OSS License Auditor

Example Use Cases

• 1

  Audit all dependencies of a project against corporate license policies before shipping.

• 2

  Check the license of a single package before installation.

• 3

  Trace and visualize the full license tree including transitive dependencies.

Description

This MCP server provides a deterministic license firewall by auditing dependencies using live SPDX-based license data fetched from the npm registry. It classifies licenses into categories such as permissive, copyleft, and unknown, applying corporate policies to block or warn about risky licenses. The server supports multiple tools for auditing full dependency trees, checking single packages, and viewing license policies, enabling developers and LLM clients to prevent legal contamination of proprietary codebases.