Launchkit MCP
com.onrender.creative-mcp-40dj/launchkit-mcpcreative-mcp-40dj.onrender.comstreamable-httpv1.0.0Scanned
Remote MCP that generates original launch assets over Streamable HTTP. Usage is metered in credits.
12 tools: 1 do something that can't be undone, 7 change things and 4 only read.
- Reads private data · 0
- Reads text others write · 0
- Can send data out · 0
- No findings
Anlyon alternative
8 of these tools change something. Run those as governed actions.
Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.
Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.
Import an OpenAPI spec →Tools
Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.
12 tools
Can't be undone 1Claude Code: ask
claim_paymentCredit this API key after a USDC transfer on Base mainnet.No findings
Why it is in this group
- The name "claim_payment" says "payment": a word that usually means money moves, which cannot be taken back.
Description, as the server wrote it Credit this API key after a USDC transfer on Base mainnet. Pass the transaction hash. Verifies the on-chain Transfer to the configured payment address, required confirmations, and amount, then credits the ledger once (tx hash + log index is unique). A transaction claimed by one customer cannot be claimed by another. Call get_payment_info first for the address and packs. x402 is a future option and is not implemented.
Changes things 7Claude Code: ask
generate_bannerGenerate two wide X banner variants at 1536x512 (3:1 / 1500x500 class).No findings
Why it is in this group
- The name "generate_banner" says "generate": a word for a change.
Description, as the server wrote it Generate two wide X banner variants at 1536x512 (3:1 / 1500x500 class). Returns a job_id immediately; poll get_job for assets.
generate_imageGenerate one still: a logo, wide 3:1 banner (1536x512 / 1500x500 class), or meme.No findings
Why it is in this group
- The name "generate_image" says "generate": a word for a change.
Description, as the server wrote it Generate one still: a logo, wide 3:1 banner (1536x512 / 1500x500 class), or meme. Runs synchronously.
generate_launch_kitOne prompt produces the full kit: logo x4, wide banner x2, alpha stickers x6, teaser, and music.No findings
Why it is in this group
- The name "generate_launch_kit" says "generate": a word for a change.
Description, as the server wrote it One prompt produces the full kit: logo x4, wide banner x2, alpha stickers x6, teaser, and music. Returns a job_id immediately so the client connection does not have to stay open. Poll get_job for status, progress, and asset links. Music is mixed into the teaser when ffmpeg is available and always returned as its own asset. Tiers: budget ($2.49), standard ($4.49), premium ($6.99).
generate_logo_kitGenerate four original logo options (wordmark, emblem, lettermark, mascot).No findings
Why it is in this group
- The name "generate_logo_kit" says "generate": a word for a change.
Description, as the server wrote it Generate four original logo options (wordmark, emblem, lettermark, mascot). Returns a job_id immediately; poll get_job for assets.
generate_music_bedGenerate an instrumental music bed for a launch video or stream.No findings
Why it is in this group
- The name "generate_music_bed" says "generate": a word for a change.
Description, as the server wrote it Generate an instrumental music bed for a launch video or stream. Returns a job_id immediately; poll get_job.
generate_sticker_packGenerate six consistent-character Telegram stickers, 512x512 PNG with a real alpha channel (solid plate + BiRefNet cutout).No findings
Why it is in this group
- The name "generate_sticker_pack" says "generate": a word for a change.
Description, as the server wrote it Generate six consistent-character Telegram stickers, 512x512 PNG with a real alpha channel (solid plate + BiRefNet cutout). Returns a job_id immediately; poll get_job for assets.
Only reads 4Show 4 read-only tools
get_balanceReturn the caller's remaining credits, daily spend, and spend cap.No findings
Why it is in this group
- The name "get_balance" says "get": a word for reading.
Description, as the server wrote it Return the caller's remaining credits, daily spend, and spend cap.
get_jobPoll a background generation job by id.No findings
Why it is in this group
- The name "get_job" says "get": a word for reading.
Description, as the server wrote it Poll a background generation job by id. Returns status, progress, and asset links when done. Scoped to the calling API key.
get_payment_infoReturn the USDC-on-Base receiving address, network, token, credit packs, and step-by-step instructions so an agent can top up its own credits without a human.No findings
Why it is in this group
- The name "get_payment_info" says "get": a word for reading.
Description, as the server wrote it Return the USDC-on-Base receiving address, network, token, credit packs, and step-by-step instructions so an agent can top up its own credits without a human. Send native USDC on Base mainnet, wait for confirmations, then call claim_payment with the tx hash. x402 is a future option and is not implemented.
list_pricingList credit prices for every generation tool and launch-kit tier.No findings
Why it is in this group
- The name "list_pricing" says "list": a word for reading.
Description, as the server wrote it List credit prices for every generation tool and launch-kit tier. 1 credit = $0.01. To buy credits with USDC on Base, use get_payment_info and claim_payment.
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Exfil surface
Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.
No private-data, untrusted-input, outbound path in this server alone: no tool is tagged private-data or untrusted-input or outbound.
- Reads private data0
- Reads files, mail, messages, databases, secrets, calendars or repositories.
- Reads text others write0
- Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
- Can send data out0
- Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.
Findings
Matches of fixed checks, with the text they matched.
No check matched anything in these tool definitions. That is not a safety guarantee.
History
Changes to its tool definitions and to its remote endpoint, newest first.
No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.
Install
Pinned to version 1.0.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http launchkit https://creative-mcp-40dj.onrender.com/mcpclaude mcp add --transport http launchkit https://creative-mcp-40dj.onrender.com/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__launchkit__list_pricing",
"mcp__launchkit__get_balance",
"mcp__launchkit__get_job",
"mcp__launchkit__get_payment_info"
],
"ask": [
"mcp__launchkit__claim_payment",
"mcp__launchkit__generate_image",
"mcp__launchkit__generate_logo_kit",
"mcp__launchkit__generate_banner",
"mcp__launchkit__generate_sticker_pack",
"mcp__launchkit__generate_teaser_video",
"mcp__launchkit__generate_music_bed",
"mcp__launchkit__generate_launch_kit"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as launchkit. Review it before you use it.
Pin
Keep the decision: fail CI when the tools change, follow every change, or show a badge.
Pin in CI
Fail a build when the tools you reviewed are not the tools the server serves today.
curl -s "https://anlyon.dev/api/v1/servers/com.onrender.creative-mcp-40dj/launchkit-mcp/verify?hash=45a1ababb6bea18814a4431e1b88a47f34d9c4f54070cea97cb876c32d5bd4e2" | jq -e '.changed == false'Pinned hash 45a1ababb6be, from Oct 31, 2026, 14:17 UTC.
Watch
Get told when its tools change: a new tool, a new description, a new class.
https://anlyon.dev/servers/com.onrender.creative-mcp-40dj/launchkit-mcp/changes.xmlAn Atom feed. Works in any feed reader or Slack's RSS app.
Badge
[](https://anlyon.dev/servers/com.onrender.creative-mcp-40dj/launchkit-mcp)Source: MCP Registry. Synced Oct 31, 2026, 15:17 UTC.