Skip to main content
Glama
Strait MCP server

Strait MCP server

Official
by strait-link

@straitlink/mcp (preview)

claude mcp add strait --env STRAIT_SECRET_KEY=st_live_your_key -- npx -y @straitlink/mcp

Use Strait from AI tools such as Claude Code, Cursor and Claude Desktop: create, find, pause and resume deep links, get their QR codes, read and compare analytics, see recent taps and conversion events, manage custom link domains, look after webhooks (list, deliveries, test, redeliver), check App Links / Universal Links files or any vendor's link, see where taps on a link go and search the Strait docs.

It is a local stdio server with 34 tools. Eleven of them write (create_link, batch_create_links, update_link, pause_link, resume_link, deactivate_link, record_event, add_domain, remove_domain, test_webhook, redeliver_webhook_delivery); the other twenty-three only read. check_app_links, check_link, search_docs and demo trace_tap work without a key; every other tool needs your secret key. Other deep-link vendors also ship MCP servers that can create links, so this README makes no "first" or "only" claim; it describes what this server does today.

iPhone links: live · install matching: opt-in. iPhone links (Universal Links) are live. iPhone install matching (deferred deep linking on iOS) is opt-in: off until your workspace chooses a method in Dashboard → Settings → iPhone installs (device matching, paste handoff, both or neither), which the SDK reads at runtime. Device matching is off for new workspaces, and iPhone matches are labelled Estimated until measured. Android uses the Play Install Referrer.

Hosted server. The same tools are served at https://strait.link/mcp (Streamable HTTP, since 24 Oct 2026): claude mcp add --transport http strait https://strait.link/mcp --header "Authorization: Bearer st_live_your_key". It takes a secret key in the Authorization header (60 requests burst, then 1 a second, per key); OAuth sign-in is not there yet. The engine serves it with this package's createStraitServer() (library entry, 0.3.0).

Tools

A read-only secret key (Dashboard → Settings → Keys, access "Read only") is offered only the tools that read (0.5.1; the hosted server already did this). Full and links-only keys see every tool; the API still refuses anything outside the key's access.

Tool

What it does

Key needed

create_link

Create one link and get its shortUrl

secret

batch_create_links

Create up to 500 links in one call (safe to re-run: existing slugs are per-item 409s)

secret

get_link

Read one link by slug

secret

list_links

List links, one page at a time. status: "paused" lists turned-off links (0.2.1)

secret

update_link

Change destination, title, tags or expiry, or isActive on its own (false pauses, true turns a paused link back on; 0.2.1). Asks for confirm: true: without it you get a preview and nothing changes

secret

get_analytics

Taps, app opens, installs, conversions and revenue, by day / channel / link / platform / campaign / country / UTM tag (GET /v1/analytics). iPhone installs come from opt-in install matching (labelled Estimated)

secret

check_app_links

Check a domain's assetlinks.json and apple-app-site-association, with a fix for each problem

none

simulate_tap

Dry-run one tap from one device or app (nothing recorded or billed)

secret

trace_tap

Walk a link through WhatsApp, Instagram, Facebook, Chrome, Safari, iPad, computer and preview bots; or read a Live Tap Trace from the website demo

secret (link) / none (demo token)

get_workspace

Who the key is: workspace, link domain, custom domains, plan, the key's access (full / links / read) and the saved QR styles (qrStyles, 0.6.0) (GET /v1/workspace; 0.5.0, needs engine with that route)

secret

get_usage

This month's taps and new links against the plan, level (ok / warn / over) and new_links_paused (GET /v1/usage)

secret

get_app_setup

The app setup Strait has: Android package, signing fingerprints and scheme; iPhone Team ID, bundle ID and App ID; each link domain's assetlinks.json / apple-app-site-association and whether it's served; the SDK version last sent per platform (GET /v1/app; 0.9.0)

secret (read or full)

verify_app_setup

Every setup check as pass / warn / fail / unknown / skip with a fix (app details, both files on each link domain fetched live, SDK connected and current, link opens, webhooks); ok only when nothing failed or is unknown. The agent fixes and runs it again; 6 a minute (GET /v1/app/verify; 0.9.0)

secret (read or full)

get_referrals

Referral report: taps and referred installs per code (GET /v1/referrals, a preview: says "not switched on yet" until it is)

secret

list_webhook_deliveries

A webhook's deliveries (status, attempts, last HTTP status, next retry; no payloads). Without webhookId: the workspace's webhooks (id, receiver site, events)

