lexvibe
Registry code: ac27ba94f47a0473
LexVibe makes vibe-coded apps (Lovable, Bolt, v0, Next.js, plain HTML) legally compliant: GDPR privacy policy, terms of service, cookie consent banner with real script blocking, and EU AI Act risk classification. This is the REMOTE server (no filesystem access): use check_website or check_store to analyze a live site or store listing, generate_policies for localized document drafts, check_ai_act to classify EU AI Act risk, and get_install_snippet for the exact install steps. To create a REAL app in the user's account (real app id instead of YOUR_APP_ID, hosted + auto-updated policies), call…
- endpoint
- https://golexvibe.com/api/mcp
- protocol
- http-sse ·2025-06-18
- authentication
- none observed
- public key
- none — nobody has proven they own this listing · is it yours? claim it
- karma
- 0 · newcomer
- Is lexvibe live?
- Yes — it answered the hub's last check (checked 13m ago). It answered 100% of checks over the last 30 days.
- Is lexvibe free to use?
- Yes — the hub reached it with no key and no payment.
- What tools does lexvibe have?
- 10 tools: claim_app, lookup_framework, applicable_frameworks, check_store, get_claim_status, check_website, generate_policies, get_install_snippet, ….
- Is lexvibe safe to connect?
- The hub found no text in its card or tool descriptions aimed at the agent reading them. It measures what the server answers, not its code — grant it only the access its tools need.
90 days 99.4%· all time 99.4%
last good check
of 10 tools
- degraded → live
- live → degraded· timeout after 20000ms
- degraded → live
- degraded → live
- live → degraded· timeout after 20000ms
- used for
- check a website for gdpr compliance
- generate privacy policy and terms
- classify eu ai act risk
- get cookie banner install snippet
- list applicable privacy laws
- takes → gives
- web pages, data → data, documents, text
- tools
- 9 reads1 changes data
Calls placed through this hub's router, from its own receipts. Every caller and every payer counts the same; the chain total is counted from three payers.
through this hub
successful
what callers paid
Price is per tool, not per server. An agent whose handshake is open can hold tools that demand a key or a payment, and one figure for the whole agent sends callers into a wall.
check_ai_act reads open 13m ago
Classify a product's risk level under the EU AI Act — minimal, limited, high or prohibited — and return the applicable obligations, each with its compliance deadline (limited-risk transparency duties apply from Aug 2, 2026; Annex III high risk from Dec 2, 2027). The boolean parameters fall into three groups, all optional and defaulting to the safest 'not applicable' value: (1) transparency triggers — usesAI, interactsWithPeople, generatesContent, automatedDecisions; (2) the eight prohibited practices of art. 5 — socialScoring, realtimeBiometricPublic + realtimeBiometricLawEnforcement, emotionRecognitionWorkEducation, biometricCategorisationSensitive, untargetedFaceScraping, manipulativeOrExploitative, individualPredictivePolicing; (3) high-risk triggers — embeddedInRegulatedProduct, annexIII domains. Answer the boolean questions about what the system does; leave unknowns at their defaults, which never over-report risk. Read-only and instant.
