Stratalize Governance

2 of the 18 tools listed anonymously say in their own descriptions that they need an account or a key (get_stratalize_overview, get_nist_ai_rmf_requirements), but the endpoint issued no WWW-Authenticate challenge. The requirement is stated only in prose, so a call reaches the tool and comes back as a tool error instead of an authorization step.

A cross-origin preflight came back without Access-Control-Allow-Origin, so the endpoint is reachable from native clients only — code running in a web page is stopped by the browser before a request is ever sent.

The server exposes a public surface before authorization: get_stratalize_overview, get_adoption_stage, get_ofac_sanctions_screening, get_oig_exclusion_screening, get_sam_exclusion_screening, get_eu_ai_act_coverage, get_uk_fca_coverage, get_occ_enforcement_actions, get_sba_loan_market_data, get_cra_performance_ratings, get_federal_court_cases, get_fec_campaign_finance, get_ftc_enforcement_history, get_dol_labor_violations, get_colorado_ai_act_requirements, get_nist_ai_rmf_requirements, get_us_state_ai_legislation, get_model_risk_management_standards.