Summary
Scans your npm dependencies for license violations by walking node_modules and checking each package against configurable policies. Exposes two tools: check_licenses takes a project path and policy preset (permissive, weak-copyleft, copyleft, or custom SPDX expressions) and returns a markdown report flagging GPL contamination and other issues with full dependency chains showing how problems entered your tree. explain_license gives plain English breakdowns of any SPDX license including permissions and compatibility gotchas. Uses license-checker-rseidelsohn under the hood with SPDX normalization and satisfies logic. Runs via npx, requires an installed node_modules to scan.
Keeps your Mac awake while Claude Code, Codex or Cursor works. Lets it sleep when they are done.
Try free for 7 days →
Block distracting apps from your iPhone permanently without a 3rd party app. Free and open source.
Block now (100% free) →
Notes, actions and memory. Without a meeting bot. First month 100% off.
Download for free →
belt cli automatically finds the best tools and skills for your agent. image, video, music, tts...
one prompt install →
Free an open-source skills that make AI coding agents easier to understand, verify, and control.
Download for free →
Connect your Claude agent to live crypto prices and trading routes via 1inch
Get the MCP →license-compliance-mcp
MCP server that scans npm project dependencies for license compliance issues. Catch GPL contamination before code ships.
Tools
check-licenses
Scan a project's npm dependencies against a license policy and get a detailed compliance report.
Parameters:
path(required) — Absolute path to the project rootpolicy(optional, default:"permissive") — Policy preset or custom SPDX expression"permissive"— Only MIT, ISC, BSD, Apache-2.0, etc."weak-copyleft"— Adds LGPL, MPL-2.0, EPL-2.0"copyleft"— Adds GPL, AGPL- Custom:
"(MIT OR Apache-2.0)"— Any valid SPDX expression
explain-license
Get a plain-language explanation of any SPDX license — permissions, conditions, limitations, compatibility, and gotchas.
Parameters:
license(required) — SPDX identifier (e.g.,"MIT","GPL-3.0-only","Apache-2.0")
Install
Claude Code
claude mcp add license-compliance -- npx -y license-compliance-mcp
Claude Desktop / Cursor
Add to your config (claude_desktop_config.json or .cursor/mcp.json):
{
"mcpServers": {
"license-compliance": {
"command": "npx",
"args": ["-y", "license-compliance-mcp"]
}
}
}
How It Works
- Scans
node_modulesusinglicense-checker-rseidelsohn - Normalizes license strings to valid SPDX using
spdx-correct - Evaluates each package against the policy using
spdx-satisfies - Traces dependency chains to show how problematic packages entered the project
- Generates a markdown report grouped by severity (critical > warning > info)
Requirements
- Node.js >= 18
- Project must have
node_modulesinstalled (npm install)
Featured
Keeps your Mac awake while Claude Code, Codex or Cursor works. Lets it sleep when they are done.
Try free for 7 days →Block distracting apps from your iPhone permanently without a 3rd party app. Free and open source.
Block now (100% free) →Notes, actions and memory. Without a meeting bot. First month 100% off.
Download for free →belt cli automatically finds the best tools and skills for your agent. image, video, music, tts...
one prompt install →Free an open-source skills that make AI coding agents easier to understand, verify, and control.
Download for free →Connect your Claude agent to live crypto prices and trading routes via 1inch
Get the MCP →