"SPDX" matching MCP servers:

Enables querying SPDX license list, metadata, and full license texts through natural language or direct tool calls.

Enables searching, comparing, and validating SPDX licenses and exceptions, plus SPDX expression validation and SBOM analysis through a Streamable HTTP endpoint.

Generates deterministic, reviewable drafts of source-available named-exclusion licenses with SPDX identifiers and digests, without modifying files or performing external actions.

Web-only MCP server for php-spx reports that calls embedded SPX web endpoints, parses full reports, and returns LLM-sized JSON summaries instead of raw event streams.

Local, read-only MCP server that provides verified access to bounded.tools' signed static API, including the Web-Build Conformance report and SPDX SBOM, with byte-for-byte verification against a Sigstore-signed manifest.

Enables lookup, search, and retrieval of open-source license information using the SPDX license list, with tools for finding licenses by ID or keyword and fetching full license text.

Enables deploying a stateless remote MCP server on Cloudflare Workers without authentication, implementing the MCP 2026-07-28 specification and compatible with legacy clients for tool calls.