secret

test_webhook

Send one ping to a webhook now and see the receiver's status and time (not stored, not retried)

secret

redeliver_webhook_delivery

Send a failed delivery again (same X-Strait-Delivery id). Asks for confirm: true

secret

deactivate_link

Turn a link off: taps then get the "link not found" page. Asks for confirm: true; turn it back on with update_link isActive: true

secret

pause_link

Pause a link (taps get the "link not found" page until it is resumed). Asks for confirm: true (0.3.0)

secret

resume_link

Turn a paused link back on. Asks for confirm: true (0.3.0)

secret

search_links

Find links by text in slug, title, destination, campaign or tags, or by exact tag or campaign; active, inactive or all (0.3.0)

secret (owner/admin)

get_link_qr

A link's QR code as a PNG image or SVG, in the workspace's QR style or a saved style (preset, 0.6.0) (0.3.0)

secret

get_campaign_qr_zip

Every live link of a campaign as QR codes in one ZIP (SVG, or PNG up to 1024 px), handed back as an embedded file; 3 a minute per workspace (GET /v1/qr.zip; 0.6.0)

secret

compare_analytics

Two periods side by side (default: the one just before), totals and per channel / platform / link, with % change (0.3.0)

secret

get_top_links

Top links by taps, app opens, installs or conversions, with each one's share (0.3.0)

secret

list_taps

Recent taps, newest first, with where each was sent and the open/install it led to (default: last hour) (0.3.0)

secret (owner/admin)

list_events

Recent conversion and revenue events, newest first (default: last 7 days) (0.3.0)

secret (owner/admin)

record_event

Record a server-side conversion (POST /v1/event). Asks for confirm: true (0.3.0)

secret

list_domains

Custom link domains with status and the DNS records to add (0.3.0)

secret

add_domain

Add a custom link domain and get its DNS records (Scale and Enterprise). Asks for confirm: true (0.3.0)

secret

remove_domain

Remove a custom link domain. Asks for confirm: true (0.3.0)

secret

list_webhooks

The workspace's webhooks: id, receiver site (host only), events, on/off (0.3.0)

secret

check_link

Check any vendor's deep link (Firebase page.link, Branch, Strait): where it goes and what to fix (0.3.0)

none

search_docs

Search the live Strait docs (refreshed hourly; bundled copy offline)

none

Every tool carries MCP annotations (readOnlyHint, destructiveHint, …) and the descriptions of the 0.2 and 0.3 tools start with "Read-only." or "Write.". update_link, pause_link, deactivate_link and remove_domain are destructive. Every write except create_link, batch_create_links and test_webhook shows a preview first and acts only with confirm: true. create_link and batch_create_links write new links but never change existing ones. There is no delete tool: a deactivated link keeps its history.

Related MCP server: ULink MCP Server

Prompts

Clients that show MCP prompts (Claude Code: type /) offer six starters. All but get_started and migrate_firebase_links only read, and those two create links only after you answer yes:

Prompt

What it does

get_started (platform, optional: react-native, expo, flutter, android, ios, unity, capacitor, web)

Zero to a working link: checks the key with get_workspace, creates your first link with create_link after you answer yes, finds your platform (or uses the one you give), pastes the exact install and setup code from that SDK's docs page, runs check_app_links, and walks you through a test mode check (checkDeferred() in a debug build, then list_taps)

weekly_review

This week against last week (totals and channels), the top links by installs, and anything down more than 30 %

debug_link (slug)

Why a link opens the browser: the setup checks (verify_app_setup) first, then the App Links / Universal Links files, a trace per channel and its recent taps, with the fix

setup_check

Every setup check with its fix (verify_app_setup), usage, custom domains still waiting for DNS, webhooks with failed deliveries, and the App Links files

migrate_firebase_links (old_domain, optional)

Maps your Firebase Dynamic Links (long links, export rows or short links checked with check_link) to Strait fields, shows the plan, and runs batch_create_links only after you answer yes. Re-running is safe: existing slugs come back as a per-item 409

why_not_open (slug; platform android / iphone and app browser / whatsapp / instagram / facebook, optional)

Why a link opened the store, browser or nothing: the setup checks (verify_app_setup) first, the link, the App Links / Universal Links files, the tap on that phone and app, its recent taps, and a pasted SDK doctor() report read by finding id (key.secret, host.file_missing, app.missing, cert.missing…)

Keys

The server needs a secret key (st_live_…) from Dashboard → Settings → Keys. A secret key can change your links, so:

  • Create a separate key for your AI tools, so you can revoke it on its own.