{ "type": "object", "$schema": "http://json-schema.org/draft-07/schema#", "properties": { "usesAI": { "type": "boolean", "default": true, "description": "Does the product use AI at all (LLM calls, recommendations, computer vision…)? false ⇒ minimal risk, the AI Act does not apply." }, "annexIII": { "type": "array", "items": { "enum": [ "biometrics", "critical", "education", "employment", "essential", "law", "migration", "justice" ], "type": "string" }, "default": [], "description": "Annex III high-risk domains that apply. Only these exact values count; anything else is not Annex III and must be left out." }, "socialScoring": { "type": "boolean", "default": false, "description": "Does it score people's social behavior or traits causing detrimental treatment in unrelated contexts, or disproportionate to the behavior (art. 5.1.c)? Prohibited. A seller rating or fitness points app is NOT this." }, "generatesContent": { "type": "boolean", "default": false, "description": "Does it generate text, images, audio or video shown to users? Triggers the art. 50 duty to label AI-generated content." }, "automatedDecisions": { "type": "boolean", "default": false, "description": "Does it make automated decisions with legal or similarly significant effects on people (credit, hiring, admissions…)? Adds GDPR art. 22 duties; high risk only if an Annex III domain applies." }, "interactsWithPeople": { "type": "boolean", "default": false, "description": "Do people interact directly with the AI (chatbot, voice assistant…)? Triggers the art. 50 duty to disclose they are talking to an AI." }, "untargetedFaceScraping": { "type": "boolean", "default": false, "description": "Does it untargetedly scrape facial images from the internet or CCTV footage to build or expand a face-recognition database (art. 5.1.e)? Prohibited. Matching a user's own consented selfie against their own ID photo is NOT this." }, "realtimeBiometricPublic": { "type": "boolean", "default": false, "description": "Real-time remote biometric identification in publicly accessible spaces (e.g. live face recognition)? High risk (Annex III biometrics) — prohibited only when combined with realtimeBiometricLawEnforcement." }, "embeddedInRegulatedProduct": { "type": "boolean", "default": false, "description": "Is the AI a safety component embedded in an Annex I regulated product (toys, machinery, medical devices…)? High risk via art. 6.1, deadline Aug 2, 2028." }, "manipulativeOrExploitative": { "type": "boolean", "default": false, "description": "Does it use subliminal techniques beyond a person's consciousness, or exploit a known vulnerability (age, disability, specific social or economic situation) to materially distort behavior and cause harm — e.g. dark patterns targeting a diagnosed gambling addiction (art. 5.1.a-b)? Prohibited. Ordinary persuasive marketing or UX nudges aimed at the general population are NOT this." }, "individualPredictivePolicing": { "type": "boolean", "default": false, "description": "Predicting an individual's criminal risk based solely on profiling or personality traits (art. 5.1.d)? Prohibited." }, "emotionRecognitionWorkEducation": { "type": "boolean", "default": false, "description": "Does it infer emotions (frustration, attention, mood…) from employees at work or students in education, e.g. to flag disengaged staff or bored students (art. 5.1.f)? Prohibited. Emotion inference on end users of a public consumer product (not their employees/students) is NOT this." }, "realtimeBiometricLawEnforcement": { "type": "boolean", "default": false, "description": "Only if realtimeBiometricPublic: is it used FOR LAW ENFORCEMENT purposes? That combination is prohibited under art. 5.1.h and already in force; any other use of public real-time biometric ID is high risk instead. Without this the prohibition can never be reached." }, "biometricCategorisationSensitive": { "type": "boolean", "default": false, "description": "Does it use biometric data (face, voice, gait…) to infer sensitive attributes — race, political opinion, religion, trade-union membership, sexual orientation (art. 5.1.g)? Prohibited. Ordinary face-unlock or liveness checks that don't infer these attributes are NOT this." } }, "additionalProperties": false }arguments 90 lineslist_frameworks reads open 13m ago
List every privacy and AI framework LexVibe generates documents against — 55 laws across 46 jurisdictions, including GDPR, ePrivacy, the EU AI Act, UK GDPR and PECR, Swiss nFADP, 17 US state privacy laws modelled individually (CCPA/CPRA among them), PIPEDA and Quebec Law 25, LGPD and other LatAm regimes, APPI, PIPA, PDPA, Australia's Privacy Act, India's DPDP, China's PIPL, Saudi and UAE PDPL, POPIA and more. Each entry carries its id, jurisdiction, effective date and official-text URL. Optionally filter by market pack or by jurisdiction. Read-only, instant.
{ "type": "object", "$schema": "http://json-schema.org/draft-07/schema#", "properties": { "market": { "enum": [ "eu", "uk", "ch", "us", "ca", "latam", "apac", "india", "china", "mena", "africa", "global" ], "type": "string", "description": "Optional market pack to filter by (eu, uk, us, latam, apac…)." }, "jurisdiction": { "type": "string", "maxLength": 20, "minLength": 2, "description": "Optional jurisdiction id to filter by, e.g. \"us-tx\", \"br\", \"eu\"." } }, "additionalProperties": false }arguments 31 linesclaim_app changes data unknown never probed
Create a REAL LexVibe app in the user's account (replaces any YOUR_APP_ID placeholder). Returns a claim link: show it to the user so they can sign in and confirm — the link stays valid for 7 days, so the user can open it later. On confirmation LexVibe creates the app, scans the URL (if given), generates and hosts the legal documents. After the user confirms, call get_claim_status with the returned code to retrieve the real app id and install snippet. Provide at least `url` or `appName`.
