English Français العربية

io.github.webmoleai/mcp-license-audit

Official registry Security

Audit dependency licenses for compatibility issues. Flags GPL/AGPL conflicts.

Source code Documentation

What can you do with io.github.webmoleai/mcp-license-audit?

  • Parses a package.json file (dependencies + devDependencies)
  • Fetches license info for each package from the npm registry
  • Classifies licenses: permissive (MIT, Apache, BSD, ISC), copyleft (GPL, AGPL), weak-copyleft (LGPL, MPL), unknown
  • Detects conflicts (e.g., GPL dependency in an MIT-licensed project)
  • Returns a structured JSON report with risk level and summary

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

NPM package mcp-license-audit
Claude Code 
claude mcp add mcp-license-audit -- npx -y mcp-license-audit@0.1.1
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "mcp-license-audit": {
            "command": "npx",
            "args": [
                "-y",
                "mcp-license-audit@0.1.1"
            ]
        }
    }
}

Documentation

From the project's README on GitHub, refreshed weekly. Links open on GitHub.

Contents
  1. mcp-license-audit
  2. What It Does
  3. Install
  4. Configure in Claude Code
  5. Tool: audit-licenses
  6. Limits
  7. Build from Source

mcp-license-audit

MCP server that audits your project's dependency licenses for compatibility issues. Flags GPL/AGPL conflicts and generates compliance reports.

What It Does

  • Parses a package.json file (dependencies + devDependencies)
  • Fetches license info for each package from the npm registry
  • Classifies licenses: permissive (MIT, Apache, BSD, ISC), copyleft (GPL, AGPL), weak-copyleft (LGPL, MPL), unknown
  • Detects conflicts (e.g., GPL dependency in an MIT-licensed project)
  • Returns a structured JSON report with risk level and summary

Install

npm install -g mcp-license-audit
# or run directly:
npx mcp-license-audit

Configure in Claude Code

Add to your .claude/mcp.json or ~/.claude/mcp.json:

{
  "mcpServers": {
    "license-audit": {
      "command": "npx",
      "args": ["mcp-license-audit"]
    }
  }
}

Or if installed globally:

{
  "mcpServers": {
    "license-audit": {
      "command": "mcp-license-audit"
    }
  }
}

Tool: audit-licenses

Input: packageJson — the full contents of a package.json file as a string.

Output: JSON report:

{
  "totalDependencies": 15,
  "analyzed": 15,
  "licenses": {
    "MIT": ["express", "lodash"],
    "Apache-2.0": ["typescript"],
    "GPL-3.0": ["some-package"],
    "unknown": ["private-pkg"]
  },
  "conflicts": [
    {
      "package": "some-package",
      "license": "GPL-3.0",
      "issue": "GPL dependency in MIT project — must open-source your code if distributed"
    }
  ],
  "riskLevel": "medium",
  "summary": "15 deps analyzed. 1 GPL conflict found. 1 unknown license."
}

Risk levels: low (no copyleft), medium (weak copyleft or many unknowns), high (GPL/AGPL found).

Limits

  • Analyzes first 20 dependencies for speed
  • Only supports npm packages (no pip/cargo/gem support yet)
  • License data comes from the npm registry — private packages return "unknown"

Build from Source

npm install
npm run build
node dist/index.js

Frequently asked questions

What is io.github.webmoleai/mcp-license-audit?

Audit dependency licenses for compatibility issues. Flags GPL/AGPL conflicts.

How do I install io.github.webmoleai/mcp-license-audit?

It runs on your machine. In Claude Code: claude mcp add mcp-license-audit -- npx -y mcp-license-audit@0.1.1. For other clients, paste the JSON configuration from this page into their MCP settings.

Does io.github.webmoleai/mcp-license-audit need an API key?

Its registry entry lists no required key or secret. Some features may still need an account with the service it connects to.

Is io.github.webmoleai/mcp-license-audit open source?

Its code is public on GitHub, but the repository does not declare a standard license.

Who maintains io.github.webmoleai/mcp-license-audit?

It is published by webmoleai. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.