LaunchTrust
Compliance & security scan for your app: secrets, exposed files, headers, privacy, AI-disclosure.
| Endpoint | https://mcp.launchtrust.co/mcp (streamable-http) |
|---|---|
| Registry version | 0.1.0 |
| Now | 9 tools · grade A (98) · pin ts_6059ad41bc3a639acb8bc311e11822ef · protocol 2025-06-18 |
| First / last listed | 2026-10-26 01:13 UTC / 2026-10-26 01:13 UTC |
| Grade over time | 2026-10-26: A (98), 9 tools |
Is this your server? Own a server? ToolFit hosted watch re-checks it every 24 h ($0.25 per 30 days) or 6 h ($0.60) and sends you an HMAC-signed webhook when its tools or grade change: POST https://api.youraitools.co/toolfit/v1/watch. To opt out, see About & opt-out.
Tools: scan_url list_jurisdictions get_compliance_rules verify_record list_my_apps register_app scan_app get_scan_history get_market_report
scan_url | Run a FREE LaunchTrust compliance + security quick-scan on a public web URL. Returns a focused SUBSET of checks — leaked frontend secrets/API keys, exposed .env//.git, security headers, HTTPS/HSTS, missing privacy/terms pages, trackers/cookie banner, and AI-interaction disclosure. The result is unsigned and not stored. The full 27-detector signed, dated, continuously-monitored scan requires a Laun params: url* |
list_jurisdictions | List the jurisdictions and categories LaunchTrust tracks (e.g. EU AI Act, GDPR, US state privacy laws, app-store policies). Public coverage registry. Compliance aid, not legal advice. params: none |
get_compliance_rules | Fetch LaunchTrust's sourced, founder-reviewed compliance rule snapshots, optionally filtered to one jurisdiction code (e.g. eu-ai-act-50, gdpr, ca-sb243). Compliance aid, not legal advice. params: jurisdiction |
verify_record | Independently verify the ECDSA (ES256) signature on a LaunchTrust signed scan/disclosure record against the published public key. Pass the record JSON (the downloaded record, or an object containing `canonical` and `signature`). params: record* |
list_my_apps | List the apps registered in your LaunchTrust account, with each one's latest scan status. Requires a LaunchTrust token. params: none |
register_app | Register a web URL in your LaunchTrust account so it can be fully scanned and monitored. Idempotent — if the URL is already registered, returns the existing app. Requires a LaunchTrust token and an active subscription. params: url*, name |
scan_app | Run the full LaunchTrust scan on one of your registered apps and store a signed, dated evidence record. Requires a LaunchTrust token and an active subscription. Limited to 5 scans per app per day. params: app_id* |
get_scan_history | List recent scans (summary + findings) for one of your registered apps. Requires a LaunchTrust token. params: app_id* |
get_market_report | Get the latest scan for one of your registered apps, with each finding annotated by the jurisdictions and rules applicable to that app's target markets. Requires a LaunchTrust token. params: app_id* |
Entries describe changes in tool definitions. They are not statements about a server, its quality or its author. The grade measures how the tool definitions fit model providers (token cost, schema compatibility, confusable names) as scored by the ToolFit engine at the time of the listing. JSON: append .json. Opt-out: how or hello@youraitools.co.