mcpbeat Sign in

Lexvibe MCP Server

by marcosnovo Your server? Claim it
answering

Lexvibe is answering right now. Last checked 11 min ago. 68 installs a week from npm. It exposes 10 tools. Last commit 30 Jul 2026.

One-step legal compliance for vibe-coded apps: privacy, terms, cookie banner and EU AI Act check.

Installs per day peak 27 · avg 10 · +22% w/w
a month agotoday
Uptime history 47 days of history · worst day 9%
47 days agonow
76.9%
Uptime 24h
70 of 91 checks
10
Tools
read from the server
350 ms
Response time
average over 24h
68
Installs / week
npm and PyPI

Lexvibe does not always answer

Over the last week it answered 68.9% of our checks. We check every 15 minutes, so you hear about the next outage within the hour — not from your users.

Three servers free · no card

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 11 min ago.

run in your terminal
claude mcp add lexvibe --transport http https://golexvibe.com/api/mcp
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "lexvibe": {
      "url": "https://golexvibe.com/api/mcp"
    }
  }
}
~/.codex/config.toml
[mcp_servers.lexvibe]
url = "https://golexvibe.com/api/mcp"
.cursor/mcp.json
{
  "mcpServers": {
    "lexvibe": {
      "url": "https://golexvibe.com/api/mcp"
    }
  }
}
.vscode/mcp.json
{
  "mcpServers": {
    "lexvibe": {
      "url": "https://golexvibe.com/api/mcp"
    }
  }
}

This one needs environment variables set before it will start: LEXVIBE_APP_ID (Your LexVibe app id (used in the installed snippet and API calls). Optional: if unset, tools ask for the id explicitly and warn about the placeholder.), LEXVIBE_API_URL (Base URL of the LexVibe API. Only needed for self-hosting / development.), LEXVIBE_CDN_URL (Base URL the widget script is served from. Only needed for self-hosting / development (defaults to the LexVibe CDN, or to LEXVIBE_API_URL when that is set).), LEXVIBE_EVENTS_URL (Endpoint that receives anonymous tool-usage events (mcp_tool_call) for the Platform analytics. Defaults to the LexVibe events endpoint (or LEXVIBE_API_URL + /api/events when LEXVIBE_API_URL is set). Only needed for self-hosting.), LEXVIBE_TELEMETRY (Set to 0/false/off to disable anonymous usage telemetry. DO_NOT_TRACK=1 is also honored.). The author declared them in the registry entry; get the values from the project itself.

Available tools 10

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

claim
claim_app
Create a REAL LexVibe app in the user's account (replaces any YOUR_APP_ID placeholder). Returns a claim link: show it to the user so they can sign in and confirm — the link expires in 30 minutes. On confirmation LexVibe creates the app, scans the URL (if given), generates and hosts the legal documents. After the user confirms, call get_claim_status with the returned code to retrieve the real app id and install snippet. Provide at least `url` or `appName`.
get_claim_status
Check whether the user has confirmed a claim created with claim_app. While the user hasn't confirmed yet it returns {status: 'pending'} — wait a few seconds and call again (the link expires in 30 minutes). Once claimed it returns the REAL app id, the install snippet and the hosted privacy-policy URL: replace any placeholder (YOUR_APP_ID) snippet with the real one.
act
check_ai_act
Classify a product's risk level under the EU AI Act — minimal, limited, high or prohibited — and return the applicable obligations, each with its compliance deadline (limited-risk transparency duties apply from Aug 2, 2026; Annex III high risk from Dec 2, 2027). The boolean parameters fall into three groups, all optional and defaulting to the safest 'not applicable' value: (1) transparency triggers — usesAI, interactsWithPeople, generatesContent, automatedDecisions; (2) the eight prohibited practices of art. 5 — socialScoring, realtimeBiometricPublic + realtimeBiometricLawEnforcement, emotionRecognitionWorkEducation, biometricCategorisationSensitive, untargetedFaceScraping, manipulativeOrExploitative, individualPredictivePolicing; (3) high-risk triggers — embeddedInRegulatedProduct, annexIII domains. Answer the boolean questions about what the system does; leave unknowns at their defaults, which never over-report risk. Read-only and instant.
applicable
applicable_frameworks
Given the markets a product serves, return every framework that applies, the documents it must publish, the strictest cookie-consent regime across those markets, and whether a universal opt-out signal (Global Privacy Control) has to be honoured. This is the read-only version of what generate_policies uses internally, so the answer matches the documents LexVibe would actually produce. Use it to answer 'I sell to the EU and Texas — what do I need?'. Read-only, instant.
frameworks
list_frameworks
List every privacy and AI framework LexVibe generates documents against — 60 laws across 60+ jurisdictions, including GDPR, ePrivacy, the EU AI Act, UK GDPR and PECR, Swiss nFADP, CCPA/CPRA and 18 US state privacy laws modelled individually, PIPEDA and Quebec Law 25, LGPD and other LatAm regimes, APPI, PIPA, PDPA, Australia's Privacy Act, India's DPDP, China's PIPL, Saudi and UAE PDPL, POPIA and more. Each entry carries its id, jurisdiction, effective date and official-text URL. Optionally filter by market pack or by jurisdiction. Read-only, instant.
generate
generate_policies
Generate the legal documents (privacy policy, terms of service and, if applicable, an AI disclosure) localized and tailored to the target markets (GDPR, UK GDPR, CCPA…). Returns Markdown drafts. Pass check_website's or check_store's suggestedAnswers as `answers` so the documents disclose the right processing. Anonymous remote generation is template-based and capped at 3 locales; AI-tailored, hosted and auto-updated documents require a LexVibe account (https://golexvibe.com).
install
get_install_snippet
Return what to install for a LexVibe app id. For web: the one-line <script> snippet (cookie banner with real script blocking + hosted policy links) to paste before </head>, plus a JSX variant for React/Next.js layouts. For iOS/Android: the hosted privacy-policy URL and the exact App Store Connect / Google Play Console fields to paste it into. No app id yet? Call claim_app to create one in the user's account.
lookup
lookup_framework
Look up a privacy or AI law by id and get structured, primary-sourced facts: full name, jurisdiction, effective date, applicability threshold, the documents it requires, the rights it grants, its cookie-consent regime, whether it requires honouring Global Privacy Control, key articles, and a link to the OFFICIAL text (plus the supervisory authority). Use it to answer 'what does the TDPSA require?' or 'when does the EU AI Act apply?' with citations instead of guesses. Call list_frameworks first if you don't know the id. Read-only, instant, no signup.
store
check_store
Free legal-compliance check of a mobile app from its PUBLIC App Store (apps.apple.com) or Google Play (play.google.com) listing URL — no repo or developer-account access needed. Follows the privacy-policy link the developer declared on the listing, analyzes that page, and returns detected data processing, compliance recommendations, whether the EU AI Act applies, and suggestedAnswers for generate_policies. Read-only.
website
check_website
Free legal-compliance check of a public website (no signup). Fetches the URL server-side and detects data processing relevant to compliance — analytics, marketing pixels, payments, generative AI, email collection, third-party sharing — then returns the legal documents and cookie-consent setup the site needs, whether the EU AI Act applies, and suggestedAnswers you can pass straight to generate_policies. Result contract: `fetched` is true only when the page HTML was actually read; when false, `fetchError` says why ("unreachable": the URL could not be resolved or connected; "blocked": the server answered with an error status) and the detected signals are NOT meaningful — report the check as inconclusive, not as clean. Run it again after adding any SDK, analytics, payment, auth or AI integration: when an appId is passed (or read from the installed LexVibe snippet) the result ALWAYS includes a `drift` key — status "in_sync", "outdated" (listing processing the hosted legal documents don't cover yet) or "unavailable" with a bounded `reason` (no-database, app-not-found, no-baseline, domain-mismatch, page-not-fetched) when the comparison could not be made; treat "unavailable" as unknown, never as in sync. Read-only.

