darkstrata.io valid

DarkStrata

DarkStrata is a stolen-credential monitoring and dark-web surveillance platform. It detects compromised credentials in infostealer logs, notifies affected employees privately, and helps organisations remediate. AI agents can drive the full platform over the Model Context Protocol (MCP) or the REST API.

Their llms.txt

The beginning of the file, from our validated copy saved 2026-10-26T05:01:41.470Z. Cached copy · Source on darkstrata.io

# DarkStrata

> DarkStrata is a stolen-credential monitoring and dark-web surveillance platform. It detects compromised credentials in infostealer logs, notifies affected employees privately, and helps organisations remediate. AI agents can drive the full platform over the Model Context Protocol (MCP) or the REST API.

## MCP Server

DarkStrata exposes its capabilities to AI agents through a hosted MCP server over Streamable HTTP. Connect any MCP-compatible client (Claude Desktop, Claude Code, Cursor) to it.

- Endpoint: `https://mcp.darkstrata.io/mcp` (Streamable HTTP transport)
- Auth: `x-api-key: <YOUR_API_KEY>`
- Capabilities: 40+ tools, live resources, and guided investigation prompts across alerts, assets, credential check, data intelligence, groups, incident response, Lens, organisations, STIX/TAXII, and usage.

Client config (Claude Code / Claude Desktop / Cursor):

```json
{
  "mcpServers": {
    "darkstrata": {
      "url": "https://mcp.darkstrata.io/mcp",
      "headers": {
        "x-api-key": "<YOUR_API_KEY>"
      }
    }
  }
}
```

## Endpoints

- REST API base: `https://api.darkstrata.io` - full OpenAPI-documented REST surface.
- MCP server: `https://mcp.darkstrata.io/mcp` - same capabilities for AI agents.
- `GET /v1/credential-check/query?prefix=<first 5-6 hex of SHA256(email:password)>` - check a credential against breach data using k-anonymity (no plaintext leaves the client).
- `GET /v1/alerts` - list security alerts with severity/status filtering.
- `GET /v1/data-intelligence/query` - query credential exposure data across monitored domains.

See the full, authoritative endpoint reference at https://docs.darkstrata.io.

## Authentication

All API and MCP requests authenticate with an API key sent in the `x-api-key` header. Generate one from your account at https://app.darkstrata.io/integrations/api-keys and send it as `x-api-key: <YOUR_API_KEY>`.

## Docs

- [API Reference](https://docs.darkstrata.io) - every REST endpoint with parameters and schemas.
- [SDKs](https://github.com/darkstrata/darkstrata-sdks) - official Credential Check client libraries for Node.js, Python, Rust, Go, C#, Java and PHP.
- [Umbraco Package](https://darkstrata.io/en/docs/umbraco/) - blocks compromised passwords and logins for Umbraco members and backoffice users; one NuGet install.
- [Laravel Integration](https://darkstrata.io/en/docs/laravel/) - blocks compromised logins and passwords in Laravel 11-13; bundled with the PHP SDK, auto-discovered.
- [Splunk Add-on](https://darkstrata.io/en/docs/splunk/) - Technology Add-on that ingests credential-exposure intelligence into Splunk and Enterprise Security.
- [Webhook Signatures](https://darkstrata.io/en/docs/webhooks/) - verify the HMAC-SHA256 X-DarkStrata-Signature on webhook deliveries and dedupe retries by X-DarkStrata-Event-Id.
- [Directory Sync](https://darkstrata.io/en/docs/directory-sync/) - sync monitored staff hourly from Google Workspace or Microsoft Entra ID, or manage group members by CSV an
…

Related sites

Explore similar publishers →

Category suggestions: other listed sites in AI and machine learning. These share a category. See the whole category →

Machine-readable: GET /v1/resolve?q=darkstrata.io · GET /v1/domain/darkstrata.io · this page as Accept: application/json or text/markdown · MCP lookup_domain

Automatically discovered from public files. Inclusion does not imply endorsement or publisher participation.

Claim my listing on Agent Web Map for darkstrata.io:
1. POST https://agentwebmap.com/v1/sites/darkstrata.io/claims and keep claim_id and claim_secret private.
2. Publish the verification line "AgentWebMap verification: <token>" (token from step 1) in https://darkstrata.io/llms.txt, or use the DNS, meta-tag or well-known method the response describes. This only verifies the listing; your website and domain remain yours.
3. POST https://agentwebmap.com/v1/sites/darkstrata.io/verify with {"claim_id": "...", "claim_secret": "..."}.
4. Save the api_key from the answer; it manages the listing (PATCH https://agentwebmap.com/v1/sites/darkstrata.io).
MCP equivalent: tools begin_ownership_claim, then verify_domain, at https://agentwebmap.com/mcp. Docs: https://agentwebmap.com/docs#verify

Corrections or removal requests: contact the directory.