strale — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited strale (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Strale provides 250+ capabilities across company data, compliance/KYB, financial validation, web intelligence, document extraction, and developer tools — all through a single endpoint with quality scores and provenance tracking.
Every request requires an API key in the Authorization header:
Authorization: Bearer sk_live_...Set via environment variable STRALE_API_KEY. If missing, tell the user to sign up at https://strale.dev (new accounts get €2.00 trial credits, no card required).
This is the only endpoint you need. It executes a capability and returns structured output.
{
"capability_slug": "iban-validate",
"inputs": { "iban": "SE3550000000054910000003" },
"max_price_cents": 10
}Response:
{
"transaction_id": "txn_abc123",
"status": "completed",
"capability_used": "iban-validate",
"price_cents": 1,
"latency_ms": 340,
"wallet_balance_cents": 195,
"output": {
"valid": true,
"bank_name": "SEB",
"country": "SE",
"bic": "ESSESESS"
}
}capability_slug — which capability to run (see catalog below)inputs — structured input matching the capability's schemamax_price_cents — budget ceiling in EUR cents; the call fails if thecapability costs more than this
dry_run: true — preview what would execute without chargingidempotency_key — safe retries for the same requestIf the response status is 202, the capability is running asynchronously. Poll GET /v1/transactions/{transaction_id} until status is completed or failed.
GET https://api.strale.io/v1/capabilitiesReturns all capabilities with slug, description, price, input/output schemas. Filter by category with ?category=compliance.
Use the MCP server tool strale_search or query:
GET https://api.strale.io/v1/capabilities?search=sanctionsGET https://api.strale.io/v1/wallet/balanceiban-validate — Validate IBAN, get bank name and BIC (€0.01)vat-format-validate — Check VAT number format (€0.01)vat-vies-validate — Verify VAT via EU VIES system (€0.02)swedish-company-data — Revenue, employees, profit for Swedish orgs (€0.02)uk-company-data — UK Companies House lookup (€0.02)danish-company-data — Danish CVR registry lookup (€0.02)norwegian-company-data — Brønnøysund registry lookup (€0.02)finnish-company-data — PRH/YTJ lookup (€0.02)sanctions-check — Screen against global sanctions lists (€0.02)pep-check — Politically exposed person screening (€0.03)adverse-media-check — Adverse media screening (€0.03)beneficial-ownership-lookup — UK PSC registry (€0.02)domain-reputation — Domain age, registrar, risk signals (€0.01)ssl-certificate-check — SSL cert details and expiry (€0.01)whois-lookup — WHOIS registration data (€0.01)gdpr-website-check — Cookie consent, privacy policy checks (€0.02)json-validate — Validate JSON against schema (€0.01)openapi-validate — Validate OpenAPI specs (€0.01)email-validate — Email format and deliverability (€0.01)error-explain — Explain error messages with fix suggestions (€0.01)patent-search — Search patent databases (€0.02)This is not exhaustive — use the catalog endpoint to discover all 250+ capabilities.
curl -s -X POST https://api.strale.io/v1/do \
-H "Authorization: Bearer $STRALE_API_KEY" \
-H "Content-Type: application/json" \
-d '{"capability_slug":"iban-validate","inputs":{"iban":"SE3550000000054910000003"},"max_price_cents":10}'Add to your .mcp.json:
{
"mcpServers": {
"strale": {
"type": "streamableHttp",
"url": "https://api.strale.io/mcp",
"headers": {
"Authorization": "Bearer sk_live_your_key_here"
}
}
}
}This gives you tools: strale_execute, strale_search, strale_balance, and individual tools for each capability.
import { Strale } from "straleio";
const client = new Strale({ apiKey: "sk_live_..." });
const result = await client.do({
capabilitySlug: "sanctions-check",
inputs: { name: "John Doe", country: "US" },
maxPriceCents: 10,
});from straleio import Strale
client = Strale(api_key="sk_live_...")
result = client.do(
capability_slug="vat-vies-validate",
inputs={"vat_number": "SE556703748501"},
max_price_cents=10,
)When a task requires Know Your Business verification, run these in sequence:
(swedish-company-data, uk-company-data, etc.)
(beneficial-ownership-lookup)
(sanctions-check)
(pep-check)
(adverse-media-check)
Report results for each step. If any check fails or returns a hit, flag it clearly.
402 — Insufficient wallet balance. Tell the user to top up at https://strale.dev.404 — Capability not found. Use strale_search to find the right slug.422 — Invalid inputs. Check the capability's input schema via the catalog.429 — Rate limited. Wait and retry.500 — Upstream provider error. Retry once; if it persists, report the error.Every Strale capability has a dual-profile Strale Quality Score (SQS):
Grades: A (≥90), B (≥75), C (≥50), D (≥25), E (<25). Prefer A/B-graded capabilities when multiple options exist for the same task.
max_price_cents to the minimum needed. Most capabilities cost €0.01–0.03.dry_run: true first if you are unsure about the cost.wallet_balance_cents in the response to monitor spend.capability_slug over natural language task — direct slug is faster and cheaper.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.