Strait

in.straitlinkPublished by straitlink.inv0.7.0Updated Nov 7, 2026

Create, search and pause deep links; QR codes; analytics, taps, events; domains; webhooks.

VerifiedStreamable HTTPWeb executableDeveloper Tools Data & Analytics Business & Commerce

Server details

Identifier: in.straitlink/mcp
Transport: Streamable HTTP
Runtime: Web executable
Trust: Verified
Published: Nov 4, 2026

Security note

MCP servers receive tool arguments from a conversation and may perform external actions. Review what a server can do before you enable it, and give it only the access it needs.

The registry verified that this server's namespace belongs to straitlink.in, but the endpoint is not on that domain, so the publisher may not run this server.

SourceWeft's checks cover whether the listing is complete and the endpoint answered; they do not review the server's code or what its tools do.

Add a badge to your README

Show readers this MCP server is listed on SourceWeft. The badge links to this page.

[![Listed on SourceWeft](https://sourceweft.com/badge/mcp/in.straitlink%2Fmcp.svg)](https://sourceweft.com/mcp/in.straitlink%2Fmcp?utm_source=readme&utm_medium=badge)

Overview

AI-generated overview

Strait's MCP server lets an assistant create, search, pause and analyze mobile deep links, QR codes, taps, conversions, domains and webhooks.

What you can do: Create and manage deep links: create one or up to 500 in a batch, read, search, list, update, pause, resume and deactivate links
Generate QR codes for a single link or a whole campaign as a ZIP
Read analytics: taps, app opens, installs, conversions and revenue, compare two periods, rank top links, list recent taps and conversion events, and record a server-side event
Diagnose links: check App Links and Universal Links files, check any vendor's link, dry-run a tap and trace where taps go per channel
Manage custom link domains and their DNS records, and inspect, test and redeliver webhooks
Read workspace, plan usage and referral reports, and search the Strait documentation
When to use it: Useful when you work with Strait deep links and want an assistant to create or audit links, explain why a link opens the browser instead of the app, review install and conversion analytics, or troubleshoot webhooks and custom domains without leaving the chat.
Requirements: Runs as a local stdio process via npx (Node.js) or as a hosted Streamable HTTP endpoint. Needs a Strait secret key (st_live_...) in STRAIT_SECRET_KEY or an Authorization bearer header; a read-only key exposes only reading tools. STRAIT_API_URL optionally points at another engine. Without a key only check_app_links, search_docs and demo trace_tap work.

Before you install

The secret key can change live links, so create a separate key for AI tools and keep it out of app or website code. Eleven tools write: creating links, updating, pausing, resuming or deactivating links, recording events, adding or removing domains, testing and redelivering webhooks. Most writes require confirm: true and show a preview first. Removing a domain breaks links on it at once, and redelivering re-sends a real event to the receiving system. iPhone install attribution is in beta.

Installation

In SourceWeft

Open Strait in the dashboard and add it to a workspace.
Connect Authorization token credentials. They are stored privately and never shown on public pages.
Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/in.straitlink%2Fmcp/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "strait": {
      "type": "http",
      "url": "https://strait.link/mcp",
      "headers": {
        "Authorization": "Bearer <YOUR_TOKEN>"
      }
    }
  }
}

README

Strait MCP server

Straight to the screen. On the record.
A tap on a Strait link goes straight to the exact screen in your app (Straight), and every tap is recorded (Stamped).

Docs · Platform status · Talk to the Strait team

@straitlink/mcp (preview)

Use Strait from AI tools such as Claude Code, Cursor and Claude Desktop: create, find, pause and resume deep links, get their QR codes, read and compare analytics, see recent taps and conversion events, manage custom link domains, look after webhooks (list, deliveries, test, redeliver), check App Links / Universal Links files or any vendor's link, see where taps on a link go and search the Strait docs.

It is a local stdio server with 32 tools. Eleven of them write (create_link, batch_create_links, update_link, pause_link, resume_link, deactivate_link, record_event, add_domain, remove_domain, test_webhook, redeliver_webhook_delivery); the other twenty-one only read. check_app_links, check_link, search_docs and demo trace_tap work without a key; every other tool needs your secret key. Other deep-link vendors also ship MCP servers that can create links, so this README makes no "first" or "only" claim; it describes what this server does today.

iPhone is in beta. iPhone install matching (deferred deep linking on iOS) is in beta; Android uses the Play Install Referrer. On iPhone the workspace chooses the method in Dashboard → Settings → iPhone installs (device matching, paste handoff, both or neither), and the SDK reads that choice at runtime. Device matching is off for new workspaces. The tools report iPhone results the same way, but treat iPhone install attribution as beta.

