Strale

io.github.strale-io由 GitHub 账号 strale-io 发布v0.2.12更新于 Nov 8, 2026

Hundreds of pay-per-call tools for agents: company records, screening, validation, web reading.

已验证Streamable HTTP可网页运行金融安全与监控商业与电商

概览

AI 生成的概览

Strale 是按次付费的能力市场,让助手搜索、执行并审计数百个公司信息、合规、校验与 Web3 工具。

可以做什么
  • 按关键词、类别或自然语言搜索能力目录
  • 按 slug 执行能力并返回结果,输入遵循该能力自身的 schema
  • 获取上手说明、测试方法与工具或套件的公开信任与测试信号
  • 查询钱包余额,并按交易 ID 调取含输入、输出、价格与数据来源的历史执行记录
  • 一次调用即获得对钱包、代币、协议或跨链桥等链上对手方的决策级结论
  • 检测 API 连通性并查看版本与目录数量
适用场景
适合助手在运行时需要外部核验数据的场景,例如公司注册信息查询、KYB 或尽职调查套件、IBAN/VAT/邮箱校验、DNS 或网址转 Markdown、链上对手方风险判断,而无需为每个数据源硬编码集成与凭据。
运行要求
可作为远程 Streamable HTTP 端点使用,也可通过 npm 包 strale-mcp 以 stdio 本地运行。免费额度子集无需密钥(按 IP 的月度配额);其余能力需要 STRALE_API_KEY 或 Bearer Authorization 头中的 API 密钥,或使用 Base 上 USDC 的 x402 按次付费。需要网络访问。
安装前请注意
付费能力会从 Strale 钱包实际扣费,x402 调用在 Base 主网按次支付 USDC,执行前应先查余额。API 密钥是有效凭据,不应硬编码。执行输入(如 IBAN、钱包地址等标识)会发送给第三方 API,并保存在可调取的交易记录中。

安装

在 SourceWeft 中

  1. 打开 控制台中的 Strale,将其添加到工作区。
  2. 为需要使用其工具的对话启用该服务。

Web executable,通过 Streamable HTTP。 远程服务在工作区中配置后即可从网页运行时运行。

交给智能体安装

把这段提示词粘贴到 Claude Code、Codex、Cursor 等智能体,或 SourceWeft 对话中。智能体会读取该服务器的安装指南,先向你展示发布者、端点和登录方式,经你同意后再把它添加到你的客户端。密钥不会写进任何命令。

阅读 https://sourceweft.com/mcp/io.github.strale-io%2Fstrale/install.md,并按其中说明把这个 MCP 服务器接入我的客户端。修改任何配置之前,先告诉我它的发布者、端点和登录方式,等我确认。不要把 API 密钥写进命令或我会提交的文件;问我密钥应从哪里获取。

查看智能体所依据的安装指南

其他 MCP 客户端

把它添加到你客户端的 mcpServers 配置中。

{
  "mcpServers": {
    "strale": {
      "type": "http",
      "url": "https://api.strale.io/mcp?src=mcp-registry"
    }
  }
}

README

Strale

Pay-per-call tools for AI agents — one API key or an x402 wallet. MCP server, REST API, TypeScript and Python SDKs.

[strale MCP server]

[npm] [npm] [PyPI] [License: MIT] [strale.io]

What Strale is

Strale is a capability marketplace for AI agents. Agents call strale.do() at runtime to reach tools — company registry lookups, compliance checks, financial validation, Web3 security, and more — plus bundled solutions for multi-step workflows like a full KYB check or company due diligence, instead of the agent's own code hardcoding integrations and managing credentials for every data source it might need.

Each tool page lists inputs, output fields, price, limitations and source. Testing modes vary by tool. Read the current catalogue, free-tier list and country coverage from platform facts.

How to use it

MCP server (recommended: no install)

json
{  "mcpServers": {    "strale": {      "type": "streamableHttp",      "url": "https://api.strale.io/mcp?src=gh-readme",      "headers": {        "Authorization": "Bearer sk_live_your_key_here"      }    }  }}

Works with Claude Desktop, Claude Code, Cursor, and any MCP client supporting Streamable HTTP. For local stdio instead, or the full tool surface, see packages/mcp-server/README.md.

TypeScript SDK

bash
npm install straleio
typescript
import Strale from "straleio";
const strale = new Strale({ apiKey: process.env.STRALE_API_KEY });const result = await strale.do("eu-vat-validate", { vat_number: "SE556000000001" });

Full reference: packages/sdk-typescript/README.md.

Python SDK

bash
pip install straleio
python
from straleio import Strale
strale = Strale(api_key="your_api_key")result = strale.do("eu-vat-validate", {"vat_number": "SE556000000001"})

Full reference: packages/sdk-python/README.md.

