ApproveKit

dev.approvekit由 approvekit.dev 发布官方发布者v0.1.0更新于 Oct 24, 2026

Audit apps against App Store, Google Play and Google OAuth review rules; get the required docs.

已验证Streamable HTTP可网页运行开发者工具商业与电商

概览

AI 生成的概览

依据 App Store、Google Play 与 Google OAuth 审核规则审计应用，并可生成和托管所需的合规文档。

可以做什么
  • 根据应用收集的数据、登录方式、权限、第三方 SDK 与 OAuth 范围清单，按商店与 OAuth 审核规则审计，给出严重程度、修复建议和官方来源
  • 在用户同意后为文档套餐创建 Stripe 结账链接
  • 查询订单支付状态，付款后以 Markdown 返回生成的文档，以及已托管隐私政策和账号删除页面的公开网址
  • 保存文档最终文本，并在占位符全部确认后让托管页面正式上线
适用场景
适合在用编码智能体开发的应用准备提交 App Store 或 Google Play、或准备 Google OAuth 验证时使用，也适合需要隐私政策、账号删除页面、审核备注或权限范围说明的场景。
运行要求
远程 Streamable HTTP 端点，无需认证或 API 密钥。智能体需能读取应用代码仓库以生成清单。付费文档套餐通过 Stripe 结账链接购买。
安装前请注意
审计免费，但文档需付费：Launch Pass 每应用 49 美元，Google OAuth Verification Pack 每应用 249 美元。服务器会创建结账链接由用户付款，应在用户同意后再调用。应用清单会发送给第三方服务，尽管源码据称留在本地。发布操作会让托管页面公开上线。该工具不是法律意见，也不保证通过审核。

安装

在 SourceWeft 中

  1. 打开 控制台中的 ApproveKit，将其添加到工作区。
  2. 为需要使用其工具的对话启用该服务。

Web executable，通过 Streamable HTTP。 远程服务在工作区中配置后即可从网页运行时运行。

交给智能体安装

把这段提示词粘贴到 Claude Code、Codex、Cursor 等智能体，或 SourceWeft 对话中。智能体会读取该服务器的安装指南，先向你展示发布者、端点和登录方式，经你同意后再把它添加到你的客户端。密钥不会写进任何命令。

阅读 https://sourceweft.com/mcp/dev.approvekit%2Fapprovekit/install.md，并按其中说明把这个 MCP 服务器接入我的客户端。修改任何配置之前，先告诉我它的发布者、端点和登录方式，等我确认。不要把 API 密钥写进命令或我会提交的文件；问我密钥应从哪里获取。

查看智能体所依据的安装指南

其他 MCP 客户端

把它添加到你客户端的 mcpServers 配置中。

{
  "mcpServers": {
    "approvekit": {
      "type": "http",
      "url": "https://approvekit.dev/mcp"
    }
  }
}

README

ApproveKit

Get AI-built apps through App Store review, Google Play review and Google OAuth verification.

ApproveKit is a Claude Code plugin plus a remote MCP server. Your coding agent reads the repo, builds an inventory of what the app collects, and runs a free audit against the rules reviewers actually apply. If you want the documents those reviews require, the agent gets them generated and hosted for a one-time fee per app.

Install

bash
claude plugin marketplace add yateshaw/approvekitclaude plugin install approvekit@approvekit

Then, inside any app repo, tell Claude:

get my app ready for the App Store

or "prepare the Google OAuth verification", "why would Google Play reject this app", "I need a privacy policy and an account deletion page".

Any MCP-capable agent can use the server without the plugin:

bash
claude mcp add --transport http approvekit https://approvekit.dev/mcp

What it does

  1. Inventory. The skill tells the agent how to derive platforms, sign-in methods, permissions, data collected, third-party SDKs, Google OAuth scopes and payments from the repo (Expo, React Native, Flutter, native iOS and Android, web). Your source code never leaves your machine; only the inventory is sent.
  2. Free audit. 23 rules across Apple's App Review Guidelines, Google Play policy and Google's OAuth verification. Every finding comes with its severity, the fix, and a link to the official source.
  3. Documents (paid, optional). A privacy policy and an account deletion page hosted at yourapp.approvekit.dev, reviewer notes for App Store Connect and Play Console, and for Google OAuth the per-scope justifications and the demo video shot list. Anything the repo cannot answer is marked [CONFIRM: ...] for you to fill in; pages go live only when the text is final.

The agent never buys on its own: it reports the findings and the price, and creates a checkout link only after you say yes.

Pricing

AuditFree
Launch Pass (privacy policy, account deletion page, reviewer notes)US$49 per app
Google OAuth Verification Pack (Launch Pass + scope justifications + demo video script)US$249 per app

MCP tools

ToolPurpose
audit_appSend the inventory, get findings and offers. Returns an app_token to reuse.
create_checkoutStripe link for a package, after the user agrees.
get_orderPayment status and, once paid, the documents as Markdown.
publish_documentSave the final text and put the hosted pages live.

Endpoint: https://approvekit.dev/mcp (Streamable HTTP, no authentication; the app token identifies the app).

Links

ApproveKit is a product of WyeTech LLC. It is a software tool, not legal advice, and it does not guarantee approval by any platform.

来源：README.md，提交 0e86f7e

工具

4

audit_app

Audit an app for store and Google OAuth review

Use before submitting a mobile or web app to the Apple App Store, Google Play or Google OAuth verification. Pass an inventory of what the app collects, which SDKs it uses and which Google scopes it requests (build it by reading the repo). Returns the problems reviewers are likely to reject, how to fix each one, and which paid package generates the missing documents. Free. The first call returns an app_token: save it in .approvekit.json at the project root and pass it on later calls so the app is updated instead of duplicated.

输入参数app_tokeninventory必填

create_checkout

Create a payment link for a ApproveKit package

Creates a Stripe Checkout link for one app. Only call this after the user agreed to the purchase. Show the link to the user so they can pay; then call get_order with the returned order_id to receive the documents.

输入参数product必填app_token必填

get_order

Get an order's status and its documents

Returns the payment status of an order. Once paid, returns every generated document as Markdown plus the public URLs of the hosted privacy policy and account deletion pages, ready to paste into App Store Connect, Play Console or the Google OAuth consent screen.

输入参数order_id必填app_token必填

publish_document

Publish the final text of a generated document

Saves the final version of a document after every [CONFIRM: ...] placeholder has been resolved with the user. For privacy-policy and account-deletion this makes the hosted page live at its public URL; for the other kinds it just stores the final text. Call it again whenever the text needs an update (for example after the app adds a new data type).

输入参数kind必填markdown必填app_token必填

版本历史

1
  1. v0.1.0最新Sep 30, 2026

评分

已满足适用检查项的 100%

该评分衡量此收录条目的完整程度，依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价，也不表示服务器安全或当前可用：可连通性是带日期的检查结果，评分也不包含安装量或用户评价。

  • 近 30 天内可连通必需25 分
  • 已声明认证方式必需10 分
  • 已列出工具必需15 分
  • 描述必需15 分
  • 图标10 分
  • 文档15 分
  • 许可证10 分