Hosted server. The same tools are served at https://strait.link/mcp (Streamable HTTP, since 24 Oct 2026): claude mcp add --transport http strait https://strait.link/mcp --header "Authorization: Bearer st_live_your_key". It takes a secret key in the Authorization header (60 requests burst, then 1 a second, per key); OAuth sign-in is not there yet. The engine serves it with this package's createStraitServer() (library entry, 0.3.0).

Tools

A read-only secret key (Dashboard → Settings → Secret keys, access "Read only") is offered only the tools that read (0.5.1; the hosted server already did this). Full and links-only keys see every tool; the API still refuses anything outside the key's access.

Tool	What it does	Key needed
`create_link`	Create one link and get its `shortUrl`	secret
`batch_create_links`	Create up to 500 links in one call (safe to re-run: existing slugs are per-item 409s)	secret
`get_link`	Read one link by slug	secret
`list_links`	List links, one page at a time. `status: "paused"` lists turned-off links (0.2.1)	secret
`update_link`	Change destination, title, tags or expiry, or `isActive` on its own (false pauses, true turns a paused link back on; 0.2.1). Asks for `confirm: true`: without it you get a preview and nothing changes	secret
`get_analytics`	Taps, app opens, installs, conversions and revenue, by day / channel / link / platform (`GET /v1/analytics`). iPhone installs come from beta install matching	secret
`check_app_links`	Check a domain's `assetlinks.json` and `apple-app-site-association`, with a fix for each problem	none
`simulate_tap`	Dry-run one tap from one device or app (nothing recorded or billed)	secret
`trace_tap`	Walk a link through WhatsApp, Instagram, Facebook, Chrome, Safari, iPad, computer and preview bots; or read a Live Tap Trace from the website demo	secret (link) / none (demo token)
`get_workspace`	Who the key is: workspace, link domain, custom domains, plan, the key's access (full / links / read) and the saved QR styles (`qrStyles`, 0.6.0) (`GET /v1/workspace`; 0.5.0, needs engine with that route)	secret
`get_usage`	This month's taps and new links against the plan, `level` (ok / warn / over) and `new_links_paused` (`GET /v1/usage`)	secret
`get_referrals`	Referral report: taps and referred installs per code (`GET /v1/referrals`, a preview: says "not switched on yet" until it is)	secret
`list_webhook_deliveries`	A webhook's deliveries (status, attempts, last HTTP status, next retry; no payloads). Without `webhookId`: the workspace's webhooks (id, receiver site, events)	secret
`test_webhook`	Send one `ping` to a webhook now and see the receiver's status and time (not stored, not retried)	secret
`redeliver_webhook_delivery`	Send a failed delivery again (same `X-Strait-Delivery` id). Asks for `confirm: true`	secret
`deactivate_link`	Turn a link off: taps then get the "link not found" page. Asks for `confirm: true`; turn it back on with `update_link` `isActive: true`	secret
`pause_link`	Pause a link (taps get the "link not found" page until it is resumed). Asks for `confirm: true` (0.3.0)	secret
`resume_link`	Turn a paused link back on. Asks for `confirm: true` (0.3.0)	secret
`search_links`	Find links by text in slug, title, destination, campaign or tags, or by exact tag or campaign; active, inactive or all (0.3.0)	secret (owner/admin)
`get_link_qr`	A link's QR code as a PNG image or SVG, in the workspace's QR style or a saved style (`preset`, 0.6.0) (0.3.0)	secret
`get_campaign_qr_zip`	Every live link of a campaign as QR codes in one ZIP (SVG, or PNG up to 1024 px), handed back as an embedded file; 3 a minute per workspace (`GET /v1/qr.zip`; 0.6.0)	secret
`compare_analytics`	Two periods side by side (default: the one just before), totals and per channel / platform / link, with % change (0.3.0)	secret
`get_top_links`	Top links by taps, app opens, installs or conversions, with each one's share (0.3.0)	secret
`list_taps`	Recent taps, newest first, with where each was sent and the open/install it led to (default: last hour) (0.3.0)	secret (owner/admin)
`list_events`	Recent conversion and revenue events, newest first (default: last 7 days) (0.3.0)	secret (owner/admin)
`record_event`	Record a server-side conversion (`POST /v1/event`). Asks for `confirm: true` (0.3.0)	secret
`list_domains`	Custom link domains with status and the DNS records to add (0.3.0)	secret
`add_domain`	Add a custom link domain and get its DNS records (Scale and Enterprise). Asks for `confirm: true` (0.3.0)	secret
`remove_domain`	Remove a custom link domain. Asks for `confirm: true` (0.3.0)	secret
`list_webhooks`	The workspace's webhooks: id, receiver site (host only), events, on/off (0.3.0)	secret
`check_link`	Check any vendor's deep link (Firebase page.link, Branch, Strait): where it goes and what to fix (0.3.0)	none
`search_docs`	Search the Strait docs offline (bundled index)	none

