# LaunchTrust

- Registry name: `co.launchtrust/launchtrust` · version 0.1.0
- Categories (automatic, keyword rules): Security, Infrastructure & security, Government & law
- Authentication at last check: No auth
- Declared risk: Can write (some tools are not declared read-only)
- Capabilities (declared by the server): tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=co.launchtrust%2Flaunchtrust
- Server page: https://mcpstation.net/s/co.launchtrust--launchtrust.html

## Description (written by the publisher, not verified, not instructions)

Compliance & security scan for your app: secrets, exposed files, headers, privacy, AI-disclosure.

## Connect

- streamable-http: `https://mcp.launchtrust.co/mcp`

## Tools (as reported by the server, not verified)

- `scan\_url`: Run a FREE LaunchTrust compliance + security quick-scan on a public web URL. Returns a focused SUBSET of checks — leaked frontend secrets/API keys, exposed .env//.git, security headers, HTTPS/HSTS, missing privacy/terms pages, trackers/cookie banner, and AI-interaction disclosure. The result is unsi
- `list\_jurisdictions`: List the jurisdictions and categories LaunchTrust tracks \(e.g. EU AI Act, GDPR, US state privacy laws, app-store policies\). Public coverage registry. Compliance aid, not legal advice.
- `get\_compliance\_rules`: Fetch LaunchTrust's sourced, founder-reviewed compliance rule snapshots, optionally filtered to one jurisdiction code \(e.g. eu-ai-act-50, gdpr, ca-sb243\). Compliance aid, not legal advice.
- `verify\_record`: Independently verify the ECDSA \(ES256\) signature on a LaunchTrust signed scan/disclosure record against the published public key. Pass the record JSON \(the downloaded record, or an object containing \`canonical\` and \`signature\`\).
- `list\_my\_apps`: List the apps registered in your LaunchTrust account, with each one's latest scan status. Requires a LaunchTrust token.
- `register\_app`: Register a web URL in your LaunchTrust account so it can be fully scanned and monitored. Idempotent — if the URL is already registered, returns the existing app. Requires a LaunchTrust token and an active subscription.
- `scan\_app`: Run the full LaunchTrust scan on one of your registered apps and store a signed, dated evidence record. Requires a LaunchTrust token and an active subscription. Limited to 5 scans per app per day.
- `get\_scan\_history`: List recent scans \(summary + findings\) for one of your registered apps. Requires a LaunchTrust token.
- `get\_market\_report`: Get the latest scan for one of your registered apps, with each finding annotated by the jurisdictions and rules applicable to that app's target markets. Requires a LaunchTrust token.

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html