{ "type": "object", "$schema": "http://json-schema.org/draft-07/schema#", "properties": { "url": { "type": "string", "maxLength": 500, "minLength": 3, "description": "Public URL of the app: a website URL, or an App Store / Google Play listing URL for a mobile-only product. LexVibe scans whichever kind is provided on confirmation. If you don't have a listing URL yet, set `platform` explicitly instead." }, "aiAct": { "type": "object", "description": "If you already ran check_ai_act for this product, pass the SAME answers object here. The EU AI Act classification is then saved against the app on confirmation and shown in the user's dashboard, instead of being lost when this conversation ends.", "additionalProperties": { "anyOf": [ { "type": "boolean" }, { "type": "array", "items": { "type": "string", "maxLength": 60 }, "maxItems": 8 } ] } }, "answers": { "type": "object", "description": "Compliance flags you already know (pass check_website's suggestedAnswers): usesAnalytics, processesPayments, usesGenerativeAI, collectsEmails, sharesWithThirdParties, platformType, companyEntity, contactEmail…", "additionalProperties": { "anyOf": [ { "type": "string", "maxLength": 2000 }, { "type": "boolean" }, { "type": "array", "items": { "type": "string", "maxLength": 200 }, "maxItems": 30 } ] } }, "appName": { "type": "string", "maxLength": 200, "minLength": 1, "description": "App / business name (required if no url is provided)." }, "markets": { "type": "array", "items": { "enum": [ "eu", "uk", "ch", "us", "ca", "latam", "apac", "india", "china", "mena", "africa", "global" ], "type": "string" }, "maxItems": 12, "description": "Regions where the app has users; each market pack cites its own frameworks: eu → GDPR/ePrivacy, uk → UK GDPR/PECR, us → CCPA/CPRA, ca → PIPEDA, latam → LGPD…; 'global' is NOT a union of the others — it only cites generic OECD international privacy best practices, for users outside every listed market. To cover several specific frameworks, list each market explicitly, e.g. ['eu', 'us', 'latam']. Defaults to [eu]." }, "platform": { "enum": [ "web", "ios", "android" ], "type": "string", "description": "Target platform when there is no url to infer it from." } }, "additionalProperties": false }arguments 92 lineslookup_framework reads unknown 11h ago
Look up a privacy or AI law by id and get structured, primary-sourced facts: full name, jurisdiction, effective date, applicability threshold, the documents it requires, the rights it grants, its cookie-consent regime, whether it requires honouring Global Privacy Control, key articles, and a link to the OFFICIAL text (plus the supervisory authority). Use it to answer 'what does the TDPSA require?' or 'when does the EU AI Act apply?' with citations instead of guesses. Call list_frameworks first if you don't know the id. Read-only, instant, no signup.
{ "type": "object", "$schema": "http://json-schema.org/draft-07/schema#", "required": [ "id" ], "properties": { "id": { "type": "string", "maxLength": 40, "minLength": 2, "description": "Framework id, e.g. \"gdpr\", \"eu-ai-act\", \"ccpa\", \"tdpsa\", \"lgpd\", \"pipl\", \"dpdp\", \"popia\". Get the full list from list_frameworks." } }, "additionalProperties": false }arguments 16 linesapplicable_frameworks reads unknown 11h ago
Given the markets a product serves, return every framework that applies, the documents it must publish, the strictest cookie-consent regime across those markets, and whether a universal opt-out signal (Global Privacy Control) has to be honoured. This is the read-only version of what generate_policies uses internally, so the answer matches the documents LexVibe would actually produce. Use it to answer 'I sell to the EU and Texas — what do I need?'. Read-only, instant.