Every tool carries MCP annotations (readOnlyHint, destructiveHint, …) and the descriptions of the 0.2 and 0.3 tools start with "Read-only." or "Write.". update_link, pause_link, deactivate_link and remove_domain are destructive. Every write except create_link, batch_create_links and test_webhook shows a preview first and acts only with confirm: true. create_link and batch_create_links write new links but never change existing ones. There is no delete tool: a deactivated link keeps its history.

Prompts

Clients that show MCP prompts (Claude Code: type /) offer six starters. All but get_started and migrate_firebase_links only read, and those two create links only after you answer yes:

Prompt	What it does
`get_started` (platform, optional: `react-native`, `expo`, `flutter`, `android`, `ios`, `unity`, `capacitor`, `web`)	Zero to a working link: checks the key with `get_workspace`, creates your first link with `create_link` after you answer yes, finds your platform (or uses the one you give), pastes the exact install and setup code from that SDK's docs page, runs `check_app_links`, and walks you through a test mode check (`checkDeferred()` in a debug build, then `list_taps`)
`weekly_review`	This week against last week (totals and channels), the top links by installs, and anything down more than 30 %
`debug_link` (slug)	Why a link opens the browser: App Links / Universal Links files, a trace per channel and its recent taps, with the fix
`setup_check`	Usage, custom domains still waiting for DNS, webhooks with failed deliveries, and the App Links files
`migrate_firebase_links` (old_domain, optional)	Maps your Firebase Dynamic Links (long links, export rows or short links checked with `check_link`) to Strait fields, shows the plan, and runs `batch_create_links` only after you answer yes. Re-running is safe: existing slugs come back as a per-item 409
`why_not_open` (slug; platform `android` / `iphone` and app `browser` / `whatsapp` / `instagram` / `facebook`, optional)	Why a link opened the store, browser or nothing: the link, the App Links / Universal Links files, the tap on that phone and app, its recent taps, and a pasted SDK `doctor()` report read by finding id (`key.secret`, `host.file_missing`, `app.missing`, `cert.missing`…)

Keys

The server needs a secret key (st_live_…) from Dashboard → Settings → Secret keys. A secret key can change your links, so:

Create a separate key for your AI tools, so you can revoke it on its own.
Keep it in the MCP client's config or environment, never in app or website code.
A publishable key (st_pub_live_…) does not work here: it is for the SDKs in your apps.
The server sends the key only as an Authorization: Bearer header to STRAIT_API_URL, never logs it, and replaces anything shaped like a secret key in tool output or errors with st_…[redacted].

Without a key, check_app_links, search_docs and demo trace_tap still work.

Install

Claude Code plugin (hosted server + setup skill)

(On older Claude Code: /plugin marketplace add strait-link/strait-mcp, then /plugin install strait@strait-link.) It asks for a secret key when you enable it and keeps it in your system's credential store. It connects to the hosted server https://strait.link/mcp and adds the strait-setup skill, which sets Strait up in an app. Privacy: https://straitlink.in/legal/privacy/

Claude Code

Cursor

~/.cursor/mcp.json (all projects) or .cursor/mcp.json (one project; don't commit a key):

json

{  "mcpServers": {    "strait": {      "command": "npx",      "args": ["-y", "@straitlink/mcp"],      "env": { "STRAIT_SECRET_KEY": "st_live_your_key" }    }  }}

{  "mcpServers": {    "strait": {      "command": "npx",      "args": ["-y", "@straitlink/mcp"],      "env": { "STRAIT_SECRET_KEY": "st_live_your_key" }    }  }}

Claude Desktop

Settings → Developer → Edit config, then add the same "strait" entry under mcpServers and restart.

From a checkout

cd mcp-server && npm ci && npm run buildclaude mcp add strait --env STRAIT_SECRET_KEY=st_live_your_key -- node "$PWD/dist/stdio.js"

cd mcp-server && npm ci && npm run buildclaude mcp add strait --env STRAIT_SECRET_KEY=st_live_your_key -- node "$PWD/dist/stdio.js"

In Cursor or Claude Desktop use "command": "node", "args": ["/absolute/path/to/mcp-server/dist/stdio.js"].

