Skip to main content
Glama

license-sentinel

wgd5678/license-sentinel MCP server

Audit Python and npm dependency licenses for compliance before you ship — an MCP server for AI coding agents.

An AI agent can add pdf-renderer to your project in one second. It will not tell you that pdf-renderer is AGPL-3.0 and that shipping it inside a closed-source product is a license violation. License data and compatibility rules are things a model cannot reliably recall — packages relicense between versions (MongoDB → SSPL, Redis → BUSL, Elasticsearch → Elastic-2.0), and "the source is on GitHub" does not mean "free to ship".

license-sentinel reads what is actually on your disk and judges it against how you distribute your product.

  • Works for Python and npm in one pass — existing MCP license tools are npm-only.

  • Runs locally over stdio. No network calls, no telemetry, nothing leaves your machine.

  • Verdicts, not raw data: CLEAN / REVIEW / BLOCK, each with the reason in plain language.


Tools

Tool

What it does

audit_project(path, context)

Scan a project's dependencies and return counts plus every BLOCKING and REVIEW item with reasons.

check_package(names, context)

Check specific packages or messy license strings before installing. Accepts AGPL-3.0, BUSL-1.1, GPLv3, Apache License 2.0, MIT OR Apache-2.0.

generate_notices(path, output)

Write a THIRD-PARTY-NOTICES.md attribution document for client hand-off.

There is also a pre_release_license_review prompt that chains the audit into a go/no-go review.

Related MCP server: gridwork-license

Install

# run without installing (recommended)
uvx --from license-sentinel license-sentinel

# or install
uv pip install license-sentinel
# or
pip install license-sentinel

Configure your client

Claude Desktop / Cursor / Windsurf / VS Code Copilot / Zed all read the same shape:

{
  "mcpServers": {
    "license-sentinel": {
      "command": "uvx",
      "args": ["--from", "license-sentinel", "license-sentinel"]
    }
  }
}

If you installed with pip instead, use "command": "license-sentinel" with no args. Restart the client and the three tools appear.

Distribution context

The same dependency is fine in one context and fatal in another, so every tool takes a context argument:

Context

Meaning

What it blocks

proprietary (default)

Closed-source product you distribute

GPL/AGPL/SSPL, BUSL/Elastic, non-commercial

saas-backend

Never distributed, only runs on your servers

AGPL/SSPL (network trigger), BUSL/Elastic

permissive

Your own project is MIT/Apache/BSD

Anything copyleft that would contaminate your terms

copyleft-ok

Your own project is GPL family

Only source-available and non-commercial

What it reads

  • Python: .venv/ / venv/ / env/ installed packages (dist-info/METADATA), requirements.txt, pyproject.toml (PEP 621, poetry, dependency-groups)

  • npm: node_modules/*/package.json (including scoped packages), package.json dependencies

If a dependency is declared but not installed, it is reported with an UNKNOWN license rather than silently dropped — an unlicensed dependency is all-rights-reserved by default.

Privacy

No HTTP client is imported anywhere in this package. The scan is read-only (except generate_notices, which writes the file you name). Nothing is uploaded.

Limitations

  • Not legal advice. It is a fast first pass that catches the expensive mistakes; have counsel review anything flagged.

  • Transitive dependencies are read from what is installed. If you have no .venv and no node_modules, declared-only dependencies come back UNKNOWN.

  • The current environment running the server is never scanned, so the server's own packages never pollute your report. Set LICENSE_SENTINEL_SCAN_CURRENT_ENV=1 to change that.

Development

uv sync
python tests/smoke_test.py     # 9 tests, no pytest needed
python tests/e2e_check.py      # calls the tools end to end

License

MIT

Available Tools

3 tools
audit_projectA

Scan a project's dependencies and report licensing risk.

Args: path: Project directory to scan. Defaults to the current directory. context: How you distribute your product. One of proprietary (closed-source product you distribute), saas-backend (you only run it, never distribute), permissive (your own project is MIT/Apache/BSD), copyleft-ok (your own project is GPL family).

Returns: Counts per verdict plus every BLOCK and REVIEW item with the reason.

ParametersJSON Schema
NameRequiredDescriptionDefault
pathNo.
contextNoproprietary

Output Schema

ParametersJSON Schema
NameRequiredDescription
resultYes

TDQS

A3.9/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the burden of behavioral disclosure. It states that the tool scans and reports licensing risk and describes the return content, but it does not explicitly mention whether it modifies anything, needs network access, or has other side effects.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is well organized with a one-line summary, clearly labeled Args, and Returns. Every sentence is useful, and the most important information is front-loaded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description provides enough detail to call the tool correctly: both parameters are explained, defaults are given, and the return shape is summarized. Missing guidance about alternatives and side effects is a minor gap given the tool's read-only-looking nature.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters5/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The description adds substantial meaning beyond the input schema, which has no parameter descriptions and zero schema coverage. It explains the path parameter's default and the full semantic meaning of each context value, including what each distribution model means.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool scans a project's dependencies and reports licensing risk, using a specific verb and resource. It does not explicitly differentiate itself from sibling tools like check_package or generate_notices, so it stops short of a 5.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The use case is implied: use this when you need to audit a project's dependency licensing. However, there is no explicit guidance about when to prefer audit_project over check_package or generate_notices, and no stated exclusions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

check_packageA

Check packages or raw license strings before installing them.