  • Keep it in the MCP client's config or environment, never in app or website code.

  • A publishable key (st_pub_live_…) does not work here: it is for the SDKs in your apps.

  • The server sends the key only as an Authorization: Bearer header to STRAIT_API_URL, never logs it, and replaces anything shaped like a secret key in tool output or errors with st_…[redacted].

Without a key, check_app_links, search_docs and demo trace_tap still work.

Variable

Meaning

STRAIT_SECRET_KEY

Your secret key (st_live_…)

STRAIT_API_URL

Engine URL. Default https://strait.link. Use http://localhost:3000 for a local engine

STRAIT_DOCS_OFFLINE

1: search_docs uses only the docs bundled with this version. By default it reads the live docs (straitlink.in/llms-full.txt and llms-recipes.txt, a plain download that never includes your query) once an hour and uses the bundled copy when the site can't be reached

Install

Claude Code plugin (hosted server + skills)

/plugin install strait --marketplace strait-link/strait-mcp

(On older Claude Code: /plugin marketplace add strait-link/strait-mcp, then /plugin install strait@strait-link.) It asks for a secret key when you enable it and keeps it in your system's credential store. It connects to the hosted server https://strait.link/mcp and adds four skills: strait-setup (sets Strait up in an app), strait-troubleshoot, strait-events (tracks an in-app event) and strait-migration (from Firebase Dynamic Links or Branch). Privacy: https://straitlink.in/legal/privacy/

Claude Code

claude mcp add strait --env STRAIT_SECRET_KEY=st_live_your_key -- npx -y @straitlink/mcp

Cursor

~/.cursor/mcp.json (all projects) or .cursor/mcp.json (one project; don't commit a key):

{
  "mcpServers": {
    "strait": {
      "command": "npx",
      "args": ["-y", "@straitlink/mcp"],
      "env": { "STRAIT_SECRET_KEY": "st_live_your_key" }
    }
  }
}

Claude Desktop

Settings → Developer → Edit config, then add the same "strait" entry under mcpServers and restart.

From a checkout

cd mcp-server && npm ci && npm run build
claude mcp add strait --env STRAIT_SECRET_KEY=st_live_your_key -- node "$PWD/dist/stdio.js"

In Cursor or Claude Desktop use "command": "node", "args": ["/absolute/path/to/mcp-server/dist/stdio.js"].

Try it

  • "Create a Strait link summer to https://shop.hilltop.example/summer with the title Summer sale."

  • "Which channel brought the most installs last month?"

  • "My links open the browser instead of the app. Check hilltop.strait.link and shop.hilltop.example."

  • "What happens when someone taps summer inside Instagram on an iPhone?"

  • "How do I receive links in Expo Router?"

  • "How much of this month's plan have we used?"

  • "My webhook stopped firing. Show me its last deliveries, send it a test, and resend the failed ones."

  • "Turn off the spring-sale link." (you'll see a preview first)

  • "Which referral codes brought the most installs in October?"

  • "How did this week do against last week, by channel?"

  • "Which links point at /summer? Pause the old ones."

  • "Did my test tap on summer just now get recorded, and did it open the app?"

  • "Give me a QR code for summer in dark grey."

  • "Is links.hilltop.example set up yet? Which DNS records are missing?"

  • "Check https://hilltop.page.link/abc before we migrate it."

Hilltop Shoes (hilltop.strait.link, *.hilltop.example) is a made-up shop used in examples.

Contributing

Building, testing and releasing this package: docs/MAINTAINERS.md.

Licence

MIT. See LICENSE.

Claude Code skills

skills/strait-setup/SKILL.md teaches Claude Code how to add Strait to an app (React Native / Expo, Flutter, Android, iOS, Unity, Capacitor, web, and a Node server). Copy the folder into ~/.claude/skills/ or a project's .claude/skills/, or download it from https://straitlink.in/ai/strait-setup/SKILL.md.

Docs and support

Available Tools

31 tools
add_domainAdd a custom domainAInspect

Write. Adds a custom link domain (a subdomain you own, e.g. links.hilltop.example) and returns the DNS records to add at your DNS provider: a CNAME to Strait, a TXT record proving ownership and a TXT record for the HTTPS certificate. Scale and Enterprise only, at most 5 per workspace. Needs confirm: true; without it nothing changes and you get a preview (plan, limit, domains already added).