Try it

"Create a Strait link summer to https://shop.hilltop.example/summer with the title Summer sale."
"Which channel brought the most installs last month?"
"My links open the browser instead of the app. Check hilltop.strait.link and shop.hilltop.example."
"What happens when someone taps summer inside Instagram on an iPhone?"
"How do I receive links in Expo Router?"
"How much of this month's plan have we used?"
"My webhook stopped firing. Show me its last deliveries, send it a test, and resend the failed ones."
"Turn off the spring-sale link." (you'll see a preview first)
"Which referral codes brought the most installs in October?"
"How did this week do against last week, by channel?"
"Which links point at /summer? Pause the old ones."
"Did my test tap on summer just now get recorded, and did it open the app?"
"Give me a QR code for summer in dark grey."
"Is links.hilltop.example set up yet? Which DNS records are missing?"
"Check https://hilltop.page.link/abc before we migrate it."

Hilltop Shoes (hilltop.strait.link, *.hilltop.example) is a made-up shop used in examples.

MCP registry listing

server.json and the mcpName field in package.json list this server on the official MCP registry as in.straitlink/mcp. The registry checks that mcpName in the published npm package matches server.json name (package types).

Namespace in.straitlink/mcp. Reverse-DNS of straitlink.in, proven with HTTP authentication (authentication): the site serves the Ed25519 public key at https://straitlink.in/.well-known/mcp-registry-auth (v=MCPv1; k=ed25519; p=<public key>, written by the site's lib/seo.mjs), and the private key is the MCP_REGISTRY_PRIVATE_KEY Actions secret of this repo. No DNS change and no personal login.
remotes lists the hosted server https://strait.link/mcp (Streamable HTTP, Authorization: Bearer secret key, live since 24 Oct 2026), and repository points at github.com/strait-link/strait-mcp. The OAuth Worker (mcp.strait.link) is not listed until it is deployed.
New version: release it to npm first (release workflow), then run Actions → MCP registry → Run workflow. It checks server.json against package.json, the npm package and the registry schema, then logs in and publishes. Without the secret it only validates and stops.
New key: openssl genpkey -algorithm Ed25519 -out key.pem (OpenSSL 3, not macOS LibreSSL); the public line is v=MCPv1; k=ed25519; p=$(openssl pkey -in key.pem -pubout -outform DER | tail -c 32 | base64) (put it in the site's lib/seo.mjs and deploy the site); the secret is the hex private key, openssl pkey -in key.pem -noout -text | grep -A3 "priv:" | tail -n +2 | tr -d ' :\n'. Delete key.pem after.

Licence

MIT. See LICENSE.

OAuth remote server (built, not deployed)

The hosted server above (strait.link/mcp) needs a key in a header. This Worker is the later, OAuth version.

src/worker.ts is a Cloudflare Worker serving MCP over Streamable HTTP at https://mcp.strait.link/mcp. It answers 404 everywhere unless REMOTE_MCP=on (only env.production in wrangler.jsonc turns it on).

Bearer-key mode: Authorization: Bearer st_live_… on /mcp, for clients that take a header.
OAuth (@cloudflare/workers-oauth-provider): dynamic client registration (/register), /authorize, /token, authorization-server metadata and RFC 9728 protected-resource metadata (/.well-known/oauth-protected-resource/mcp). PKCE, registered redirect URIs only.
- The consent page asks for a secret key, checks it with GET /v1/links?limit=1, and keeps it only inside the grant, which the provider encrypts with the token (a test checks that KV never holds the key in plain text). It shows where the user is sent back to, has a Cancel button (access_denied back to the client), and sends X-Frame-Options: DENY, a strict CSP and Cache-Control: no-store.
- Access tokens last 1 hour; refresh tokens 30 days.
- Next step before a wide launch: replace the paste-a-key page with dashboard sign-in that mints a scoped key.
/healthz returns { ok, service, version, mcp } with no upstream call, for the post-deploy check.

