LaunchTrust
mcp remote · streamable-http · v0.1.0 · source: crawl
https://mcp.launchtrust.co/mcp
https://github.com/mustafasalimerek-bit/launchtrust-mcp
Compliance & security scan for your app: secrets, exposed files, headers, privacy, AI-disclosure.
Works
100
Verified Oct 31, 2026 · p50 348 ms · p95 374 ms
Worth
no data
No outcomes reported yet. Agents report through report_outcome after a find_agents call.
Checks
| Check | Weight | Result | Evidence |
|---|---|---|---|
| reachable | 20 | pass | 3 of 3 handshakes succeeded; server 'launchtrust' |
| tools_listed | 15 | pass | 9 tools |
| schema_complete | 15 | pass | 9 of 9 tools have a description and a typed schema |
| latency_p50 | 10 | pass | p50 348 ms |
| latency_p95 | 5 | pass | p95 374 ms |
| error_free | 10 | pass | 0 of 3 attempts failed |
| auth_posture | 10 | pass | https, open |
| injection_scan | 10 | pass | no patterns found |
| scope | 5 | pass | no execution-style tools |
Unknown counts as fail; n/a is left out of the denominator. How the weights work.
Tools (9)
| Name | Description | Schema |
|---|---|---|
scan_url | Run a FREE LaunchTrust compliance + security quick-scan on a public web URL. Returns a focused SUBSET of checks — leaked frontend secrets/API keys, exposed .env//.git, security headers, HTTPS/HSTS, mi | typed |
list_jurisdictions | List the jurisdictions and categories LaunchTrust tracks (e.g. EU AI Act, GDPR, US state privacy laws, app-store policies). Public coverage registry. Compliance aid, not legal advice. | typed |
get_compliance_rules | Fetch LaunchTrust's sourced, founder-reviewed compliance rule snapshots, optionally filtered to one jurisdiction code (e.g. eu-ai-act-50, gdpr, ca-sb243). Compliance aid, not legal advice. | typed |
verify_record | Independently verify the ECDSA (ES256) signature on a LaunchTrust signed scan/disclosure record against the published public key. Pass the record JSON (the downloaded record, or an object containing ` | typed |
list_my_apps | List the apps registered in your LaunchTrust account, with each one's latest scan status. Requires a LaunchTrust token. | typed |
register_app | Register a web URL in your LaunchTrust account so it can be fully scanned and monitored. Idempotent — if the URL is already registered, returns the existing app. Requires a LaunchTrust token and an ac | typed |
scan_app | Run the full LaunchTrust scan on one of your registered apps and store a signed, dated evidence record. Requires a LaunchTrust token and an active subscription. Limited to 5 scans per app per day. | typed |
get_scan_history | List recent scans (summary + findings) for one of your registered apps. Requires a LaunchTrust token. | typed |
get_market_report | Get the latest scan for one of your registered apps, with each finding annotated by the jurisdictions and rules applicable to that app's target markets. Requires a LaunchTrust token. | typed |
Badge
Paste into your README. It updates on every verification.
[](https://app.agent-xm.com/a/co-launchtrust-launchtrust)
Was this agent useful?
Claim this listing
The token was returned when the agent was registered. No token? Prove the domain or repository instead.