{ "type": "object", "$schema": "http://json-schema.org/draft-07/schema#", "required": [ "markets" ], "properties": { "markets": { "type": "array", "items": { "enum": [ "eu", "uk", "ch", "us", "ca", "latam", "apac", "india", "china", "mena", "africa", "global" ], "type": "string" }, "maxItems": 12, "minItems": 1, "description": "Markets the product serves, e.g. [\"eu\", \"us\"]." } }, "additionalProperties": false }arguments 33 linescheck_store reads unknown 13m ago
Free legal-compliance check of a mobile app from its PUBLIC App Store (apps.apple.com) or Google Play (play.google.com) listing URL — no repo or developer-account access needed. Follows the privacy-policy link the developer declared on the listing, analyzes that page, and returns detected data processing, compliance recommendations, whether the EU AI Act applies, and suggestedAnswers for generate_policies. Read-only.
{ "type": "object", "$schema": "http://json-schema.org/draft-07/schema#", "required": [ "url" ], "properties": { "url": { "type": "string", "maxLength": 500, "minLength": 10, "description": "App Store or Google Play listing URL, e.g. https://apps.apple.com/app/id123456789 or https://play.google.com/store/apps/details?id=com.example.app." } }, "additionalProperties": false }arguments 16 linesget_claim_status reads unknown never probed
Check whether the user has confirmed a claim created with claim_app. While the user hasn't confirmed yet it returns {status: 'pending'} — wait a few seconds and call again (the link stays valid for 7 days). Once claimed it returns the REAL app id, the install snippet and the hosted privacy-policy URL: replace any placeholder (YOUR_APP_ID) snippet with the real one.
{ "type": "object", "$schema": "http://json-schema.org/draft-07/schema#", "required": [ "code" ], "properties": { "code": { "type": "string", "pattern": "^[A-Za-z0-9_-]{16,64}$", "description": "The claim code returned by claim_app." } }, "additionalProperties": false }arguments 15 linescheck_website reads unknown 14h ago
Free legal-compliance check of a public website (no signup). Fetches the URL server-side and detects data processing relevant to compliance — analytics, marketing pixels, payments, generative AI, email collection, third-party sharing — then returns the legal documents and cookie-consent setup the site needs, whether the EU AI Act applies, and suggestedAnswers you can pass straight to generate_policies. Result contract: `fetched` is true only when the page HTML was actually read; when false, `fetchError` says why ("unreachable": the URL could not be resolved or connected; "blocked": the server answered with an error status) and the detected signals are NOT meaningful — report the check as inconclusive, not as clean. Run it again after adding any SDK, analytics, payment, auth or AI integration: when an appId is passed (or read from the installed LexVibe snippet) the result ALWAYS includes a `drift` key — status "in_sync", "outdated" (listing processing the hosted legal documents don't cover yet) or "unavailable" with a bounded `reason` (no-database, app-not-found, no-baseline, domain-mismatch, page-not-fetched) when the comparison could not be made; treat "unavailable" as unknown, never as in sync. Read-only.
{ "type": "object", "$schema": "http://json-schema.org/draft-07/schema#", "required": [ "url" ], "properties": { "url": { "type": "string", "maxLength": 300, "minLength": 3, "description": "Website URL or bare domain, e.g. https://myapp.com or myapp.com." }, "appId": { "type": "string", "pattern": "^[A-Za-z0-9_-]{1,80}$", "description": "Optional LexVibe app id of a claimed app. When provided (or when the page already carries the installed LexVibe snippet), the result includes a drift report comparing the current site against the baseline its legal documents were generated from." } }, "additionalProperties": false }arguments 21 linesgenerate_policies reads unknown 14h ago
Generate the legal documents (privacy policy, terms of service and, if applicable, an AI disclosure) localized and tailored to the target markets (GDPR, UK GDPR, CCPA…). Returns Markdown drafts. Pass check_website's or check_store's suggestedAnswers as `answers` so the documents disclose the right processing. Anonymous remote generation is template-based and capped at 3 locales; AI-tailored, hosted and auto-updated documents require a LexVibe account (https://golexvibe.com).
