Claude MarketplacesSubmit
webmoleai avatar

Mcp License Audit

webmoleai/mcp-license-audit

Gives Claude a single tool to scan package.json files for license compliance issues. Point it at your dependencies and it fetches license metadata from the npm registry, flags GPL or AGPL packages that conflict with permissive project licenses, and returns a structured report with risk levels. Useful when you need to catch copyleft contamination before shipping proprietary code or want a quick audit of what licenses you're actually bundling. Caps analysis at 20 dependencies for speed. Only works with npm packages, so Python or Rust projects are out of scope. Private packages show up as unknown since the registry won't have their license data.

tool
1
transport
STDIO
last updated
Apr 7, 2026
View on GitHub

Tools

1 tools

Public tool metadata for what this MCP can expose to an agent.

audit-licensesParses a package.json file and returns a structured JSON report of dependency licenses, conflicts, and risk level.

Parses a package.json file and returns a structured JSON report of dependency licenses, conflicts, and risk level.

No parameter schema in public metadata yet.

Sponsors

Promote your product hereReach 125k+ visitors monthlyPromote your product hereReach 125k+ visitors monthlyAgent CaffeineSponsoredClose your lid, come back to finished workSnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthlyWaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthlyknobsSponsoredSee your site on any phone, any day, in any language

Readme

mcp-license-audit

MCP server that audits your project's dependency licenses for compatibility issues. Flags GPL/AGPL conflicts and generates compliance reports.

What It Does

  • Parses a package.json file (dependencies + devDependencies)
  • Fetches license info for each package from the npm registry
  • Classifies licenses: permissive (MIT, Apache, BSD, ISC), copyleft (GPL, AGPL), weak-copyleft (LGPL, MPL), unknown
  • Detects conflicts (e.g., GPL dependency in an MIT-licensed project)
  • Returns a structured JSON report with risk level and summary

Install

npm install -g mcp-license-audit
# or run directly:
npx mcp-license-audit

Configure in Claude Code

Add to your .claude/mcp.json or ~/.claude/mcp.json:

{
  "mcpServers": {
    "license-audit": {
      "command": "npx",
      "args": ["mcp-license-audit"]
    }
  }
}

Or if installed globally:

{
  "mcpServers": {
    "license-audit": {
      "command": "mcp-license-audit"
    }
  }
}

Tool: audit-licenses

Input: packageJson — the full contents of a package.json file as a string.

Output: JSON report:

View the full README on GitHub

Details

Repository
github.com/webmoleai/mcp-license-audit
Package
mcp-license-audit
Transport
STDIO
Registry
MCP registry, active

More from webmoleai