme={null}
{
  "success": true,
  "data": {
    "checkId": "uuid-or-omitted",
    "...": "service fields"
  }
}
```

`checkId` is present only when Gu1 persisted a snapshot (useful data returned). Empty upstream results do not create a history row.

## Address protocols

`btc`, `eth`, `xrp`, `egld`, `algo`, `sol`, `trx`, `flow`, `one`, `ltc`, `bch`, `zec`, `dash`, `bsv`, `bnb`, `xvg`, `btg`, `matic`, `avax`, `xlm`, `klay`

Transaction protocol: **`eth` only**.

Dark web protocols: `btc`, `eth`, `xmr`, `doge`.

## Common error codes

| Code                          | HTTP    | Meaning                                            |
| ----------------------------- | ------- | -------------------------------------------------- |
| `AML_CRYPTO_*_FAILED`         | 4xx/5xx | Upstream or validation failure for that operation  |
| `AML_CRYPTO_CHECK_NOT_FOUND`  | 404     | Check id not found in this organization            |
| `PLATFORM_MODULE_NOT_ENABLED` | 403     | AML Crypto module not enabled (when enforce is on) |

## Authentication

```bash theme={null}
Authorization: Bearer YOUR_API_KEY
```