io.github.bighippoman/license-compliance

license-compliance-mcp

Scan npm dependencies for license compliance issues. Catch GPL contamination.

25/wk 2 tools GitHub npm

No known CVEs

No license

Maintained

Last commit 84d ago

Works with most clients

Transport: stdio, http

2 tools

Grade F

Edit this pageView history

Developer Tools Legal

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "license-compliance": {
      "args": [
        "-y",
        "license-compliance-mcp"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-bighippoman-license-compliance)](https://mcppedia.org/s/io-github-bighippoman-license-compliance)

Read me

What io.github.bighippoman/license-compliance does

Scan npm dependencies for license compliance issues. Catch GPL contamination.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y 'license-compliance-mcp' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

48/100across 5 weighted dimensions

How we score →

0255075100

−52

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked license-compliance-mcp against OSV.dev.

Inventory

Tools (2)

Click any tool to inspect its schema.

Help improve this page

This server is missing a description.If you've used it, help the community.

Add information

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.bighippoman/license-compliance safe to use?: io.github.bighippoman/license-compliance has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.bighippoman/license-compliance?: io.github.bighippoman/license-compliance supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.bighippoman/license-compliance do?: io.github.bighippoman/license-compliance provides 2 tools: check-licenses, explain-license. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.bighippoman/license-compliance?: io.github.bighippoman/license-compliance is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.
Is io.github.bighippoman/license-compliance actively maintained?: io.github.bighippoman/license-compliance is recently maintained — last commit was 84 days ago.

Similar servers

Others in developer-tools / legal

View all →

XcodeBuildMCP97

A Model Context Protocol (MCP) server and CLI that provides tools for agent use when working on iOS and macOS projects.

5.8k 2

XcodeBuildMCP97

XcodeBuildMCP provides tools for Xcode project management, simulator management, and app utilities.

5.8k 1

Mcp_agent_mail96

Asynchronous coordination layer for AI coding agents: identities, inboxes, searchable threads, and advisory file leases over FastMCP + Git + SQLite

2.0k 6

Figma Console Mcp96

MCP server for accessing Figma plugin console logs and screenshots via Cloudflare Workers or local mode

1.7k 2

MCP Security Weekly

Get CVE alerts and security updates for io.github.bighippoman/license-compliance and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Tools

check-licenses

Scan a project's npm dependencies against a license policy and get a detailed compliance report.

Parameters:

path (required) — Absolute path to the project root

policy (optional, default: "permissive") — Policy preset or custom SPDX expression

"permissive" — Only MIT, ISC, BSD, Apache-2.0, etc.
"weak-copyleft" — Adds LGPL, MPL-2.0, EPL-2.0
"copyleft" — Adds GPL, AGPL
Custom: "(MIT OR Apache-2.0)" — Any valid SPDX expression

explain-license

Get a plain-language explanation of any SPDX license — permissions, conditions, limitations, compatibility, and gotchas.

Parameters:

license (required) — SPDX identifier (e.g., "MIT", "GPL-3.0-only", "Apache-2.0")

Install

Claude Code

claude mcp add license-compliance -- npx -y license-compliance-mcp

Claude Desktop / Cursor

Add to your config (claude_desktop_config.json or .cursor/mcp.json):

{ "mcpServers": { "license-compliance": { "command": "npx", "args": ["-y", "license-compliance-mcp"] } } }

How It Works

Scans node_modules using license-checker-rseidelsohn

Normalizes license strings to valid SPDX using spdx-correct

Evaluates each package against the policy using spdx-satisfies

Traces dependency chains to show how problematic packages entered the project

Generates a markdown report grouped by severity (critical > warning > info)

Frequently Asked Questions

Is io.github.bighippoman/license-compliance safe to use?

io.github.bighippoman/license-compliance has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install io.github.bighippoman/license-compliance?

io.github.bighippoman/license-compliance supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What can io.github.bighippoman/license-compliance do?

io.github.bighippoman/license-compliance provides 2 tools: check-licenses, explain-license. See the full tools list on the server page for descriptions and parameters.

What AI clients work with io.github.bighippoman/license-compliance?

io.github.bighippoman/license-compliance is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.

Is io.github.bighippoman/license-compliance actively maintained?

io.github.bighippoman/license-compliance is recently maintained — last commit was 84 days ago.

license-compliance-mcp

MCP server that scans npm project dependencies for license compliance issues. Catch GPL contamination before code ships.

Tools

`check-licenses`

Scan a project's npm dependencies against a license policy and get a detailed compliance report.

Parameters:

path (required) — Absolute path to the project root
policy (optional, default: "permissive") — Policy preset or custom SPDX expression
- "permissive" — Only MIT, ISC, BSD, Apache-2.0, etc.
- "weak-copyleft" — Adds LGPL, MPL-2.0, EPL-2.0
- "copyleft" — Adds GPL, AGPL
- Custom: "(MIT OR Apache-2.0)" — Any valid SPDX expression

`explain-license`

Get a plain-language explanation of any SPDX license — permissions, conditions, limitations, compatibility, and gotchas.

Parameters:

license (required) — SPDX identifier (e.g., "MIT", "GPL-3.0-only", "Apache-2.0")

Install

Claude Code

claude mcp add license-compliance -- npx -y license-compliance-mcp

Claude Desktop / Cursor

Add to your config (claude_desktop_config.json or .cursor/mcp.json):

{
  "mcpServers": {
    "license-compliance": {
      "command": "npx",
      "args": ["-y", "license-compliance-mcp"]
    }
  }
}

How It Works

Scans node_modules using license-checker-rseidelsohn
Normalizes license strings to valid SPDX using spdx-correct
Evaluates each package against the policy using spdx-satisfies
Traces dependency chains to show how problematic packages entered the project
Generates a markdown report grouped by severity (critical > warning > info)

Requirements

Node.js >= 18
Project must have node_modules installed (npm install)