Inputs: hostname (required), confirm.

compare_analyticsCompare two periodsA
Read-onlyIdempotent
Inspect

Read-only. Compares two periods: taps, app opens, installs, conversions and revenue now against before, with the change and the percent change (null when before was 0). By default "before" is the period of the same length just before. With group (channel, platform or link) it compares each row too, biggest first. Use it for "how did this week do against last week" or "why did installs drop". Days are UTC; each period at most 92 days.

Inputs: to, from, link, group, +3 more.

get_analyticsRead analyticsA
Read-onlyIdempotent
Inspect

Taps, app opens, installs, conversions and revenue for the workspace (or one link) over a date range, optionally grouped by day, channel (whatsapp, instagram, gmail, direct…), link or platform. Same definitions as the dashboard; days are UTC; at most 92 days per call (default: the last 30 days).

Inputs: to, from, link, group.

get_referralsRead the referral reportA
Read-onlyIdempotent
Inspect

Read-only. The referral report (a preview): for each referral code in a date range, the taps that carried it and the referred installs, most conversions first. Days are UTC; at most 92 days per call (default: the last 30 days). If referrals are not switched on for the workspace yet, says so instead of failing.

Inputs: to, from.

get_usageRead this month's usageA
Read-onlyIdempotent
Inspect

Read-only. This calendar month's usage (UTC) against the workspace's plan: billed taps used and included, new links created and included (null = no limit), level (ok, warn from 80 % of included taps, over from 100 %) and new_links_paused. Going over never stops a redirect; new_links_paused means create_link answers 402 until an upgrade or the month ends.

Inputs: no named parameters.

get_workspaceRead the workspace and keyA
Read-onlyIdempotent
Inspect

Read-only. Who this secret key is: the workspace name, its link domain (the host every shortUrl uses, e.g. hilltop.strait.link or a verified custom domain), custom domains, the plan, and what the key may do (full, links or read). Call it first when you need the link domain (for check_app_links) or to know whether the key can write.

Inputs: no named parameters.

list_domainsList custom domainsA
Read-onlyIdempotent
Inspect

Read-only. The workspace's custom link domains (e.g. links.hilltop.example) with each one's status (pending_dns until the DNS records are in place, then live; verified once ownership is proven) and the exact DNS records to add. Also says whether custom domains are switched on and allowed on this plan (Scale and Enterprise) and the limit. Use it for "is my domain set up yet".

Inputs: no named parameters.

list_eventsList recent eventsA
Read-onlyIdempotent
Inspect

Read-only. Recent conversion and revenue events (from the SDKs' track calls or record_event), newest first: name, value, currency, platform, the link and tap they are attributed to, and that tap's channel and campaign. Default: the last 7 days. Use it to check that purchases or sign-ups arrive. Reads the events export (an owner's or admin's key).

Inputs: to, from, slug, limit.

list_tapsList recent tapsA
Read-onlyIdempotent
Inspect

Read-only. Recent individual taps, newest first: when, which link, platform, channel, in-app browser, where Strait sent it (sent_to), and the app open and install it led to (opened_at, open_kind, installed_at, match_method). Default: the last hour. Use it to check that a test tap was recorded and what happened to it. Reads the taps export (an owner's or admin's key).

Inputs: to, from, slug, limit.

list_webhook_deliveriesList webhook deliveriesA
Read-onlyIdempotent
Inspect

Read-only. A webhook's delivery history, newest first (kept 30 days): each event sent, its status (pending = waiting for a retry, delivered, failed = gave up after 6 attempts), attempts, last HTTP status or error and the next retry time. A permanent error (e.g. unsafe_target) fails at once. Payloads are never returned. Without webhookId it lists the workspace's webhooks (id, receiver site, events, active) so you can pick one. Use it when a webhook seems to have stopped.

Inputs: limit, cursor, webhookId.

list_webhooksList webhooksA
Read-onlyIdempotent
Inspect

Read-only. The workspace's webhooks: id, receiver site (the host only: receiver URLs often carry a secret), the events each one gets (link.clicked, app.opened, install.matched, app.event, referral.converted) and whether it is on. Never returns signing secrets. Use the id with list_webhook_deliveries or test_webhook. Webhooks are added in Dashboard → Settings → Webhooks.

Inputs: no named parameters.

record_eventRecord a conversion eventAInspect

Write. Records one conversion or revenue event from your server side (trusted: sentWith secret_key), the same as POST /v1/event. It counts in analytics and revenue and is sent to webhooks subscribed to app.event, so it needs confirm: true; without it nothing is recorded and you get a preview. clickId ties it to the tap it came from (apps get it from the SDK). eventId (e.g. your order id) makes retries safe: the same eventId is stored once. Apps should send events with the SDKs, not this tool.

