LexLint: compliance lint for AI, scraping, and privacy law

Install

Works with Claude Code, VS Code, Cursor, Windsurf. Read the repository before you give any tool access to your data.

npx agentmarket install connector/lexlint-io-lexlint

About

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.

Tools

5 read · 3 write · 0 delete

Secrets

1 (API keys, tokens or passwords)

Install scripts

Nothing to install (hosted)

Runs as

Hosted (remote endpoint)

Tools (8)

As the server listed them on Oct 25, 2026. Descriptions are the server’s own words; hidden characters are shown as [U+…].

• check_accessKey, allowance and law library preflightread-only

  Preflight. Reports whether an UnGovr Open Data key reached LexLint, whether it is valid, how much of today's free allowance is left and when it resets, how current the law library is, and whether the LexLint plugin you are running is the latest published one. Call this first: a missing key otherwise surfaces several steps later as a rejected tool call. Costs one upstream request, always: the optional jurisdictions preview below rides this same request rather than spending a second one. It also returns tested_model_families, the model families LexLint's procedure is exercised against, and model…

• claim_trial_keyTake a 30-day trial key, no account

  Mints a 30-day UnGovr Open Data trial key with no account, no sign-in and no email, good for 50 requests and 10 distinct jurisdictions over its whole life, and returns it in this result. Run it ONLY after the developer chose the no-account route over signing in at https://ungovr.org/cli-login?client=lexlint; check_access reports both routes in setup.steps and the developer picks. Not idempotent: every call that succeeds mints another key and spends one of the five this address may take per day. Refuses when the session already holds a key or a sign-in. The key arrives in this session's transcr…

• get_lawLaw for one jurisdictionread-only

  One jurisdiction's law from the LexLint law library, across all nine topics LexLint covers: AI law, scraping/crawling and access legality, personal-data and biometric privacy, product-security and cyber-resilience law, communications law (marketing messages, calls and texts, call recording, cookie consent), content-moderation law (liability for what users post, notice-and-takedown, moderation transparency), product and AI liability law (who answers for harm a product, software or an AI system causes), age-gating and age verification, and reuse law (quotation and snippets, press-publisher right…

• resolve_domain_jurisdictionDomain to governing jurisdictionread-only

  Best-effort mapping from a domain to the jurisdiction whose law governs its OPERATOR, for feeding into the other tools. Never uses server or edge-node location; IP addresses are refused. Costs one to four upstream requests, varying with how many domain-label candidates it tries before a match; a fall-back to top-level-domain inference costs nothing further. Not part of a lint's own five-request total (check_access, set_profile, run_lint): call this only to derive a jurisdiction from a domain rather than declaring one. It is open without an account up to 25 lookups a day, one call being one loo…

• run_lintLint an app against the lawread-only

  Step 2 of the lint, and the one that returns findings. Pass the activities and jurisdictions set_profile validated, and get lint-style findings: which obligations apply, with severity (warn/info), citation, as_of_date, staleness, and confidence. warn: a live obligation binds the profile (obligation), a posture finding needs attention (posture), or LexLint lacks current data for a declared jurisdiction (coverage). info: context rather than a live duty, and kind says which it is: an instrument LexLint cannot say is in force today (pending), a jurisdiction-wide statement of how the local law trea…

• set_profileValidate an app profileread-only

  Step 1 of the lint. Declare what the app does (activities) and where it will operate (jurisdiction slugs); get back the validated, canonical profile plus what the law library holds for each jurisdiction, so the depth of a run is known before it is spent. Write the returned profile into the project's lexlint.yml and pass it to run_lint. Stores nothing server-side. An unknown activity or a malformed slug is refused here rather than silently weakening a lint later. Costs one upstream request for any number of jurisdictions. It answers the same coverage question check_access's own jurisdictions pr…

• submit_feedbackSend feedback to the LexLint team

  Send the developer's feedback on LexLint to the people who build it, recorded against their UnGovr account so we can write back. Run this ONLY on the developer's explicit yes. It may be raised unprompted in exactly one place, the close of a lint run whose upload approval was declined; never volunteer it anywhere else, and never run it in a headless or CI session where nobody can approve anything. Draft the usage summary from what you actually did this session, print the exact payload, and send only what they have explicitly approved, unchanged. Never read the session transcript to build it: a …

• upload_lint_runUpload this run to the LexLint portal

  Store one lint run on the LexLint portal, against the UnGovr account that signed in or owns the key, and return the portal URL and, for a trial key, a share URL that opens the run with no sign-in for 30 days. This is the closing step of every run that produced findings, raised unprompted in exactly one place, the close of that run, and never volunteered anywhere else. Before the call the developer is shown the payload, exactly what will leave the repository, and the approval they give to the call is the yes; a declined approval means nothing was sent. Where the client asks nothing before a cal…

Signals

Last release

Oct 4, 2026 (25 days ago)

Details

Registry name

io.lexlint/lexlint

Version

1.0.3

Auth

API key

License

License unknown

Website

mcp.lexlint.io/

First seen

Oct 24, 2026

Last checked

Oct 24, 2026

Source

Official MCP Registry