Skip to main content
Glama

Strata

The trust layer for AI agents.

Strata scores every MCP server for security and behavioral risk — so your agents know what they're connecting to before they connect.

Strata MCP server

Strata MCP server

→ usestrata.dev


What it does

Every MCP server gets two trust scores:

  • security_score (0–100) — repo health: stars, license, maintenance, archive status

  • runtime_score (0–100) — behavioral analysis: what tools the server actually exposes

Plus capability flags:

shell_exec dynamic_eval fs_write arbitrary_sql net_egress secret_read process_spawn

And a 3-layer injection scanner.

We scanned 2,179 MCP servers across 22 AI ecosystems. Found shell_exec in 340+ servers, dynamic_eval in 180+, and one server with active prompt injection (now quarantined).


Quick start

Scan your Claude Desktop config

npx @strata-ai/sdk scan

Verify any MCP server

npx @strata-ai/sdk verify github.com/owner/repo

GitHub Action — gate every PR

- uses: PThrower/strata-mcp-check@v1
  with:
    strata_api_key: ${{ secrets.STRATA_API_KEY }}
    fail_on: critical

REST API

curl -H "X-API-Key: your_key" \
  "https://usestrata.dev/api/v1/mcp/verify?url=github.com/owner/repo"

MCP Server (use inside Claude Code, Cursor, etc.)

https://www.usestrata.dev/mcp


Ecosystems

Claude · OpenAI · Gemini · Cursor · Copilot · LangChain · Ollama · Groq · Codex · Windsurf · Perplexity · Together AI · Replicate · Fireworks · Exa · Cody · YouCom · Bolt · V0 · Manus · Higgsfield · Cohere

Tier

Price

Calls

Ecosystems

Free

$0

100/month

5 core

Pro

$29/month

10,000/month

All 22

Founder

$100 one-time

10,000/month forever

All 22, forever



License

MIT

Available Tools

6 tools
find_mcp_serversA

Search for MCP servers by use case or keyword using semantic similarity. Returns matching servers with two trust signals: security_score (0–100, repo maintenance/popularity) and runtime_score (0–100, behavior surface — what the tools actually do). Each result includes capability_flags (e.g. shell_exec, fs_write, dynamic_eval, secret_read), hosted_endpoint if a live MCP URL is known, tool_count, and runtime_freshness (fresh / aging / stale / unknown). Use exclude_capability_flags to filter dangerous capabilities; use require_hosted to only return servers with verified live endpoints. Quarantined and archived servers are always excluded. Strata provides intelligence, not ground truth. Always verify critical decisions against the source_urls returned with each item.

Inputs: query (required), category, limit, min_security_score, +3 more.

get_best_practicesA

Get AI-verified best practices for a given AI ecosystem and category. Returns current, production-ready guidance for developers. Each item includes content_age_hours and data_freshness — check these before acting on time-sensitive information. Strata provides intelligence, not ground truth. Always verify critical decisions against the source_urls returned with each item.

Inputs: ecosystem (required), category.

get_latest_newsA

Get the latest news and updates for an AI ecosystem. Pro tier receives real-time results. Free tier receives items older than 24 hours. Each item includes content_age_hours and data_freshness — check these before acting on time-sensitive information. Strata provides intelligence, not ground truth. Always verify critical decisions against the source_urls returned with each item.

Inputs: ecosystem (required), limit.

get_top_integrationsB

Get ranked integrations and MCP servers for an AI ecosystem. Optionally filter by use case. Strata provides intelligence, not ground truth. Always verify critical decisions against the source_urls returned with each item.

Inputs: ecosystem (required), use_case.

list_ecosystemsA

List all AI ecosystems available on your current tier. Call this first to discover valid ecosystem slugs before calling get_best_practices, get_latest_news, or get_top_integrations.

Inputs: no named parameters.

search_ecosystemA

Search across all verified AI ecosystem content. Returns results ranked by relevance. Leave ecosystem blank to search across all ecosystems. Strata provides intelligence, not ground truth. Always verify critical decisions against the source_urls returned with each item.

Inputs: query (required), ecosystem.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

    TDQS

    A4/5.0

    Scored across 6 tools

    Disambiguation4/5

    Tools are mostly distinct, but find_mcp_servers and get_top_integrations both return MCP servers with slight differences. Descriptions help disambiguate, so minor overlap exists.

    Naming Consistency5/5

    All tools use a consistent snake_case verb_noun pattern (e.g., find_mcp_servers, list_ecosystems). No mixing of conventions.

    Tool Count5/5

    6 tools is well-scoped for an ecosystem intelligence server—covers searching, best practices, news, integrations, and ecosystem listing without bloat.

    Completeness5/5

    The tool surface covers all key operations for discovering and querying MCP ecosystem information, with no obvious gaps. The domain is fully addressed.

    Related MCP Connectors