LaunchTrust

Working · 789 ms

co.launchtrust/launchtrustv0.1.0 Domain verified

Compliance & security scan for your app: secrets, exposed files, headers, privacy, AI-disclosure.

Legal & Government Security

Source Registry entry

Maintain this server? Claim it

Try it

Call this server's tools from your browser. Nothing to install.

https://mcp.launchtrust.co/mcp

Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.

Tool list from our last check. Connect live to refresh it.

get_compliance_rules Read-only

Fetch LaunchTrust's sourced, founder-reviewed compliance rule snapshots, optionally filtered to one jurisdiction code (e.g. eu-ai-act-50, gdpr, ca-sb243). Compliance aid, not legal advice.

jurisdictionstring

Optional jurisdiction code to filter by, e.g. gdpr or eu-ai-act-50.

Tools (9)

get_compliance_rules

Fetch LaunchTrust's sourced, founder-reviewed compliance rule snapshots, optionally filtered to one jurisdiction code (e.g. eu-ai-act-50, gdpr, ca-sb243). Compliance aid, not legal advice.

read-only

Argument	Type	Description
jurisdiction	string	Optional jurisdiction code to filter by, e.g. gdpr or eu-ai-act-50.

Input schema (JSON)

{
  "type": "object",
  "properties": {
    "jurisdiction": {
      "type": "string",
      "description": "Optional jurisdiction code to filter by, e.g. gdpr or eu-ai-act-50."
    }
  },
  "additionalProperties": false
}

get_market_report

Get the latest scan for one of your registered apps, with each finding annotated by the jurisdictions and rules applicable to that app's target markets. Requires a LaunchTrust token.

read-only

Argument	Type	Description
app_id*	string	The id of a registered app.

Input schema (JSON)

{
  "type": "object",
  "required": [
    "app_id"
  ],
  "properties": {
    "app_id": {
      "type": "string",
      "description": "The id of a registered app."
    }
  },
  "additionalProperties": false
}

get_scan_history

List recent scans (summary + findings) for one of your registered apps. Requires a LaunchTrust token.

read-only

Argument	Type	Description
app_id*	string	The id of a registered app.

Input schema (JSON)

{
  "type": "object",
  "required": [
    "app_id"
  ],
  "properties": {
    "app_id": {
      "type": "string",
      "description": "The id of a registered app."
    }
  },
  "additionalProperties": false
}

list_jurisdictions

List the jurisdictions and categories LaunchTrust tracks (e.g. EU AI Act, GDPR, US state privacy laws, app-store policies). Public coverage registry. Compliance aid, not legal advice.

read-only

No arguments.

Input schema (JSON)

{
  "type": "object",
  "properties": {},
  "additionalProperties": false
}

list_my_apps

List the apps registered in your LaunchTrust account, with each one's latest scan status. Requires a LaunchTrust token.

read-only

No arguments.

Input schema (JSON)

{
  "type": "object",
  "properties": {},
  "additionalProperties": false
}

register_app

Register a web URL in your LaunchTrust account so it can be fully scanned and monitored. Idempotent — if the URL is already registered, returns the existing app. Requires a LaunchTrust token and an active subscription.

Argument	Type	Description
url*	string	Public https URL of the app to register.
name	string	Optional label (defaults to the hostname).

Input schema (JSON)

{
  "type": "object",
  "required": [
    "url"
  ],
  "properties": {
    "url": {
      "type": "string",
      "description": "Public https URL of the app to register."
    },
    "name": {
      "type": "string",
      "description": "Optional label (defaults to the hostname)."
    }
  },
  "additionalProperties": false
}

scan_app

Run the full LaunchTrust scan on one of your registered apps and store a signed, dated evidence record. Requires a LaunchTrust token and an active subscription. Limited to 5 scans per app per day.

Argument	Type	Description
app_id*	string	The id of a registered app (see list_my_apps or register_app).

Input schema (JSON)

{
  "type": "object",
  "required": [
    "app_id"
  ],
  "properties": {
    "app_id": {
      "type": "string",
      "description": "The id of a registered app (see list_my_apps or register_app)."
    }
  },
  "additionalProperties": false
}

scan_url

Run a FREE LaunchTrust compliance + security quick-scan on a public web URL. Returns a focused SUBSET of checks — leaked frontend secrets/API keys, exposed .env//.git, security headers, HTTPS/HSTS, missing privacy/terms pages, trackers/cookie banner, and AI-interaction disclosure. The result is unsigned and not stored. The full 27-detector signed, dated, continuously-monitored scan requires a LaunchTrust account. Compliance aid, not legal advice.

read-only

Argument	Type	Description
url*	string	Public http(s) URL to scan, e.g. https://example.com

Input schema (JSON)

{
  "type": "object",
  "required": [
    "url"
  ],
  "properties": {
    "url": {
      "type": "string",
      "description": "Public http(s) URL to scan, e.g. https://example.com"
    }
  },
  "additionalProperties": false
}

verify_record

Independently verify the ECDSA (ES256) signature on a LaunchTrust signed scan/disclosure record against the published public key. Pass the record JSON (the downloaded record, or an object containing `canonical` and `signature`).

read-only

Argument	Type	Description
record*	object	The LaunchTrust signed record JSON (or an object with `canonical` + `signature`).

Input schema (JSON)

{
  "type": "object",
  "required": [
    "record"
  ],
  "properties": {
    "record": {
      "type": "object",
      "description": "The LaunchTrust signed record JSON (or an object with `canonical` + `signature`).",
      "additionalProperties": true
    }
  },
  "additionalProperties": false
}