gridwork-license

MCP server that scans project dependencies for license compliance issues.

What it does

Scans node_modules and Python requirements for license information
Classifies 60+ licenses by risk level (copyleft, weak-copyleft, permissive, public-domain, proprietary)
Detects conflicts between dependency licenses and your project license
Flags AGPL dependencies in non-AGPL projects (SaaS risk)
Identifies unknown/undeclared licenses

bash

npx gridwork-license

Tool	Description
`scan_licenses`	Full license scan with conflict detection
`quick_check`	Risk breakdown and conflict count
`classify_license`	Classify any license string
`find_copyleft`	Find all copyleft dependencies

json

{
  "mcpServers": {
    "gridwork-license": {
      "command": "npx",
      "args": ["-y", "gridwork-license"]
    }
  }
}