accueil / serveurs / Finance & Paiement / app.launchfiles/launchfiles
app.launchfiles/launchfiles
serveur MCP (Model Context Protocol) · launchfiles-agent 0.2.0
Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur.
Est-ce que app.launchfiles/launchfiles est sûr ?
Au dernier audit MCP Hub, le serveur MCP « app.launchfiles/launchfiles » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.
Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.
Les 10 outils
- launchfiles_billing_create_checkout≈ 229 tokens
Create provider-agnostic agent checkout. Returns payment_url and/or x402 challenge plus poll_url. Poll until paid to receive agent_api_key once. Does not debit credits or publish.
Paramètres, retour & exemple (5)
ParamètresofferId· string · requis
Commercial SKU id (page_draft_long or pack_starter_40). Hunt-shaped ids (hunt, hunt_for_hire, product_hunt, hunt-meter) are founder-only and not for sale.provider· string · optionnel
Optional provider id (stripe|xmoney|x402).customerEmail· string · optionnel
Buyer email (required for card/link; optional for pure x402).preferredRail· string · optionnel · card_checkout | payment_link | x402 | autoidempotencyKey· string · optionnel
Exemple d'appel{"name": "launchfiles_billing_create_checkout", "arguments": {"offerId": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}]} - launchfiles_billing_list_providers≈ 69 tokens
List payment providers available for agent checkout (id, enabled, mode, rails). Discover-only; does not spend or mutate ledger.
Paramètres, retour & exemple (0)
Exemple d'appel{"name": "launchfiles_billing_list_providers", "arguments": {}}Exemple de retour{"content": [{"type": "text", "text": "…"}]} - launchfiles_billing_poll_checkout≈ 106 tokens
Poll an agent checkout until settled. When paid, returns agent_api_key once and, for page_draft_long, an unlock_token. Does not spend.
Paramètres, retour & exemple (3)
Paramètresprovider· string · optionnelpaymentId· string · requispayment_id· string · optionnel
Exemple d'appel{"name": "launchfiles_billing_poll_checkout", "arguments": {"paymentId": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}]} - launchfiles_poll_agent_key≈ 92 tokens
Collect the lf_agent_ key once after the approve link is opened. Pending until then. Second poll redacts the secret.
Paramètres, retour & exemple (2)
ParamètrespollToken· string · optionnelpoll_token· string · requis
Exemple d'appel{"name": "launchfiles_poll_agent_key", "arguments": {"poll_token": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}]} - launchfiles_request_agent_key≈ 210 tokens
Primary agentic mint. Emails a one-time approve link to an allowlisted or approved-waitlist address. Returns poll_token. Does not mint a key until the link is opened. Rejects other addresses. Optional partner_id mints an lf_agent_ key whose scopes carry that partner claim (allowlist only). Omit partner_id for a generic agent key. Developer keys are not minted here. Founder UI is backup.
Paramètres, retour & exemple (2)
Paramètresemail· string · requispartner_id· string · optionnel
Optional partner id. Must be on LAUNCHFILES_PARTNER_ALLOWLIST or the call returns UNKNOWN_PARTNER and sends no email. The minted secret stays lf_agent_ and stores partner_id:<id> in scopes.
Exemple d'appel{"name": "launchfiles_request_agent_key", "arguments": {"email": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}]} - launchfiles_standalone_deployment_trust_radar_free≈ 262 tokens
Public free Deployment Trust Radar packet (free-full demand probe; no paid tier). Requires deployment URL, use-case description, autonomy level, and data sensitivity. Rate-limited.
Paramètres, retour & exemple (7)
Paramètresurl· string · requis
Target https URL.autonomy· string · requis · suggest_only | draft_with_approval | act_with_approval | fully_autonotify_email· string · optionnel
Optional. If you want a link back to this report later, send an email. Not required.use_case_plain· string · requis
Plain-language AI job description (≥ ~20 chars).idempotency_key· string · optionneldata_sensitivity· string · requis · public | internal | pii | regulatedsuccess_looks_like_plain· string · optionnel
Exemple d'appel{"name": "launchfiles_standalone_deployment_trust_radar_free", "arguments": {"url": "texte", "autonomy": "suggest_only", "use_case_plain": "texte", "data_sensitivity": "public"}}Exemple de retour{"content": [{"type": "text", "text": "…"}]} - launchfiles_standalone_design_ux_radar_free≈ 607 tokens
Public free Design UX Radar preview for one URL. Scores come from fixed rules; a small language model writes the next-step text. Paid tier is not open to the public yet. Does not edit or publish the site. Rate-limited. Optional partner leave-behind fields add structured zones on this JSON response only (not public /cro chrome). client_ref is echoed so the caller can file the pair in their own DB; Launchfiles does not list runs by client. hide_lf_chrome is honored only for an authenticated lf_agent_ key; otherwise the response sets hide_lf_chrome false and wl_entitlement needs_auth. logo_url is an https URL shape check only (no fetch); a bad shape returns LOGO_URL_INVALID and no leave-behind.
