mcp-server-oss-license-auditor MCP Server
vinkius-labs/mcp-server-oss-license-auditor
OSS License Auditor - MCP server that audits open-source package licenses against corporate policy — detects viral (GPL, AGPL, SSPL) and unknown licenses before they enter the codebase. Built with Vurb.ts
claude mcp add agentrank -- npx -y agentrank-mcp-server Overview
vinkius-labs/mcp-server-oss-license-auditor is a TypeScript MCP server. OSS License Auditor - MCP server that audits open-source package licenses against corporate policy — detects viral (GPL, AGPL, SSPL) and unknown licenses before they enter the codebase. Built with Vurb.ts Topics: european-union, license-checking, mcp-servers, vurb, vurb-framework, oss-licenses.
Ranked #64 out of 100 indexed tools.
Actively maintained with commits in the last week.
Ecosystem
Score Breakdown
1 stars → early stage
Last commit today → actively maintained
No issues filed → no history to score
1 contributor → solo project
No dependents → no downstream usage
Weights: Freshness 25% · Issue Health 25% · Dependents 25% · Stars 15% · Contributors 10% · How we score →
How to Improve
Badge all embed codes →
[](https://agentrank-ai.com/tool/vinkius-labs--mcp-server-oss-license-auditor/?utm_source=badge&utm_medium=readme&utm_campaign=agentrank_badge) <a href="https://agentrank-ai.com/tool/vinkius-labs--mcp-server-oss-license-auditor/?utm_source=badge&utm_medium=readme&utm_campaign=agentrank_badge"><img src="https://agentrank-ai.com/api/badge/tool/vinkius-labs--mcp-server-oss-license-auditor" alt="AgentRank"></a> Matched Queries
From the README
# 🔍 OSS License Auditor
> MCP server that audits open-source package licenses against corporate policy — detects viral (GPL, AGPL, SSPL) and unknown licenses before they enter the codebase. Built with [Vurb.ts](https://github.com/vinkius-labs/vurb.ts).
## Why This Exists
A single GPL or AGPL dependency can legally contaminate your entire codebase, forcing you to open-source your proprietary code. Most developers don't check licenses before running `npm install`.
This MCP server gives any LLM client a **deterministic license firewall** — call `license.audit` before adding any dependency. The classification is SPDX-based lookup (no regex, no hallucination), resolved live from the npm registry.
## Architecture
```
Agent reads package.json
↓
Sends dependencies to MCP
↓
MCP fetches license metadata from npm registry (parallel, 8s timeout)
↓
Normalises SPDX → classifies into 5 categories → applies corporate policy
↓
Returns audit report: BLOCKED ❌ / WAR Read full README on GitHub → Get the weekly AgentRank digest
Top movers, new tools, ecosystem insights — straight to your inbox.