Try it locally

cp .dev.vars.example .dev.vars        # REMOTE_MCP=on, STRAIT_API_URL=http://localhost:3000npm run dev:remote                    # wrangler dev on http://localhost:8787 (local KV, nothing leaves the machine)curl http://localhost:8787/healthznpx -y @modelcontextprotocol/[email protected]   # connect to http://localhost:8787/mcp

cp .dev.vars.example .dev.vars        # REMOTE_MCP=on, STRAIT_API_URL=http://localhost:3000npm run dev:remote                    # wrangler dev on http://localhost:8787 (local KV, nothing leaves the machine)curl http://localhost:8787/healthznpx -y @modelcontextprotocol/[email protected]   # connect to http://localhost:8787/mcp

Deploy the remote server (Strait team only)

Agents prepare this; only the Strait team deploys. Needs the Cloudflare account that holds the strait.link zone (CLOUDFLARE_API_TOKEN / CLOUDFLARE_ACCOUNT_ID from redirect-engine/.env work). The bundle is about 1.9 MB (360 KB gzipped), inside the free plan's size limit; Workers Paid (already planned) is recommended for its higher CPU time per request.

cd mcp-server && npm cinpm run typecheck && npx vitest run            # all green# 1. Create the OAuth store once and paste its id into env.production.kv_namespaces in wrangler.jsoncnpx -y wrangler@4 kv namespace create OAUTH_KV --env productionnpm run deploy:preflight                       # exit 0 = config ready (fails while the id is a placeholder)npm run deploy:check                           # wrangler dry run, nothing uploaded# 2. Deploy. The custom domain creates the mcp.strait.link DNS record and certificate.npx -y wrangler@4 deploy --env production# 3. Check itcurl -s https://mcp.strait.link/healthz                                     # {"ok":true,...}curl -s https://mcp.strait.link/.well-known/oauth-protected-resource/mcp    # resource: https://mcp.strait.link/mcpcurl -s -o /dev/null -w '%{http_code}\n' -X POST https://mcp.strait.link/mcp  # 401 (needs a token)claude mcp add --transport http strait https://mcp.strait.link/mcp          # then /mcp in Claude Code to sign in

cd mcp-server && npm cinpm run typecheck && npx vitest run            # all green# 1. Create the OAuth store once and paste its id into env.production.kv_namespaces in wrangler.jsoncnpx -y wrangler@4 kv namespace create OAUTH_KV --env productionnpm run deploy:preflight                       # exit 0 = config ready (fails while the id is a placeholder)npm run deploy:check                           # wrangler dry run, nothing uploaded# 2. Deploy. The custom domain creates the mcp.strait.link DNS record and certificate.npx -y wrangler@4 deploy --env production# 3. Check itcurl -s https://mcp.strait.link/healthz                                     # {"ok":true,...}curl -s https://mcp.strait.link/.well-known/oauth-protected-resource/mcp    # resource: https://mcp.strait.link/mcpcurl -s -o /dev/null -w '%{http_code}\n' -X POST https://mcp.strait.link/mcp  # 401 (needs a token)claude mcp add --transport http strait https://mcp.strait.link/mcp          # then /mcp in Claude Code to sign in

Roll back with npx -y wrangler@4 rollback --env production, or switch it off by setting REMOTE_MCP to "off" in env.production.vars and deploying again (every route then answers 404). Revoking the secret key a user pasted cuts that connection off at the API.

Claude Code skill

skills/strait-setup/SKILL.md teaches Claude Code how to add Strait to an app (React Native / Expo, Flutter, Android, iOS, Unity, Capacitor, web, and a Node server). Copy the folder into ~/.claude/skills/ or a project's .claude/skills/, or download it from https://straitlink.in/ai/strait-setup/SKILL.md.

The site repo owns it (site/lib/skill.mjs, fed by site.config.json, so install lines and versions match the docs). Don't edit this copy by hand: run npm run skill:sync (needs ../site or SITE_DIR). The site's tests fail when this copy drifts.

Develop

npm cinpm run typecheck     # Node, tests and the Workernpm test              # unit, protocol, Worker and an end-to-end test against a local enginenpm run buildnpm run inspect       # MCP Inspector CLI: lists the toolsnpm run docs-index    # rebuild src/docs-index.json from ../site/content/docsnpm run skill:sync    # regenerate skills/strait-setup/SKILL.md from ../sitenpm run deploy:check  # wrangler dry run of the production Worker (nothing uploaded)

npm cinpm run typecheck     # Node, tests and the Workernpm test              # unit, protocol, Worker and an end-to-end test against a local enginenpm run buildnpm run inspect       # MCP Inspector CLI: lists the toolsnpm run docs-index    # rebuild src/docs-index.json from ../site/content/docsnpm run skill:sync    # regenerate skills/strait-setup/SKILL.md from ../sitenpm run deploy:check  # wrangler dry run of the production Worker (nothing uploaded)

The end-to-end test (test/integration.test.ts) starts the real engine from ../redirect-engine (or ENGINE_DIR) with its in-memory store, runs this server over stdio as a child process, creates a link and reads it back. It is skipped when no engine checkout with installed dependencies is next to this repo.