Args: names: Package or license strings to check. Accepts the messy real-world forms: AGPL-3.0, BUSL-1.1, GPLv3, Apache License 2.0, MIT OR Apache-2.0, or a comma-separated string of any of these. These are license strings, not package lookups: to audit what is actually installed in a project directory, use audit_project. context: Distribution context, see audit_project.

Returns: One line per input with its verdict and the reason.

ParametersJSON Schema
NameRequiredDescriptionDefault
namesYes
contextNoproprietary

Output Schema

ParametersJSON Schema
NameRequiredDescription
resultYes

TDQS

A4.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are present, so the description carries the safety and behavior burden. It discloses output form ('One line per input with its verdict and the reason') and clarifies that the tool does not perform package lookups or project audits, which is important behavioral context. It doesn't explicitly list side effects or auth needs, but the operation is a non-mutating check and the main behavioral boundaries are stated.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is front-loaded with the purpose, then neatly organized into Args and Returns. Every sentence adds value, and the examples are compact rather than bloated.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The required names parameter is fully specified and the output schema covers return values, so an agent can make a default call. The main gap is the context parameter, whose valid values are only referenced through audit_project rather than described here. This keeps the definition from being fully self-contained.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Although schema coverage is 0%, the description compensates thoroughly for names with concrete accepted forms, SPDX-style expressions, and comma-separated/array variants. Context is only cross-referenced to audit_project rather than fully explained, but the schema's default and type still apply.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific verb/resource pair and timeframe ('Check ... before installing'), then sharpens the scope by stating inputs are license strings, not package lookups, and names audit_project as the installed-project alternative. This makes the tool's role unambiguous relative to its siblings.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It explicitly states when to use the tool ('before installing them') and when not to (for actual installed-package audits, 'use audit_project'). The exclusion of project-directory lookups is direct, leaving no inference needed. generate_notices is not mentioned, but the main decision boundary is covered.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

generate_noticesA

Write a THIRD-PARTY-NOTICES.md attribution document for client hand-off.

Args: path: Project directory to scan. output: Output file. Relative paths are resolved against path.

Returns: The absolute path written and how many dependencies were listed.

ParametersJSON Schema
NameRequiredDescriptionDefault
pathNo.
outputNoTHIRD-PARTY-NOTICES.md

Output Schema

ParametersJSON Schema
NameRequiredDescription
resultYes

TDQS

A3.7/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are present, so the description must carry the full burden. It does disclose that the tool writes an output file, scans a project directory, resolves relative output paths against the path, and returns the absolute path plus dependency count. However, it does not mention overwrite behavior, destructive potential, required project state, or failure modes, leaving meaningful gaps for a file-writing tool.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is compact, front-loaded with the primary purpose, and organized with Args and Returns sections. Every sentence contributes useful information, and there is no redundant filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's low complexity—two optional parameters and an output schema available—the description covers purpose, arguments, and return value well. It could be more complete about the side effects of writing the output file or the exact nature of the dependency scan, but for an agent selecting and invoking this tool, the essentials are present.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must compensate. It does: 'path' is defined as the project directory to scan, and 'output' is defined as the output file with relative path resolution behavior. This adds meaning not present in the bare input schema, although it could offer more detail about output formatting or scanning scope.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a clear, specific action: 'Write a THIRD-PARTY-NOTICES.md attribution document for client hand-off.' It identifies the verb, resource, and purpose, making the tool's role obvious. However, it does not explicitly differentiate this tool from its siblings audit_project or check_package, so it stops short of a 5.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The phrase 'for client hand-off' gives reasonable context for when the tool might be used, and the description clearly implies a dependency-scanning/writing task. There is no explicit guidance on when to choose this tool over audit_project or check_package, nor any exclusions or alternative conditions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.

  1. 3 tool updatesv0.1.0
    • First observedaudit_project
    • First observedcheck_package
    • First observedgenerate_notices

TDQS

A4.2/5.0

Scored across 3 tools

Disambiguation5/5

Each tool targets a distinct stage: audit_project scans an existing project, check_package evaluates individual license strings or packages before install, and generate_notices produces an attribution file. The descriptions explicitly clarify the boundary between audit_project and check_package, so an agent is unlikely to select the wrong tool.

Naming Consistency5/5

All three tools follow the same verb_noun snake_case pattern: audit_project, check_package, generate_notices. The naming is predictable and immediately conveys the action and target of each tool.

Tool Count5/5

Three tools is a well-scoped count for a focused license-compliance server. Each tool covers a non-overlapping, meaningful workflow step without unnecessary bloat or missing core functionality.

Completeness4/5

The toolset covers the main license compliance lifecycle: audit a project, check new dependencies, and generate notices. Minor gaps exist around policy configuration/allowlisting and detailed reporting on all permissive dependencies, but agents can work around these using the provided outputs.

Maintenance

ActivityMaintained
ResponsivenessNo issues

Related MCP Connectors

Related MCP Servers

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/wgd5678/license-sentinel'

If you have feedback or need assistance with the MCP directory API, please join our Discord server