Skip to main content
Glama
TheoryofShadows

@mcpx-digital/license-scan

by TheoryofShadows
OverviewSchemaSourceRelated ServersDiscussionsAdmin
JavaScript
Local

@mcpx-digital/license-scan

MCP server for dependency license awareness (advisory).

Scan package.json + lockfiles for dependency licenses. When the lockfile has no license field, optionally read the license metadata from the public npm registry (no tarball downloads). Flag GPL/AGPL/unknown licenses for commercial awareness.

ADVISORY ONLY — not legal advice. Metadata can be wrong or incomplete. Verify critical dependencies yourself before shipping.

Install

npx -y @mcpx-digital/license-scan

Related MCP server: Dependency Checker MCP Server

Cursor mcp.json example

{
  "mcpServers": {
    "license-scan": {
      "command": "npx",
      "args": ["-y", "@mcpx-digital/license-scan"]
    }
  }
}

Local clone:

{
  "mcpServers": {
    "license-scan": {
      "command": "node",
      "args": ["/absolute/path/to/license-scan-mcp/index.js"]
    }
  }
}

Tools

Tool

What it does

scan_licenses

Full scan of deps with classifications

flag_risky_licenses

GPL/AGPL/LGPL-family + unknown only

classify_license_string

Classify one license string

Example prompts

  • “Scan licenses in /path/to/my-app”

  • “Flag copyleft/unknown licenses for this project”

  • “Is GPL-3.0-or-later copyleft?”

Development

git clone https://github.com/TheoryofShadows/license-scan-mcp.git
cd license-scan-mcp
npm install
npm test

License

MIT

This server cannot be deployed

One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Maintenance

ActivityMaintained
ResponsivenessNo issues

Resources

Related MCP Connectors

Related MCP Servers

  • License Scanner MCP Server

    RyanCadby
    F
    license
    Not graded
    quality
    D
    maintenance
    Enables scanning of project dependencies across multiple package managers (npm, pip, cargo, etc.) and generates comprehensive markdown license reports. Supports automatic license detection from package registries with caching for improved performance.
    -

  • Dependency Checker MCP Server

    djodjonx
    A
    license
    B
    quality
    C
    maintenance
    Enables security scanning for npm dependencies by checking manifest and lockfiles against the OSV.dev and Socket.dev vulnerability databases. It provides tools to detect vulnerabilities in specific packages and retrieve detailed technical reports for identified security issues.
    3
    14
    MIT

  • license-guardian

    Baneado98
    -
    license
    Not graded
    quality
    B
    maintenance
    Audits npm dependencies for license compatibility, catching copyleft and source-available traps before shipping.
    -