{
  "markdown": "# mcp-license-audit\n\nMCP server that audits your project's dependency licenses for compatibility issues. Flags GPL/AGPL conflicts and generates compliance reports.\n\n## What It Does\n\n- Parses a `package.json` file (dependencies + devDependencies)\n- Fetches license info for each package from the npm registry\n- Classifies licenses: permissive (MIT, Apache, BSD, ISC), copyleft (GPL, AGPL), weak-copyleft (LGPL, MPL), unknown\n- Detects conflicts (e.g., GPL dependency in an MIT-licensed project)\n- Returns a structured JSON report with risk level and summary\n\n## Install\n\n```bash\nnpm install -g mcp-license-audit\n# or run directly:\nnpx mcp-license-audit\n```\n\n## Configure in Claude Code\n\nAdd to your `.claude/mcp.json` or `~/.claude/mcp.json`:\n\n```json\n{\n  \"mcpServers\": {\n    \"license-audit\": {\n      \"command\": \"npx\",\n      \"args\": [\"mcp-license-audit\"]\n    }\n  }\n}\n```\n\nOr if installed globally:\n\n```json\n{\n  \"mcpServers\": {\n    \"license-audit\": {\n      \"command\": \"mcp-license-audit\"\n    }\n  }\n}\n```\n\n## Tool: `audit-licenses`\n\n**Input:** `packageJson` — the full contents of a `package.json` file as a string.\n\n**Output:** JSON report:\n\n```json\n{\n  \"totalDependencies\": 15,\n  \"analyzed\": 15,\n  \"licenses\": {\n    \"MIT\": [\"express\", \"lodash\"],\n    \"Apache-2.0\": [\"typescript\"],\n    \"GPL-3.0\": [\"some-package\"],\n    \"unknown\": [\"private-pkg\"]\n  },\n  \"conflicts\": [\n    {\n      \"package\": \"some-package\",\n      \"license\": \"GPL-3.0\",\n      \"issue\": \"GPL dependency in MIT project — must open-source your code if distributed\"\n    }\n  ],\n  \"riskLevel\": \"medium\",\n  \"summary\": \"15 deps analyzed. 1 GPL conflict found. 1 unknown license.\"\n}\n```\n\n**Risk levels:** `low` (no copyleft), `medium` (weak copyleft or many unknowns), `high` (GPL/AGPL found).\n\n## Limits\n\n- Analyzes first 20 dependencies for speed\n- Only supports npm packages (no pip/cargo/gem support yet)\n- License data comes from the npm registry — private packages return \"unknown\"\n\n## Build from Source\n\n```bash\nnpm install\nnpm run build\nnode dist/index.js\n```\n",
  "bytes": 2020,
  "sha": "41712f912f42d5b0e8c020b847ba333cdc2c6e3f42875148e5417c1dc594f2d1",
  "repo_slug": "webmoleai/mcp-license-audit",
  "fonte": "repo",
  "truncated": false,
  "api": "https://agentalog.com/api/listings/mcp_io_github_webmoleai_mcp_license_audit_e3604dc2/readme"
}