Scans your project dependencies for license compliance issues by analyzing node_modules and Python requirements. Exposes four tools: scan_licenses runs a full audit with conflict detection, quick_check gives you a risk summary, classify_license evaluates any license string against 60+ known licenses sorted by risk level (copyleft, permissive, proprietary, etc.), and find_copyleft surfaces problematic dependencies. The real value is in automatic conflict detection, like flagging AGPL dependencies in non-AGPL projects where you might face SaaS licensing obligations. Useful when auditing third-party code before shipping, onboarding dependencies from unfamiliar ecosystems, or preparing compliance reports for legal review.
MCP server that scans project dependencies for license compliance issues.
npx gridwork-license
| Tool | Description |
|---|---|
scan_licenses | Full license scan with conflict detection |
quick_check | Risk breakdown and conflict count |
classify_license | Classify any license string |
find_copyleft | Find all copyleft dependencies |
{
"mcpServers": {
"gridwork-license": {
"command": "npx",
"args": ["-y", "gridwork-license"]
}
}
}
MIT — Gridwork