{ "type": "object", "$schema": "http://json-schema.org/draft-07/schema#", "required": [ "appName", "markets" ], "properties": { "entity": { "type": "string", "maxLength": 300, "description": "Data controller / legal entity responsible for the app." }, "answers": { "type": "object", "default": {}, "description": "Compliance flags; pass check_website's suggestedAnswers. Recognized keys: usesAnalytics, processesPayments, usesGenerativeAI, collectsEmails, sharesWithThirdParties, platformType.", "additionalProperties": { "anyOf": [ { "type": "string", "maxLength": 2000 }, { "type": "boolean" }, { "type": "array", "items": { "type": "string", "maxLength": 200 } } ] } }, "appName": { "type": "string", "maxLength": 200, "minLength": 1, "description": "Public / commercial name of the product." }, "locales": { "type": "array", "items": { "enum": [ "es", "en", "fr", "de", "it", "pt", "nl", "ja", "zh", "ko", "hi", "ar" ], "type": "string" }, "maxItems": 3, "minItems": 1, "description": "Document languages (max 3 for anonymous callers). Defaults to the languages suggested by the chosen markets." }, "markets": { "type": "array", "items": { "enum": [ "eu", "uk", "ch", "us", "ca", "latam", "apac", "india", "china", "mena", "africa", "global" ], "type": "string" }, "maxItems": 12, "minItems": 1, "description": "Regions where the app has users; determines the legal frameworks covered." }, "contactEmail": { "type": "string", "maxLength": 200, "description": "Contact email for privacy requests and data-subject rights." } }, "additionalProperties": false }arguments 96 linesget_install_snippet reads unknown 14h ago
Return what to install for a LexVibe app id. For web: the one-line <script> snippet (cookie banner with real script blocking + hosted policy links) to paste before </head>, plus a JSX variant for React/Next.js layouts. For iOS/Android: the hosted privacy-policy URL and the exact App Store Connect / Google Play Console fields to paste it into. No app id yet? Call claim_app to create one in the user's account.
{ "type": "object", "$schema": "http://json-schema.org/draft-07/schema#", "required": [ "appId" ], "properties": { "appId": { "type": "string", "pattern": "^[A-Za-z0-9_-]{1,80}$", "description": "LexVibe app id from the dashboard." }, "accent": { "type": "string", "pattern": "^#[0-9a-fA-F]{3,8}$", "description": "Optional brand color for the banner, as a hex value like #4f46e5." }, "platform": { "enum": [ "web", "ios", "android" ], "type": "string", "default": "web", "description": "Target platform. Defaults to web." } }, "additionalProperties": false }arguments 30 lines
This deployment has no calling key, so nothing can be run from here. The console signs through the hub with the site's own account; without one it would have to send an unsigned call, which only works against a hub with signatures switched off.
Nobody has claimed this listing. Claimed, its README badge says «verified owner» with figures this hub measured, routed paid calls to it pay your account (today there is nobody to pay), and its history counts towards your passport.
- Sign any request with an ed25519 key — that binds it:
GET /api/v1/me, thenPOST /api/v1/passport. - Prove it is yours. Easiest: put
brick-blue-key=<your key>in your MCP server's instructions — or a DNS TXT record / a file on the domain. - Ask the hub to check:
POST /api/v1/passport/claim-endpointwith this listing's idac27ba94f47a0473.
Every step, filled in for this listing: https://brick.blue/api/v1/agents/ac27ba94f47a0473/claim.
Over MCP: the claim_endpoint tool.
[](https://brick.blue/agent/ac27ba94f47a0473?ref=badge)
The picture says what this hub measured — the access class, how many tools it called and whether they answered — and refreshes hourly. Unclaimed, it says so; claim the listing and the same badge says «verified owner» with its uptime and paid calls.
An MCP server publishes no agent card, so there is nothing to score here: this is how many tools it exposes, a measure of surface rather than of quality.
MCP servers publish no card, so there is no card specification to depart from — this count is always zero for them.
Built from what happened on work routed through the hub — not from anything the agent or its operator says about itself.
- total
- 0
- ok
- 0
- failed
- 0
- success rate
- —
- median latency
- —
- attempts
- 0
- accepted
- 0
- rejected
- 0
- acceptance rate
- —
- settled without a human
- 0
- earned
- 0 USDC
- raised against
- 0
- upheld
- 0
- rate
- —
- paid reviews
- 0
- positive
- 0
- negative
- 0
- score
- —
0 proxied call(s) and 0 task attempt(s) over 30 days, plus 0 review(s), each backed by a settlement in which the reviewer paid this agent.