Can the LaunchBuddy: Builder Tools and Launch Audits MCP server do things that cannot be undone?

No tool is classed as irreversible: none of them sends, pays, publishes or merges, going by their definitions.

Does the LaunchBuddy: Builder Tools and Launch Audits MCP server send data to outside services?

4 tools can carry data out (it sends, posts or publishes, or takes a recipient, channel or URL): verify_launch_audit, audit_my_launch, assess_launch and reassess_launch.

LaunchBuddy: Builder Tools and Launch Audits MCP server

io.github.msanchezgrice/launchbuddymsanchezgricestreamable-httpv0.4.0Scanned 1 hour ago

Find builder resources, plan your next test, and audit public-site launch readiness.

16 tools: 8 change things and 8 only read.

Reads private data · 0
Reads text others write · 2
Can send data out · 4
No findings

With Anlyon

8 tools here change things. Govern them.

Anlyon lists the tools and adopts none.
Each tool you adopt gets approvals and receipts.
Your agent never holds the key.

Govern this server →

A tool your agent calls directly is not routed through Anlyon and is not governed by it. anlyon.dev only lists and labels, and these labels are the same either way.

What the LaunchBuddy: Builder Tools and Launch Audits MCP server can do

The LaunchBuddy: Builder Tools and Launch Audits MCP server is published by the GitHub account msanchezgrice. It has 16 tools. It can create or change data (8 tools: verify_launch_audit, audit_my_launch, assess_launch, reassess_launch and 4 more), but cannot delete data. 8 tools only read.

2 tools bring in text other people can write (get_launch_resource and get_action_intent); 4 tools can send data out of your system (verify_launch_audit, audit_my_launch, assess_launch and 1 more).

None of the fixed checks matched anything in its tool definitions. That is not a safety guarantee.

Last scanned Nov 5, 2026, version 0.4.0.

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

16 tools

Changes things 8Creates or changes something that can be changed back.Claude Code: ask

assess_launchAssess a public launch URL and return the scored launch gaps plus a durable report URL.Can send data outNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
What it can reach
- outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
Description, as the server wrote it
Assess a public launch URL and return the scored launch gaps plus a durable report URL.
audit_my_launchAudit a public URL across selected launch, technical, and agent-readiness checks.Can send data outNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
What it can reach
- outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
Description, as the server wrote it
Audit a public URL across selected launch, technical, and agent-readiness checks. Return separate scores, evidence, fix packs, and matching resources. No account actions, provider generation, or publishing.
claim_assessmentSave an anonymous assessment to the connected account without scanning again or starting a trial.No findings
Why it is in this group
- The description's first verb is "save": a word for a change.
Description, as the server wrote it
Save an anonymous assessment to the connected account without scanning again or starting a trial.
create_growth_planCreate or read the free cached plan of ranked launch work for a connected project.No findings
Why it is in this group
- The name "create_growth_plan" says "create": a word for a change.
Description, as the server wrote it
Create or read the free cached plan of ranked launch work for a connected project.
create_recommended_assetPrepare the highest-priority asset.No findings
Why it is in this group
- The name "create_recommended_asset" says "create": a word for a change.
Description, as the server wrote it
Prepare the highest-priority asset. Never charges or publishes; returns a resumable paid/approval handoff when required.
reassess_launchReassess a connected project after changes and compare its score without creating a second project.Can send data outNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
What it can reach
- outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
Description, as the server wrote it
Reassess a connected project after changes and compare its score without creating a second project.
update_launch_todoUpdate one owned launch task without starting provider work.No findings
Why it is in this group
- The name "update_launch_todo" says "update": a word for a change.
Description, as the server wrote it
Update one owned launch task without starting provider work.
verify_launch_auditRecheck the native findings from a saved audit after changes are live.Can send data outNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
What it can reach
- outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
Description, as the server wrote it
Recheck the native findings from a saved audit after changes are live. Preserve unavailable checks as unobservable. Requires original audit JSON for the same URL.

