ApproveKit

dev.approvekitPublished by approvekit.devOfficial publisherv0.1.0Updated Oct 24, 2026

Audit apps against App Store, Google Play and Google OAuth review rules; get the required docs.

VerifiedStreamable HTTPWeb executableDeveloper ToolsBusiness & Commerce

Overview

AI-generated overview

Audits AI-built mobile and web apps against App Store, Google Play and Google OAuth review rules, and can generate and host the required compliance documents.

What you can do
  • Audit an app against store and OAuth review rules from an inventory of platforms, sign-in methods, permissions, SDKs and scopes, with severity, fixes and official sources
  • Create a Stripe checkout link for a document package after the user agrees
  • Check an order's payment status and retrieve the generated documents as Markdown plus public URLs of hosted privacy policy and account deletion pages
  • Publish the final text of a document, putting hosted pages live once placeholders are resolved
When to use it
Useful when preparing an app built with a coding agent for App Store or Google Play submission, or for Google OAuth verification, and when you need a privacy policy, account deletion page, reviewer notes or scope justifications.
Requirements
A remote Streamable HTTP endpoint; no authentication or API keys. The agent must be able to read the app repository to build the inventory. Paid document packages are bought through a Stripe checkout link.
Before you install
The audit is free, but documents cost money: US$49 per app for the Launch Pass and US$249 per app for the Google OAuth Verification Pack. The server creates a checkout link and the user pays; it should only be called after the user agrees. The app inventory is sent to a third-party service, though source code is said to stay local. Publishing makes hosted pages live publicly. It is a software tool, not legal advice, and does not guarantee approval.

Installation

In SourceWeft

  1. Open ApproveKit in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/dev.approvekit%2Fapprovekit/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "approvekit": {
      "type": "http",
      "url": "https://approvekit.dev/mcp"
    }
  }
}

README

ApproveKit

Get AI-built apps through App Store review, Google Play review and Google OAuth verification.

ApproveKit is a Claude Code plugin plus a remote MCP server. Your coding agent reads the repo, builds an inventory of what the app collects, and runs a free audit against the rules reviewers actually apply. If you want the documents those reviews require, the agent gets them generated and hosted for a one-time fee per app.

Install

bash
claude plugin marketplace add yateshaw/approvekitclaude plugin install approvekit@approvekit

Then, inside any app repo, tell Claude:

get my app ready for the App Store

or "prepare the Google OAuth verification", "why would Google Play reject this app", "I need a privacy policy and an account deletion page".

Any MCP-capable agent can use the server without the plugin:

bash
claude mcp add --transport http approvekit https://approvekit.dev/mcp

What it does

  1. Inventory. The skill tells the agent how to derive platforms, sign-in methods, permissions, data collected, third-party SDKs, Google OAuth scopes and payments from the repo (Expo, React Native, Flutter, native iOS and Android, web). Your source code never leaves your machine; only the inventory is sent.
  2. Free audit. 23 rules across Apple's App Review Guidelines, Google Play policy and Google's OAuth verification. Every finding comes with its severity, the fix, and a link to the official source.
  3. Documents (paid, optional). A privacy policy and an account deletion page hosted at yourapp.approvekit.dev, reviewer notes for App Store Connect and Play Console, and for Google OAuth the per-scope justifications and the demo video shot list. Anything the repo cannot answer is marked [CONFIRM: ...] for you to fill in; pages go live only when the text is final.

The agent never buys on its own: it reports the findings and the price, and creates a checkout link only after you say yes.

Pricing

AuditFree
Launch Pass (privacy policy, account deletion page, reviewer notes)US$49 per app
Google OAuth Verification Pack (Launch Pass + scope justifications + demo video script)US$249 per app

MCP tools

ToolPurpose
audit_appSend the inventory, get findings and offers. Returns an app_token to reuse.
create_checkoutStripe link for a package, after the user agrees.
get_orderPayment status and, once paid, the documents as Markdown.
publish_documentSave the final text and put the hosted pages live.

Endpoint: https://approvekit.dev/mcp (Streamable HTTP, no authentication; the app token identifies the app).

Links

ApproveKit is a product of WyeTech LLC. It is a software tool, not legal advice, and it does not guarantee approval by any platform.

Source: README.md at commit 0e86f7e

Tools

4

audit_app

Audit an app for store and Google OAuth review

Use before submitting a mobile or web app to the Apple App Store, Google Play or Google OAuth verification. Pass an inventory of what the app collects, which SDKs it uses and which Google scopes it requests (build it by reading the repo). Returns the problems reviewers are likely to reject, how to fix each one, and which paid package generates the missing documents. Free. The first call returns an app_token: save it in .approvekit.json at the project root and pass it on later calls so the app is updated instead of duplicated.

Parametersapp_tokeninventoryrequired

create_checkout

Create a payment link for a ApproveKit package

Creates a Stripe Checkout link for one app. Only call this after the user agreed to the purchase. Show the link to the user so they can pay; then call get_order with the returned order_id to receive the documents.

Parametersproductrequiredapp_tokenrequired

get_order

Get an order's status and its documents

Returns the payment status of an order. Once paid, returns every generated document as Markdown plus the public URLs of the hosted privacy policy and account deletion pages, ready to paste into App Store Connect, Play Console or the Google OAuth consent screen.

Parametersorder_idrequiredapp_tokenrequired

publish_document

Publish the final text of a generated document

Saves the final version of a document after every [CONFIRM: ...] placeholder has been resolved with the user. For privacy-policy and account-deletion this makes the hosted page live at its public URL; for the other kinds it just stores the final text. Call it again whenever the text needs an update (for example after the app adds a new data type).

Parameterskindrequiredmarkdownrequiredapp_tokenrequired

Version history

1
  1. v0.1.0LatestSep 30, 2026

Score

100% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts