Skip to content
Agentmart
Submit a tool

LaunchTrust

Compliance & security scan for your app: secrets, exposed files, headers, privacy, AI-disclosure.

Connector by launchtrust.coOfficial · Domain verified by the MCP Registry

IndexedLicense unknownRemote (HTTP)
Write a review

Install

Works with Claude Code, VS Code, Cursor, Windsurf. Read the repository before you give any tool access to your data.

npx agentmarket install connector/launchtrust-co-launchtrust

Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.

Remote endpoint

  • https://mcp.launchtrust.co/mcp Remote (HTTP)

Get the weekly diff

The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.

We use your email only for this newsletter. Privacy

About

Compliance & security scan for your app: secrets, exposed files, headers, privacy, AI-disclosure.

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.

Tools
7 read · 2 write · 0 delete
Secrets
None asked for
Install scripts
Nothing to install (hosted)
Runs as
Hosted (remote endpoint)

Tools by what they do 9

From the running server's own tool list (tools/list) on Oct 25, 2026.

Read 7 · Look things up without changing anything.

  • get_compliance_rules
  • get_market_report
  • get_scan_history
  • list_jurisdictions
  • list_my_apps
  • scan_url
  • verify_record

Write 2 · Create, change, send or run things.

  • register_app
  • scan_app

Network hosts it talks to 1

  • mcp.launchtrust.co · found in remote endpoint, install command

Tools (9)

As the server listed them on Oct 25, 2026. Descriptions are the server’s own words; hidden characters are shown as [U+…].

  • get_compliance_rulesGet sourced compliance rule snapshotsread-only

    Fetch LaunchTrust's sourced, founder-reviewed compliance rule snapshots, optionally filtered to one jurisdiction code (e.g. eu-ai-act-50, gdpr, ca-sb243). Compliance aid, not legal advice.

  • get_market_reportGet a market-annotated compliance reportread-only

    Get the latest scan for one of your registered apps, with each finding annotated by the jurisdictions and rules applicable to that app's target markets. Requires a LaunchTrust token.

  • get_scan_historyGet scan history for an appread-only

    List recent scans (summary + findings) for one of your registered apps. Requires a LaunchTrust token.

  • list_jurisdictionsList compliance jurisdictions coveredread-only

    List the jurisdictions and categories LaunchTrust tracks (e.g. EU AI Act, GDPR, US state privacy laws, app-store policies). Public coverage registry. Compliance aid, not legal advice.

  • list_my_appsList your registered appsread-only

    List the apps registered in your LaunchTrust account, with each one's latest scan status. Requires a LaunchTrust token.

  • register_appRegister an app to monitor

    Register a web URL in your LaunchTrust account so it can be fully scanned and monitored. Idempotent — if the URL is already registered, returns the existing app. Requires a LaunchTrust token and an active subscription.

  • scan_appRun a full signed scan on a registered app

    Run the full LaunchTrust scan on one of your registered apps and store a signed, dated evidence record. Requires a LaunchTrust token and an active subscription. Limited to 5 scans per app per day.

  • scan_urlFree compliance + security quick-scanread-only

    Run a FREE LaunchTrust compliance + security quick-scan on a public web URL. Returns a focused SUBSET of checks — leaked frontend secrets/API keys, exposed .env//.git, security headers, HTTPS/HSTS, missing privacy/terms pages, trackers/cookie banner, and AI-interaction disclosure. The result is unsigned and not stored. The full 27-detector signed, dated, continuously-monitored scan requires a LaunchTrust account. Compliance aid, not legal advice.

  • verify_recordVerify a LaunchTrust signed recordread-only

    Independently verify the ECDSA (ES256) signature on a LaunchTrust signed scan/disclosure record against the published public key. Pass the record JSON (the downloaded record, or an object containing `canonical` and `signature`).

Signals

Last release
Jun 26, 2026 (4 months ago)
Repository
Not found on GitHub (deleted or private)

Details

Registry name
co.launchtrust/launchtrust
Version
0.1.0
Auth
Auth not stated
License
License unknown
First seen
Oct 24, 2026
Last checked
Oct 24, 2026
Cite this page

LaunchTrust MCP server. Agent Mart. https://agentmart.dev/connectors/launchtrust-co-launchtrust (last updated 2026-10-24)