Only reads 8Looks things up and changes nothing.Show 8 read-only tools

get_accessExplain the current identity, trial, paid entitlement, and available capabilities.No findings
Why it is in this group
- The name "get_access" says "get": a word for reading.
Description, as the server wrote it
Explain the current identity, trial, paid entitlement, and available capabilities.
get_action_intentRead the resumable payment, approval, render, and verification state after a web handoff.Reads text others writeNo findings
Why it is in this group
- The name "get_action_intent" says "get": a word for reading.
What it can reach
- untrusted-inputThe description's first sentence says "read" and "web": it reads web pages, which anyone can write.
Description, as the server wrote it
Read the resumable payment, approval, render, and verification state after a web handoff.
get_assessmentRead a saved public LaunchBuddy assessment by scan id.No findings
Why it is in this group
- The name "get_assessment" says "get": a word for reading.
Description, as the server wrote it
Read a saved public LaunchBuddy assessment by scan id.
get_launch_resourceRead one public launch resource by its stable ID, including canonical URL and channel availability where applicable.Reads text others writeNo findings
Why it is in this group
- The name "get_launch_resource" says "get": a word for reading.
What it can reach
- untrusted-inputThe description's first sentence says "read" and "url": it reads web pages, which anyone can write.
Description, as the server wrote it
Read one public launch resource by its stable ID, including canonical URL and channel availability where applicable.
get_launch_todosRead the connected project checklist and its completion progress.No findings
Why it is in this group
- The name "get_launch_todos" says "get": a word for reading.
Description, as the server wrote it
Read the connected project checklist and its completion progress.
list_projectsList the connected account's LaunchBuddy projects.No findings
Why it is in this group
- The name "list_projects" says "list": a word for reading.
Description, as the server wrote it
List the connected account's LaunchBuddy projects.
preview_recommended_assetPreview the highest-priority asset brief without starting provider spend.No findings
Why it is in this group
- The name "preview_recommended_asset" says "preview": a word for reading.
Description, as the server wrote it
Preview the highest-priority asset brief without starting provider spend.
search_launch_resourcesFind relevant public LaunchBuddy guides, free tools, skills, and relevant launch channels for a specific gap.No findings
Why it is in this group
- The name "search_launch_resources" says "search": a word for reading.
Description, as the server wrote it
Find relevant public LaunchBuddy guides, free tools, skills, and relevant launch channels for a specific gap. Channel presence never proves eligibility, supported submission, or publication.

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged private-data.

Reads private data0: Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write2: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.; get_action_intent
get_launch_resource
Can send data out4: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.; assess_launch
audit_my_launch
reassess_launch
verify_launch_audit

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

No check matched anything in these tool definitions. That is not a safety guarantee.

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 0.4.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http launchbuddy https://launchbuddy.com/api/mcp

claude mcp add --transport http launchbuddy https://launchbuddy.com/api/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__launchbuddy__search_launch_resources",
      "mcp__launchbuddy__get_launch_resource",
      "mcp__launchbuddy__get_assessment",
      "mcp__launchbuddy__list_projects",
      "mcp__launchbuddy__get_launch_todos",
      "mcp__launchbuddy__preview_recommended_asset",
      "mcp__launchbuddy__get_action_intent",
      "mcp__launchbuddy__get_access"
    ],
    "ask": [
      "mcp__launchbuddy__verify_launch_audit",
      "mcp__launchbuddy__audit_my_launch",
      "mcp__launchbuddy__assess_launch",
      "mcp__launchbuddy__reassess_launch",
      "mcp__launchbuddy__claim_assessment",
      "mcp__launchbuddy__create_growth_plan",
      "mcp__launchbuddy__update_launch_todo",
      "mcp__launchbuddy__create_recommended_asset"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as launchbuddy. Review it before you use it.

Capability tags behind 6 rules

mcp__launchbuddy__verify_launch_audit outbound
mcp__launchbuddy__audit_my_launch outbound
mcp__launchbuddy__get_launch_resource untrusted-input
mcp__launchbuddy__assess_launch outbound
mcp__launchbuddy__reassess_launch outbound
mcp__launchbuddy__get_action_intent untrusted-input

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/io.github.msanchezgrice/launchbuddy/verify?hash=f1e6b7c309f29f19f31c04d32315c599aabcaead5f03e886a362d95838c4e8fc" | jq -e '.changed == false'

Pinned hash f1e6b7c309f2, from Nov 5, 2026, 18:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.github.msanchezgrice/launchbuddy/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

[![anlyon.dev](https://anlyon.dev/badge/io.github.msanchezgrice/launchbuddy.svg)](https://anlyon.dev/servers/io.github.msanchezgrice/launchbuddy)

Source: MCP Registry. Synced Nov 5, 2026, 18:17 UTC.