Docs and support

Docs: straitlink.in/docs/ · platform status · troubleshooting
Talk to the Strait team: [email protected] (replies within 1 working day, IST) or call +91 81218 61890.
Bugs and feature requests: open an issue on this repo.
Security: never in a public issue. Write to [email protected].

Source: README.md at commit 8f86bed

Tools

create_link

Create a link

Create one deep link (short link) in the workspace of STRAIT_SECRET_KEY. Returns the link with its shortUrl (https://<workspace>.strait.link/<slug>) to share. The link opens the app when installed (App Links / Universal Links), otherwise the store or website, and keeps the destination through an install. For more than a few links use batch_create_links.

ParametersslugrequiredtagstitlelongUrlrequiredcampaignimageUrlexpiresAtdesktopUrlexpiredUrldescriptionexpiredActioniosFallbackUrl+1 more

batch_create_links

Create links in bulk

Create up to 500 links in one call (imports, migrations, campaigns). Each item is checked like create_link and gets its own result; a slug that already exists is a per-item 409, so re-running an import is safe. Read results[i].ok.

Parameterslinksrequired

get_link

Get a link

Get one active link by slug: destination, fallbacks, tags, expiry and its shortUrl.

Parametersslugrequired

list_links

List links

List links, newest first, one page at a time. Pass nextCursor back as cursor until it is null. status: active (default) or paused (turned off, and can be turned back on with update_link isActive: true; links disabled for abuse are not listed).

Parameterslimitcursorstatus

update_link

Update a link

Change a link: its destination, title, tags or expiry, or turn it off or back on with isActive. People who tap the link afterwards get the change, so this needs confirm: true. Without it nothing changes: you get a preview of the current and proposed values to show the user first. null clears expiresAt / expiredAction / expiredUrl. isActive is sent on its own: false pauses the link (taps get the "link not found" page), true turns a paused link back on (taps follow within about 30 seconds). A link disabled for breaking the acceptable use policy cannot be turned back on, and if another active link now uses the slug, pause or rename that one first.

ParametersslugrequiredtagstitleconfirmlongUrlisActiveexpiresAtexpiredUrlexpiredAction

get_analytics

Read analytics

Taps, app opens, installs, conversions and revenue for the workspace (or one link) over a date range, optionally grouped by day, channel (whatsapp, instagram, gmail, direct…), link or platform. Same definitions as the dashboard; days are UTC; at most 92 days per call (default: the last 30 days).

Parameterstofromlinkgroup

check_app_links

Check App Links / Universal Links files

Check a domain's App Links (Android, /.well-known/assetlinks.json) and Universal Links (iPhone, apple-app-site-association) files: each finding has a severity (ok / warn / error) and a fix. Use it when links open the browser instead of the app. It checks the files the domain serves, not how one particular phone behaves. No key needed.

Parametersdomainrequired

simulate_tap

Simulate a tap

Dry-run one tap on a link from one kind of device or app and see exactly what Strait would do (redirect, in-app-browser escape page, store, preview card) and why. Nothing is recorded or billed. ua is a preset or a raw User-Agent string.

Parametersuarequiredurlslug

trace_tap

Trace taps on a link

Explain where taps on a link go. With slug or url: walks the link through the common channels (Android Chrome, WhatsApp, Instagram and Facebook in-app browsers, iPhone Safari and Instagram, iPad, computer, preview bot) and returns one row per channel with the decision, where the tap is sent and the reason. A simulation: nothing is recorded. With token: reads a Live Tap Trace from the straitlink.in demo (the st value of a demo.strait.link/try link), i.e. what happened to a real tap.

Parametersurlslugtoken

get_workspace

Read the workspace and key

Read-only. Who this secret key is: the workspace name, its link domain (the host every shortUrl uses, e.g. hilltop.strait.link or a verified custom domain), custom domains, the plan, what the key may do (full, links or read) and the saved QR styles (qrStyles: their id is the preset for get_link_qr and get_campaign_qr_zip). Call it first when you need the link domain (for check_app_links) or to know whether the key can write.

Takes no parameters.

get_usage

Read this month's usage

Read-only. This calendar month's usage (UTC) against the workspace's plan: billed taps used and included, new links created and included (null = no limit), level (ok, warn from 80 % of included taps, over from 100 %) and new_links_paused. Going over never stops a redirect; new_links_paused means create_link answers 402 until an upgrade or the month ends.