Inputs: event (required), data, value, linkId, +5 more.

redeliver_webhook_deliveryRedeliver a webhook deliveryAInspect

Write. Sends one past webhook delivery again, right away, to the webhook's current URL, with the same X-Strait-Delivery id (receivers that de-duplicate on it are safe); its retry schedule starts over. For failed deliveries. This re-sends a real event into the receiving system, so it needs confirm: true; without it nothing is sent. Refused (409) when already delivered or being sent right now. A paused webhook must be turned back on first (Dashboard → Settings → Webhooks), otherwise the redelivery fails at once.

Inputs: deliveryId (required), confirm.

remove_domainRemove a custom domainA
DestructiveIdempotent
Inspect

Write. Removes a custom link domain: links stop working on it at once (they keep working on the workspace's strait.link address). Afterwards delete its CNAME and TXT records at your DNS provider. Needs confirm: true; without it nothing changes and you get a preview.

Inputs: hostname (required), confirm.

search_docsSearch the docsA
Read-onlyIdempotent
Inspect

Search the Strait documentation (SDK setup for React Native / Expo, Flutter, Android, iOS, Unity, web and Node; App Links and Universal Links; deferred deep linking; analytics; REST API; webhooks; migrating from Firebase Dynamic Links or Branch; troubleshooting). Returns the closest-matching sections as Markdown with their URLs. Works offline.

Inputs: query (required), limit.

simulate_tapSimulate a tapA
Read-onlyIdempotent
Inspect

Dry-run one tap on a link from one kind of device or app and see exactly what Strait would do (redirect, in-app-browser escape page, store, preview card) and why. Nothing is recorded or billed. ua is a preset or a raw User-Agent string.

Inputs: ua (required), url, slug.

test_webhookSend a test webhookAInspect

Write. Sends one test event (event: ping) to a webhook right now, even if it is paused, and returns whether the receiver accepted it, its HTTP status and the time taken (never its response body). The ping is not stored or retried and changes nothing in Strait. Get the id from list_webhook_deliveries without webhookId.

Inputs: webhookId (required).

trace_tapTrace taps on a linkA
Read-onlyIdempotent
Inspect

Explain where taps on a link go. With slug or url: walks the link through the common channels (Android Chrome, WhatsApp, Instagram and Facebook in-app browsers, iPhone Safari and Instagram, iPad, computer, preview bot) and returns one row per channel with the decision, where the tap is sent and the reason. A simulation: nothing is recorded. With token: reads a Live Tap Trace from the straitlink.in demo (the st value of a demo.strait.link/try link), i.e. what happened to a real tap.

Inputs: url, slug, token.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

Loading tool schema changelog…

    TDQS

    A3.9/5.0

    Scored across 31 tools

    Disambiguation3/5

    Most tools target distinct resources, but link state control is muddled: pause_link, deactivate_link, and update_link with isActive all turn a link off, while resume_link and update_link isActive:true both turn it back on. simulate_tap and trace_tap also overlap as diagnostics, though their scopes differ enough to be distinguishable.

    Naming Consistency5/5

    All tools follow a consistent snake_case verb_noun pattern (create_link, list_links, get_analytics, check_app_links, etc.). Singular/plural noun differences reflect the operation and do not break predictability.

    Tool Count3/5

    The 31-tool surface is broad but reflects a multi-feature deep linking platform (links, analytics, webhooks, domains, diagnostics, docs). Still, it is heavy for an agent, and some tools are redundant or could be consolidated.

    Completeness4/5

    Core link CRUD, analytics, diagnostics, domains, and webhook inspection/retry are well covered. Minor gaps remain: webhooks cannot be created or updated via tools (dashboard-only), and there is no permanent link deletion operation.

    Related MCP Connectors

    Related MCP Servers

    • A
      license
      A
      quality
      B
      maintenance
      Enables AI assistants to manage ULink deep linking projects, including creating smart links, configuring domains, and viewing analytics.
      24
      360 npm
      MIT
    • A
      license
      Not graded
      quality
      C
      maintenance
      Enables AI agents to create, update, organize, and delete short links; render styled QR codes; route visitors by device or country; and read click and scan statistics. Agents can also manage groups and custom domains while changing destinations without breaking printed QR codes or shared short URLs.
      MIT