Paramètres, retour & exemple (12)
Paramètresurl· string · requis
Public https URL to analyze (preview mode only).role· string · optionneldevice· string · optionnel · mobile | desktoplocale· string · optionnellogo_url· string · optionnel
Absolute https URL. Shape is checked; this path does not fetch the image. Invalid shape returns LOGO_URL_INVALID.brand_name· string · optionnel
Partner display name. Empty keeps Launchfiles labels. Do not invent a name.client_ref· string · optionnel
Opaque client tag echoed next to run_id. Distro files this pair in Distro's DB. Launchfiles does not isolate or list clients from this echo.partner_id· string · optionnel
Optional. Must match the partner_id claim on the lf_agent_ key. A mismatch or an anonymous claim returns UNAUTHORIZED_PARTNER or NEEDS_AUTH. Omit to use the key's claim. Partner keys also consume the daily runs quota.notify_email· string · optionnel
Optional. If you want a link back to this report later, send an email. Not required.primary_color· string · optionnel
Optional #RGB or #RRGGBB header accent. Invalid values are ignored.hide_lf_chrome· boolean · optionnel
When true, Launchfiles wordmark and powered-by are removed only if the caller authenticated with lf_agent_ (including a partner-scoped key). Otherwise hide_lf_chrome is false and wl_entitlement is needs_auth.idempotency_key· string · optionnel
Exemple d'appel{"name": "launchfiles_standalone_design_ux_radar_free", "arguments": {"url": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}]} - launchfiles_standalone_page_draft_paid≈ 363 tokens
Paid Page Draft after a settled page_draft_long checkout, or a founder-issued developer key (no Stripe). Same writer door as the web buyer. Pass unlock_token from billing poll, or Authorization: Bearer with the developer key, plus a brief (who, and proof or proof_mode=no_proof). length=short|medium|long. Optional piece_kind: blog_post | landing_page | essay | social_post | seo_page | other. Omitted piece_kind keeps today's inference (short social/X stays cognition). A developer key may request short. Not a credit debit. Nothing is published. Writer failure is named — never an outline template.
Paramètres, retour & exemple (12)
Paramètresurl· string · optionnelwho· string · optionnelproof· string · optionneltopic· string · optionnellength· string · optionnel · short | medium | longnext_step· string · optionnelpaymentId· string · optionnelpayment_id· string · optionnelpiece_kind· string · optionnel · blog_post | landing_page | essay | social_post | seo_page | other
Surface. blog_post/essay/landing_page/seo_page with an owned URL can exit cognition even at length=short. social_post stays cognition. Omit to keep today's short→cognition default.proof_mode· string · optionnelunlockToken· string · optionnelunlock_token· string · optionnel
Exemple d'appel{"name": "launchfiles_standalone_page_draft_paid", "arguments": {"url": "texte", "who": "texte", "proof": "texte", "topic": "texte", "length": "short", "next_step": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}]} - launchfiles_standalone_page_draft_short≈ 294 tokens
Writer-short draft (~400 words). A founder-issued developer key gets full product access — no Stripe Writer checkout. Same writer door as the web buyer. Send the developer key as Authorization: Bearer (hosted MCP also accepts x-api-key or JSON-RPC _meta). Pass a brief (who, and proof or proof_mode=no_proof). Optional piece_kind: blog_post | landing_page | essay | social_post | seo_page | other. Omitted piece_kind keeps today's short→cognition social/X path. Owned blog/essay + piece_kind can return a pasteable dek. Nothing is published. Writer failure is named — never an outline template.
Paramètres, retour & exemple (7)
Paramètresurl· string · optionnelwho· string · optionnelproof· string · optionneltopic· string · optionnelnext_step· string · optionnelpiece_kind· string · optionnel · blog_post | landing_page | essay | social_post | seo_page | other
Surface. blog_post/essay with an owned URL can exit cognition and emit a card dek. Omit for today's cognition short.proof_mode· string · optionnel
Exemple d'appel{"name": "launchfiles_standalone_page_draft_short", "arguments": {"url": "texte", "who": "texte", "proof": "texte", "topic": "texte", "next_step": "texte", "piece_kind": "blog_post"}}Exemple de retour{"content": [{"type": "text", "text": "…"}]} - launchfiles_standalone_search_repair_radar_free≈ 252 tokens
Public free Search Repair Radar teaser. Preview only — never unlocks the $29/mo paid repair packet. Owned product properties that already declare Search Console on their adapter use that bind (no access_token). Other sites need a Google access_token or return needs_auth + human connect URL. Rate-limited.
Paramètres, retour & exemple (5)
Paramètressite_url· string · optionnelaccess_token· string · optionnel
Optional. OAuth access token with webmasters.readonly for sites that are not an owned adapter property. Not required for an already-bound product GSC property.gsc_site_url· string · optionnel
GSC property e.g. sc-domain:example.com or https://example.com/notify_email· string · optionnel
Optional. If you want a link back to this report later, send an email. Not required.idempotency_key· string · optionnel
Exemple d'appel{"name": "launchfiles_standalone_search_repair_radar_free", "arguments": {"site_url": "texte", "access_token": "texte", "gsc_site_url": "texte", "notify_email": "texte", "idempotency_key": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}]}
C'est votre serveur ?
Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».