Endpoints

URLTransportStateLatencyChecked
https://golexvibe.com/api/mcp streamable-http answering 329 ms 11 min ago

Alternatives to Lexvibe

same job, measured the same way
prodlint
by prodlint

Production readiness for vibe-coded apps. 52 checks for security, reliability, and performance.

729 installs/wk local only
Ybe Check
by addycuber

Ybe Check – security and compliance orchestrator for AI-generated repositories.

56 installs/wk local only
LexLint: compliance lint for AI, scraping, and privacy law
by lexlint

Compliance lint for AI, scraping, and privacy law. Cited findings in 200 or more jurisdictions.

7 tools answering
Shipyard
by goshipyard

Ship, discover and review vibe-coded projects on Shipyard, the invite-only feed for AI-built apps.

9 tools answering
systemprompt.io reports
by systemprompt

Paid EU AI Act compliance reports for agents. $1.50 per call via x402 (USDC on Base) or Stripe.

2 tools answering
bouncer
by nugehs

Static compliance-controls checker for UK Online Safety Act & ICO Children's Code. CLI + MCP.

95 installs/wk local only
Planner MCP — provable "done" for AI agents
by monopoly-gold-planner

Goal and task planning MCP for Codex and AI agents, with evidence-backed completion.

43 tools answering
ComplyEdge TrustLint — offline EU AI Act compliance checks
by complyedge

Offline TrustLint checks: EU AI Act Article 5, Article 50, GPAI, plus GDPR and HIPAA.

265 installs/wk local only

Lexvibe — questions

Answers built from our own checks of this server.

What can Lexvibe do?
It exposes 10 tools, read directly from the server on our last check. Among them: applicable_frameworks, check_ai_act, check_store, check_website, claim_app, generate_policies and 4 more. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →
Is Lexvibe working right now?
We send a real MCP handshake every 15 minutes. Over the last 24 hours 70 of 91 checks got a reply (76.9%), average response time 350 ms. The bar chart above shows every period we have measured.
How do I connect Lexvibe?
Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.
Does Lexvibe need an API key?
No. Lexvibe completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 10 of them are readable on this page. This is what we observed, not what the docs claim.
How fast is Lexvibe?
It answers our handshake in 350 ms on average, which is faster than 44% of all working MCP servers we measure. The comparison comes from our own checks across the whole registry, every 15 minutes.
How many people use Lexvibe?
The npm package @lexvibe/mcp was installed 68 times in the last week. Week over week that is +22%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.
Is Lexvibe open source?
Yes — it is published under the MIT licence, written in JavaScript and 0 stars on GitHub. The source link is on this page, so you can read exactly what it does with your data before you connect it.