Takes no parameters.

get_referrals

Read the referral report

Read-only. The referral report (a preview): for each referral code in a date range, the taps that carried it and the referred installs, most conversions first. Days are UTC; at most 92 days per call (default: the last 30 days). If referrals are not switched on for the workspace yet, says so instead of failing.

Parameterstofrom

list_webhook_deliveries

List webhook deliveries

Read-only. A webhook's delivery history, newest first (kept 30 days): each event sent, its status (pending = waiting for a retry, delivered, failed = gave up after 6 attempts), attempts, last HTTP status or error and the next retry time. A permanent error (e.g. unsafe_target) fails at once. Payloads are never returned. Without webhookId it lists the workspace's webhooks (id, receiver site, events, active) so you can pick one. Use it when a webhook seems to have stopped.

ParameterslimitcursorwebhookId

test_webhook

Send a test webhook

Write. Sends one test event (event: ping) to a webhook right now, even if it is paused, and returns whether the receiver accepted it, its HTTP status and the time taken (never its response body). The ping is not stored or retried and changes nothing in Strait. Get the id from list_webhook_deliveries without webhookId.

ParameterswebhookIdrequired

redeliver_webhook_delivery

Redeliver a webhook delivery

Write. Sends one past webhook delivery again, right away, to the webhook's current URL, with the same X-Strait-Delivery id (receivers that de-duplicate on it are safe); its retry schedule starts over. For failed deliveries. This re-sends a real event into the receiving system, so it needs confirm: true; without it nothing is sent. Refused (409) when already delivered or being sent right now. A paused webhook must be turned back on first (Dashboard → Settings → Webhooks), otherwise the redelivery fails at once.

ParametersconfirmdeliveryIdrequired

deactivate_link

Deactivate a link

Write. Turns a link off: afterwards every tap on it gets the "link not found" page instead of the app, store or website. Its history stays in analytics, and it can be turned back on with update_link with isActive: true. This needs confirm: true; without it nothing changes and you get a preview of the link to show the user first.

Parametersslugrequiredconfirm

pause_link

Pause a link

Write. Pauses a link: until it is resumed, every tap gets the "link not found" page instead of the app, store or website. Its history stays in analytics. Needs confirm: true; without it nothing changes and you get a preview of the link to show the user. Undo with resume_link.

Parametersslugrequiredconfirm

resume_link

Resume a paused link

Write. Turns a paused link back on: taps follow it again within about 30 seconds. Needs confirm: true; without it nothing changes and you get a preview (it looks the link up among paused links). A link disabled for breaking the acceptable use policy cannot be resumed, and if another active link now uses the slug, pause or rename that one first. list_links with status: paused lists paused links.

Parametersslugrequiredconfirm

search_links

Search links

Read-only. Finds links by text across slug, title, destination (longUrl), campaign and tags, or by an exact tag or campaign, including paused and inactive links (status: all). Use it for "which links point at /summer", "every link tagged diwali" or "links in the spring campaign". Reads the workspace's links export, so it needs an owner's or admin's secret key.

Parameterstaglimitquerystatuscampaign

get_link_qr

Get a QR code for a link

Read-only. A print-ready QR code for a link, in the workspace's QR style (Dashboard → Settings → QR codes); the options override it for this one code, or pass preset to use a saved style (get_workspace lists them). Returns the image (PNG, or SVG markup) and the exact URL in the code. By default scans add utm_source=qr, so they show as the qr channel in analytics. Refused (400) if the colours have under 3:1 contrast.

Parameterslogosizeslugrequiredcolortrackformatpresetbackground

get_campaign_qr_zip

Get a campaign's QR codes as a ZIP

Read-only. Every live link of one campaign as print-ready QR codes in one ZIP (one file per link, `<slug>-qr.svg` or .png, sorted by slug), in the workspace's QR style or a saved style (preset; get_workspace lists them as qrStyles). SVG by default (vector, for print); PNG at most 1024 px and 50 links. Returns a summary and the ZIP as an embedded file. Scans add utm_source=qr by default. Limit: 3 ZIPs a minute per workspace. For very large campaigns use Dashboard -> Links -> filter by campaign -> QR ZIP.

Parameterslogosizecolortrackformatpresetcampaignrequiredbackground

compare_analytics

Compare two periods

Read-only. Compares two periods: taps, app opens, installs, conversions and revenue now against before, with the change and the percent change (null when before was 0). By default "before" is the period of the same length just before. With group (channel, platform or link) it compares each row too, biggest first. Use it for "how did this week do against last week" or "why did installs drop". Days are UTC; each period at most 92 days.

