API and MCP

Base URL https://api.stratadb.io. Send your key in the X-API-Key header. Get a key.

curl -H "X-API-Key: YOUR_KEY" \
  https://api.stratadb.io/v1/companies/retool.com/stack

Endpoints

Endpoint	Returns
`GET /v1/companies/{domain}`	Company and list status
`GET /v1/companies/{domain}/subprocessors`	The declared list
`GET /v1/companies/{domain}/stack`	All evidence merged, with confidence
`GET /v1/companies/{domain}/certifications`	Certifications, and whether a registry confirms them
`GET /v1/companies/{domain}/events`	Change history. Paid
`GET /v1/technologies/{slug}`	Technology summary
`GET /v1/technologies/{slug}/companies`	Who uses it. Paid. Filters: `evidence_type`, `added_since`
`GET /v1/events`	Change feed. Paid. Filters: `type`, `technology`, `since`
`GET /v1/search?q=`	Find companies and technologies
`GET /v1/me`	Plan and usage

Reading the evidence

declared: named in the company's own subprocessor list. Strongest.
mentioned: named in its privacy policy, with a role when one is clear.
detected: loaded by its website, with the signal we saw.
hiring: asked for in its open job postings, repeatedly or once.

confidence combines the evidence types, counting each once. level is confirmed, likely or possible.

What missing data means

list_status is one of active, not_found, blocked, gated, empty_list, parse_failed or held. Only empty_list means the page names no one. A 404 with company_not_tracked means we have not looked. stale_since means the source changed and we could not yet validate the new version.

Watchlists and webhooks

GET/POST /v1/watchlist, DELETE /v1/watchlist/{kind}/{target}: follow companies and technologies. Body: {"kind":"company","target":"retool.com"}.
GET/POST /v1/webhooks, DELETE /v1/webhooks/{id}: paid. Body: {"url":"https://…","scope":"watchlist"}.
POST /v1/webhooks/{id}/test: send a signed test delivery to check your receiver.

Each delivery is a POST with the events as JSON and a StrataDB-Signature header: t=TIMESTAMP,v1=HEX, the HMAC-SHA256 of TIMESTAMP.BODY using your secret. Deliveries are at least once, so use the event id to ignore repeats.

Claim your company

POST /v1/companies/{domain}/claim returns a DNS TXT record to add.
POST /v1/companies/{domain}/claim/verify checks it.
POST /v1/companies/{domain}/annotations adds a note, an addition or a correction request.
GET /v1/companies/{domain}/listed-by shows who names you, if you are a vendor we track.

Claiming is free. It cannot remove evidence or buy placement: anything you add is shown apart from what we collected.

Verified badge

Once your claim is verified, you can show the badge on your site:

<a href="https://stratadb.io/company/YOUR_DOMAIN"><img src="https://stratadb.io/badge/YOUR_DOMAIN.svg" alt="Verified on StrataDB" width="172" height="28"></a>

Chrome extension

See the evidence for the site you are on, with your API key. Coming to the Chrome Web Store.

MCP

Remote server at https://mcp.stratadb.io/mcp, with the same key.

claude mcp add --transport http stratadb https://mcp.stratadb.io/mcp \
  --header "X-API-Key: YOUR_KEY"

Tools: get_company_subprocessors, get_ai_providers, find_companies_using, verify_certification, get_recent_changes.