{
  "markdown": "# mcp-license-audit\n\nMCP server that audits your project's dependency licenses for compatibility issues. Flags GPL/AGPL conflicts and generates compliance reports.\n\n## What It Does\n\n- Parses a `package.json` file (dependencies + devDependencies)\n- Fetches license info for each package from the npm registry\n- Classifies licenses: permissive (MIT, Apache, BSD, ISC), copyleft (GPL, AGPL), weak-copyleft (LGPL, MPL), unknown\n- Detects conflicts (e.g., GPL dependency in an MIT-licensed project)\n- Returns a structured JSON report with risk level and summary\n\n## Install\n\n```bash\nnpm install -g mcp-license-audit\n# or run directly:\nnpx mcp-license-audit\n```\n\n## Configure in Claude Code\n\nAdd to your `.claude/mcp.json` or `~/.claude/mcp.json`:\n\n```json\n{\n  \"mcpServers\": {\n    \"license-audit\": {\n      \"command\": \"npx\",\n      \"args\": [\"mcp-license-audit\"]\n    }\n  }\n}\n```\n\nOr if installed globally:\n\n```json\n{\n  \"mcpServers\": {\n    \"license-audit\": {\n      \"command\": \"mcp-license-audit\"\n    }\n  }\n}\n```\n\n## Analytics\n\nThis server supports [MCPcat](https://mcpcat.io) analytics. To enable usage tracking, session replay, and error monitoring, set the `MCPCAT_PROJECT_ID` environment variable in your MCP client config:\n\n```json\n{\n  \"mcpServers\": {\n    \"license-audit\": {\n      \"command\": \"npx\",\n      \"args\": [\"mcp-license-audit\"],\n      \"env\": {\n        \"MCPCAT_PROJECT_ID\": \"proj_your_id_here\"\n      }\n    }\n  }\n}\n```\n\nWithout it, the server runs normally with no analytics. See the [MCPcat setup guide](../../docs/guides/mcpcat-setup.md) for details.\n\n## Tool: `audit-licenses`\n\n**Input:** `packageJson` — the full contents of a `package.json` file as a string.\n\n**Output:** JSON report:\n\n```json\n{\n  \"totalDependencies\": 15,\n  \"analyzed\": 15,\n  \"licenses\": {\n    \"MIT\": [\"express\", \"lodash\"],\n    \"Apache-2.0\": [\"typescript\"],\n    \"GPL-3.0\": [\"some-package\"],\n    \"unknown\": [\"private-pkg\"]\n  },\n  \"conflicts\": [\n    {\n      \"package\": \"some-package\",\n      \"license\": \"GPL-3.0\",\n      \"issue\": \"GPL dependency in MIT project — must open-source your code if distributed\"\n    }\n  ],\n  \"riskLevel\": \"medium\",\n  \"summary\": \"15 deps analyzed. 1 GPL conflict found. 1 unknown license.\"\n}\n```\n\n**Risk levels:** `low` (no copyleft), `medium` (weak copyleft or many unknowns), `high` (GPL/AGPL found).\n\n## Limits\n\n- Analyzes first 20 dependencies for speed\n- Only supports npm packages (no pip/cargo/gem support yet)\n- License data comes from the npm registry — private packages return \"unknown\"\n\n## Build from Source\n\n```bash\nnpm install\nnpm run build\nnode dist/index.js\n```\n",
  "bytes": 2570,
  "sha": "e3d6c73028c515a73c871030ac85d9e8265c019a125b252d1baa3b86a263dd8e",
  "repo_slug": "webmoleai/mcp-check-licenses",
  "fonte": "repo",
  "truncated": false,
  "api": "https://agentalog.com/api/listings/mcp_io_github_webmoleai_mcp_check_licenses_0c9cae96/readme"
}