Get started without an API key

A subset of capabilities (email/IBAN/crypto-address validation, DNS lookup, JSON repair, URL-to-markdown, and more) work with no signup, no API key, and no wallet — only an IP-based monthly allowance. Read the current list from GET /v1/platform/facts (free_tier_slugs), not from a number in this file. Get a key and trial credits at strale.io when you need the rest of the catalog.

Framework integrations

PackageRegistryDescription
strale-mcpnpmMCP server — the full capability catalog via Claude, Cursor, any MCP host
straleionpmTypeScript/JavaScript SDK
straleioPyPIPython SDK
langchain-stralePyPILangChain toolkit (StraleToolkit)
crewai-stralePyPICrewAI integration — drop-in BaseTools for agents
strale-semantic-kernelnpmSemantic Kernel plugin for .NET and TypeScript agents
composio-stralePyPIComposio integration — custom actions

Each package's own README is the reference for that integration; this file only points at them. Every distribution PR against an external framework repo, and every publish of one of these packages, follows CLAUDE.md's Distribution PR Integrity Protocol — a package claiming framework-native integration is verified against the published artefact, not the source tree, before the claim ships.

Web3

Web3 capabilities (wallet risk scoring, token honeypot detection, ENS resolution, DeFi protocol data, gas oracle, EU MiCA VASP verification, market sentiment) and bundled solutions for on-chain agents are available via the x402 payment protocol — pay per call with USDC on Base mainnet, no signup required. Not every capability is x402-eligible; read the live, dynamic subset from:

GET https://api.strale.io/x402/catalog?src=gh-readmeGET https://api.strale.io/.well-known/x402.json

Testing and source context

Testing modes vary by tool. Inspect current availability, test mode and last-tested time in public test signals, and read limitations and sources in the catalogue before use.

GET https://api.strale.io/v1/capabilities/vat-validate

Every capability publishes its limitations honestly, including coverage gaps. Methodology: strale.io/security.

IDE rules for safe data handling

Drop these into your project to give your coding agent security guidance for trust-sensitive data (IBANs, company registries, sanctions, PII):

These prevent the most common vibe-coding vulnerabilities: client-side IBAN validation, hardcoded API keys, missing provenance metadata, and direct registry scraping.

Agent Skills & code examples

More

How the code is organised

strale/├── apps/api/          Hono API server: routes, capability executors,│                       Drizzle schema + queries, Stripe/matching/auth│                       helpers. drizzle/ holds the migration history.├── packages/           Published SDKs and framework integrations (see the│                       table above) plus internal workspace packages.├── manifests/          One YAML file per live capability: pricing, data│                       source, field-reliability declarations, test│                       fixtures. The onboarding pipeline│                       (apps/api/scripts/onboard.ts) is the only│                       sanctioned way a capability enters the system —│                       see CLAUDE.md's Capability Onboarding Protocol.├── design/             Design tokens as data (colors, type, spacing) —│                       one active file per surface, candidates carry a│                       status, promotion is a decision plus a file swap.├── config/              Cross-cutting configuration as data, e.g. the│                       environment-variable manifest every process.env│                       read is registered against.└── scripts/            Repo-root tooling: the checkers behind every                        `npm run *:check` script, the session-handoff                        gate, and one-off operator scripts.

apps/api/scripts/ and apps/api/src/capabilities/ carry the same idea at capability-authoring scope — read CLAUDE.md's "Adding New Capabilities" section before writing a new executor.

How the company runs the repository

Where truth lives. Product, state, and roadmap truth is migrating from Notion into this repository (docs/project/), but the migration is not complete: docs/project/START-HERE.md and the rest of docs/project/ are explicitly candidates (authority_active: false) until a founder- confirmed cutover. Until then, Notion (Project Home, the To-do & Build Plan, the Decisions DB) is authoritative, and CLAUDE.md / AGENTS.md say so at the top of every session. docs/README.md indexes every docs/ subtree with its current authority status; docs/project/STRUCTURE.md records exactly where the repo's layout still deviates from the migration's target and why.

Where work in flight lives. Multi-batch work is tracked in docs/programs/ (start at docs/programs/README.md): each program has a PROGRAM.md with a "Resume here" section and a machine-checked tracks.yaml. A session resuming a program reads only those two files and follows their pointers — chat history is never required.

How sessions work. CLAUDE.md is the canonical operating manual for Claude Code sessions; AGENTS.md is its condensed derivative for Codex-CLI sessions and points back at CLAUDE.md for anything that can drift rather than restating it. Every session ends through a handoff gate (scripts/handoff/handoff-check.mjs, installed as a git hook) that refuses to let a session leave uncommitted work, an unpushed branch, a stale worktree, or code changes with no resume surface for the next session. Batch work happens in an isolated git worktree, never the shared primary checkout — see WORKTREES.md.

