License Compliance Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited License Compliance Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
MCP server that scans npm project dependencies for license compliance issues. Catch GPL contamination before code ships.
check-licensesScan a project's npm dependencies against a license policy and get a detailed compliance report.
Parameters:
path (required) — Absolute path to the project rootpolicy (optional, default: "permissive") — Policy preset or custom SPDX expression"permissive" — Only MIT, ISC, BSD, Apache-2.0, etc."weak-copyleft" — Adds LGPL, MPL-2.0, EPL-2.0"copyleft" — Adds GPL, AGPL"(MIT OR Apache-2.0)" — Any valid SPDX expressionexplain-licenseGet a plain-language explanation of any SPDX license — permissions, conditions, limitations, compatibility, and gotchas.
Parameters:
license (required) — SPDX identifier (e.g., "MIT", "GPL-3.0-only", "Apache-2.0")claude mcp add license-compliance -- npx -y license-compliance-mcpAdd to your config (claude_desktop_config.json or .cursor/mcp.json):
{
"mcpServers": {
"license-compliance": {
"command": "npx",
"args": ["-y", "license-compliance-mcp"]
}
}
}node_modules using license-checker-rseidelsohnspdx-correctspdx-satisfiesnode_modules installed (npm install)~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.