ParameterstofromlinkgrouplimitcompareTocompareFrom

get_top_links

Rank the top links

Read-only. The workspace's top links over a date range, ranked by taps, app opens, installs or conversions, with each link's share of the total. Use it for "which links brought the most installs this month". Days are UTC; at most 92 days (default: the last 30).

Parametersbytofromlimit

list_taps

List recent taps

Read-only. Recent individual taps, newest first: when, which link, platform, channel, in-app browser, where Strait sent it (sent_to), and the app open and install it led to (opened_at, open_kind, installed_at, match_method). Default: the last hour. Use it to check that a test tap was recorded and what happened to it. Reads the taps export (an owner's or admin's key).

Parameterstofromsluglimit

list_events

List recent events

Read-only. Recent conversion and revenue events (from the SDKs' track calls or record_event), newest first: name, value, currency, platform, the link and tap they are attributed to, and that tap's channel and campaign. Default: the last 7 days. Use it to check that purchases or sign-ups arrive. Reads the events export (an owner's or admin's key).

Parameterstofromsluglimit

record_event

Record a conversion event

Write. Records one conversion or revenue event from your server side (trusted: sentWith secret_key), the same as POST /v1/event. It counts in analytics and revenue and is sent to webhooks subscribed to app.event, so it needs confirm: true; without it nothing is recorded and you get a preview. clickId ties it to the tap it came from (apps get it from the SDK). eventId (e.g. your order id) makes retries safe: the same eventId is stored once. Apps should send events with the SDKs, not this tool.

ParametersdataeventrequiredvaluelinkIdclickIdconfirmeventIdcurrencyplatform

list_domains

List custom domains

Read-only. The workspace's custom link domains (e.g. links.hilltop.example) with each one's status (pending_dns until the DNS records are in place, then live; verified once ownership is proven) and the exact DNS records to add. Also says whether custom domains are switched on and allowed on this plan (Scale and Enterprise) and the limit. Use it for "is my domain set up yet".

Takes no parameters.

add_domain

Add a custom domain

Write. Adds a custom link domain (a subdomain you own, e.g. links.hilltop.example) and returns the DNS records to add at your DNS provider: a CNAME to Strait, a TXT record proving ownership and a TXT record for the HTTPS certificate. Scale and Enterprise only, at most 5 per workspace. Needs confirm: true; without it nothing changes and you get a preview (plan, limit, domains already added).

Parametersconfirmhostnamerequired

remove_domain

Remove a custom domain

Write. Removes a custom link domain: links stop working on it at once (they keep working on the workspace's strait.link address). Afterwards delete its CNAME and TXT records at your DNS provider. Needs confirm: true; without it nothing changes and you get a preview.

Parametersconfirmhostnamerequired

list_webhooks

List webhooks

Read-only. The workspace's webhooks: id, receiver site (the host only: receiver URLs often carry a secret), the events each one gets (link.clicked, app.opened, install.matched, app.event, referral.converted) and whether it is on. Never returns signing secrets. Use the id with list_webhook_deliveries or test_webhook. Webhooks are added in Dashboard → Settings → Webhooks.

Takes no parameters.

check_link

Check any deep link

Read-only. Checks any deep link, from any vendor (a Firebase Dynamic Link on page.link, Branch app.link, a Strait link, a plain URL): where it goes on Android, iPhone and computers, whether it still works, and what to fix. Use it before migrating links or when an old link stopped working. Only public https links. No key needed; a few checks a minute per network.

Parametersurlrequired

search_docs

Search the docs

Search the Strait documentation (SDK setup for React Native / Expo, Flutter, Android, iOS, Unity, web and Node; App Links and Universal Links; deferred deep linking; analytics; REST API; webhooks; migrating from Firebase Dynamic Links or Branch; troubleshooting). Returns the closest-matching sections as Markdown with their URLs. Works offline.

Parameterslimitqueryrequired

Version history

v0.7.0LatestNov 5, 2026
v0.6.0Nov 4, 2026

Score

100% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

Reached in the last 30 daysRequired25 pts
Auth declaredRequired10 pts
Tools listed15 pts
DescriptionRequired15 pts
Logo10 pts
Documentation15 pts
License10 pts

Variable	Meaning
`STRAIT_SECRET_KEY`	Your secret key (`st_live_…`)
`STRAIT_API_URL`	Engine URL. Default `https://strait.link`. Use `http://localhost:3000` for a local engine