What CI checks, by category, not by exhaustive list (see .github/workflows/ci.yml for the exact, current set): an ephemeral- Postgres integration lane for money- and audit-chain-critical behavior; typecheck and lint across apps/api and every published package; capability manifest structural and fixture-consistency gates; framework-package integrity (a published *-strale package must contain real code from the framework it claims to integrate with); a family of content-as-data registers, each with its own checker and generated index — research (docs/research/), design tokens (design/), the environment-variable manifest (config/), the model-id registry, the public claims register (docs/company/claims.yaml), program track registers (docs/programs/*/tracks.yaml), and this repository's own docs/ structure (docs:check, archive:index -- --check); and the session- handoff gate itself. Every one of these checkers plants a failure case in a throwaway fixture and proves it fails before the fix — see docs/company/LESSONS.md family F5.

Where history lives

archive/ holds closed, historical, and superseded material — see archive/README.md for what each subtree holds, generated (with hand- written prose above it) by npm run archive:index. handoff/ holds one file per session's end-of-session record; handoff/README.md is a generated, reverse-chronological index of all of them by date and stated intent. Neither directory is required reading to resume work — the program register and docs/project/START-HERE.md are.

License

MIT

来源:README.md,提交 9743a24

工具

9

strale_ping

Check connection

Checks that the Strale API is reachable and the MCP server is running. Call this before a series of capability executions to verify connectivity, or when troubleshooting connection issues. Returns server status, version, tool count, capability count, solution count, and a timestamp. No API key required.

无需输入参数。

strale_getting_started

Get started with Strale

Explains how to start using Strale and what is available without credentials. Call this on first connection. Returns the current free-tier capability list with example inputs, the pay-per-call (x402) route that needs no signup, and how to reach the full registry. No API key required.

无需输入参数。

strale_execute

Run a Strale tool

Executes a Strale capability by slug and returns the result. Use this when you need to perform any verification, validation, lookup, or data extraction from the capability registry. Inputs follow the capability's own schema, which strale_search lists; the API is documented at https://strale.io/docs. Call strale_search first to find the right slug and required input fields. Returns a result object with the capability output, latency, price charged, and data provenance. Several capabilities are free without an API key (monthly per-IP allowance; see GET /v1/platform/facts, static.free_tier_monthly_limit) — strale_search reports which. Paid capabilities debit from the wallet — check strale_balance first for high-value calls.

输入参数slug必填inputs必填max_price_cents

strale_balance

Read wallet balance

Returns the current Strale wallet balance. Call this before executing paid capabilities to verify sufficient funds, or after a series of calls to reconcile spend. Returns balance in EUR cents (integer) and formatted EUR string. Requires an API key — returns an auth instruction if none is configured.

无需输入参数。

strale_methodology

Read testing and source notes

Explains testing modes, source context and transaction retrieval. No API key required.

无需输入参数。

strale_trust_profile

Read current test and availability signals

Reads current public test results for a tool or bundle: badge, tested flag, recent pass rate and last-tested time where available. Use the catalogue for inputs, limitations and sources. No API key required.

输入参数slug必填type

strale_transaction

Read a transaction record

Retrieve a past execution record by transaction ID. Returns inputs, outputs, latency, price, data provenance, success/failure status, and failure categorization. Use this to inspect what a previous strale_execute call returned, debug failures, or provide an audit trail. Free-tier transactions are accessible by ID without an API key.

输入参数transaction_id必填

strale_web3_assurance

Check on-chain counterparty

Returns a decision-ready answer about an on-chain counterparty (wallet, smart contract, token, DeFi protocol, or bridge) in a single call. Surfaces verdict (proceed/review/block/insufficient_evidence), reason_codes (machine-parsable UPPERCASE_SNAKE_CASE), critical_flags, suggested_action, evidence map (sanctions, mixer-graded, scam-cluster, wallet-history, token-safety, contract-verification, protocol-risk, EAS attestations, ERC-8004 reputation, more), and a sidecar audit_url. Two modes: 'outbound' (agent vetting recipient pre-payment, full evaluator set, 8s budget) or 'reverse-call' (service publisher gating an inbound x402 buyer in real-time, critical evaluators only, limited evaluator set). Use before any agent transacts on-chain — sending value, swapping, staking, minting, bridging, or interacting with a contract.

输入参数modechainactiontarget必填agent_idamount_usdtarget_typecaller_jurisdiction

版本历史

4
  1. v0.2.12最新Nov 7, 2026
  2. v0.2.10Nov 5, 2026
  3. v0.2.9Oct 29, 2026
  4. v0.2.4Sep 16, 2026

评分

已满足适用检查项的 100%

该评分衡量此收录条目的完整程度,依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价,也不表示服务器安全或当前可用:可连通性是带日期的检查结果,评分也不包含安装量或用户评价。

  • 近 30 天内可连通必需25 分
  • 已声明认证方式必需10 分
  • 已列出工具必需15 分
  • 描述必需15 分
  • 图标10 分
  • 文档15 分
  • 许可证10 分