License Compliance MCP server

by bighippoman·io.github.bighippoman/license-compliance·v1.0.2

Scan npm dependencies for license compliance issues. Catch GPL contamination.

B75/100grade B

What users say

No reviews yet

Safety scan

B75/100

Adoption

New

0 stars

Reviews

Nobody has reviewed License Compliance yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

check-licenses
Scan a project's npm dependencies for license compliance issues. Checks all installed packages against a policy (permissive, weak-copyleft, copyleft, or a custom SPDX expression). Returns a detailed markdown report with any violations, warnings, and dependency chains.
explain-license
Explain what a specific SPDX license means in plain language. Covers permissions, conditions, limitations, compatibility with proprietary/open-source/SaaS use, and common gotchas. Supports 15 major licenses plus deprecated SPDX forms.

scanner v0.1.10 · 2026-09-28 · same rubric, same numbers if you re-run it

no findings

Code scan8 source files scanned25/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitylocal package, no credentials required12/15
Maintenancelast push 206 days ago4/15
Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Overall 75/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

Runs npx -y license-compliance-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add license-compliance -- npx -y license-compliance-mcp

Is License Compliance MCP server safe?: Mostly: it is graded B (75/100). Read the License Compliance safety report
How do I install License Compliance?: It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does License Compliance need an API key?: Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is License Compliance maintained?: The last commit was 221 days ago (2026-03-06). The latest release is v1.0.2.
What can I use instead of License Compliance?: Servers from other publishers that do the same job: Dep Scope MCP server, pkgxray MCP server and Dependency Auditor MCP server. Compare all License Compliance alternatives.

Same job from other publishers: the closest match first, then the best rated.

Dep Scope
Symbol-level npm dependency analysis: scan verdicts, native alternatives, migration prompts.
not reviewed
Growing
A
pkgxray
Pre-install security scans for npm packages, MCP servers, and AI agents with cited verdict evidence.
not reviewed
Growing
B
Dependency Auditor
CVE scanning for npm/pip/cargo dependencies via OSV
More from 4hmetuyar →
not reviewed
Growing
A
Air Blackbox
EU AI Act compliance scanner for Python AI agents — scan, analyze, and remediate
not reviewed
Growing
A
PyMemoryEditor
Read, write and scan process memory, Cheat Engine style, on Windows, Linux and macOS.
not reviewed
Established
A