JustClaw-It

com.it.justclawPublished by justclaw.it.comOfficial publisherv1.11.0Updated Nov 1, 2026

Licence-cleared code for coding agents, with attribution. Free search, MCP prompts and a skill pack.

VerifiedStreamable HTTPWeb executableKnowledge & MemoryDeveloper ToolsSecurity & Monitoring

Overview

AI-generated overview

Searches a library of licence-cleared code components from open-source repos and pulls their source with attribution, for coding agents.

What you can do
  • Search and browse components: semantic search with category, language and licence filters, similar-component lookup, category tags and library statistics
  • Retrieve source: fetch one component's full code with licence, copyright holder, GitHub permalink and attribution header
  • Check security: look up known CVE/GHSA advisories for components or repositories
  • Licence and notice data: list source repositories with SPDX licence and copyright holder to build a NOTICE file
  • Pro bundles: pull a component with the files it imports, or assemble a starter project from several components with README, NOTICE and install commands
When to use it
Useful when a coding assistant would otherwise write a utility from scratch and you would rather reuse existing, licence-cleared code with proper attribution. Also handy for checking licences and known advisories before copying code into a project.
Requirements
Remote streamable HTTP endpoint; no local install. An Authorization header with a Bearer API key is optional for search_components and required for every other tool; a free key is obtained by signing up on the provider's site. Some tools consume credits and the bundle and starter-project tools require a Pro plan.
Before you install
The Authorization header carries an API key that must be kept secret. get_component costs 1 credit per call, get_component_bundle 3 and compose_starter 10, and Pro-plan tools are gated. Copied code must keep its attribution header and licence terms; security advisories are repository-wide and only cover a limited set of widely used repositories, so "none_known" is not a guarantee.

Installation

In SourceWeft

  1. Open JustClaw-It in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/com.it.justclaw%2Fjustclaw-it/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "justclaw-it": {
      "type": "http",
      "url": "https://justclaw.it.com/mcp"
    }
  }
}

Tools

9

search_components

Search licence-cleared components

Find existing, licence-cleared code (functions, classes, handlers, modules) mined from real open-source repositories, before writing it from scratch. Cost: 0 credits (free). Works without an API key with a small per-network limit; a free key raises the limits. Every result is licence-cleared with attribution: its SPDX licence, copyright holder and a GitHub permalink come with it. Parameters: query (required) -- describe the job in plain words, e.g. "verify stripe webhook signature in python". limit -- results per page (default 8; capped by plan). category -- a function tag from list_categories, e.g. "auth". language -- python, typescript, javascript, go, rust, java, ... . license -- 'permissive' (MIT/BSD/Apache/ISC; use it when the code goes into a product), 'commercial-safe' (adds weak copyleft such as MPL-2.0), 'open-source' or 'any' (default). min_composite -- minimum 0-10 quality score, e.g. 7. offset -- pagination. max_per_repo -- cap per source repo (0 = no cap). Returns JSON {"results": [...]}, each with id, name, description, repo, path, language, license, composite and five sub-scores, similarity and permalink. No code body: pass the id to get_component for the source. Example: search_components(query="express jwt auth middleware", language="javascript", license="permissive", min_composite=7)

Parameterslimitqueryrequiredoffsetlicensecategorylanguagemax_per_repomin_composite

find_similar

Find similar components

Find alternatives to a component you already have: other licence-cleared implementations of the same job, to compare scores, licences and stacks. Cost: 0 credits (free; needs a free key). Parameters: id (required) -- a component id from search_components. limit -- how many (default 8). Returns JSON {"results": [...]} in the same shape as search_components (no code body). Example: find_similar(id="<id from search_components>", limit=5)

Parametersidrequiredlimit

list_categories

List component categories

List the function tags (categories) in the library with how many components each has; the values search_components accepts as `category`. Cost: 0 credits (free; needs a free key). Parameters: limit -- how many tags, most-used first (default 40). Returns JSON {"categories": [{"tag": ..., "count": ...}, ...]}. Example: list_categories(limit=20)

Parameterslimit

get_component

Get component source

Pull one component's full source code to reuse in the project, with its licence, copyright holder, GitHub permalink and an attribution header to keep with the copied code. Cost: 1 credit per call (needs a free key; refunded if the id is not available). Re-pulling a component you already pulled still costs 1 credit. Parameters: id (required) -- a component id from search_components or find_similar. Returns JSON with the full source, licence, attribution header, GitHub permalink, repo, path, language and quality scores. Example: get_component(id="<id from search_components>")

Parametersidrequired

check_component_security

Check component security

Check components or repositories for known security advisories (CVE/GHSA ids) before or after you reuse them. Cost: 0 credits (free; needs a free key). Advisories are repository-wide and come from our reputation data, which covers a set of widely used repositories: "none_known" means no advisory in our data, not that the code is safe. Parameters: component_ids -- up to 25 ids from search_components / get_component. names -- up to 25 repositories as "owner/repo" or a GitHub URL (a bare repo name matches every owner's). Returns JSON {"results": [...], "summary", "coverage", "note"}; each result has status "advisories" (with ids and links), "none_known" or "not_found". Example: check_component_security(component_ids=["<id>"], names=["nestjs/nest"])

Parametersnamescomponent_ids

library_stats

Library statistics

Live size of the library: total licence-cleared components, how many carry full source, source repositories, languages and repositories by licence class. Use it to tell the user how much is searchable. Cost: 0 credits (free; needs a free key). No parameters. Returns JSON counts, refreshed every 15 minutes. Example: library_stats()

Takes no parameters.

list_licenses

List source licences

List every source repository in the library with its SPDX licence and copyright holder, i.e. the NOTICE data behind the attribution on each component. Use it to build a NOTICE file or to check a repo's licence. Cost: 0 credits (free; needs a free key). No parameters. Returns JSON {"licenses": [...]}, one entry per source repository. Example: list_licenses()

Takes no parameters.

get_component_bundle

Get component bundle (Pro)

Pro feature. Pull a component together with the files it imports from its own repository, so it runs without hunting for helpers: each file with source and licence/attribution header, plus a manifest of files, npm/pip packages and install commands. Cost: 3 credits per call (Pro plan; other plans get an upgrade message and are not charged). Parameters: component_id (required) -- an id from search_components. Returns JSON with the files, manifest, licences and credits_charged. Example: get_component_bundle(component_id="<id from search_components>")

Parameterscomponent_idrequired

compose_starter

Compose a starter project (Pro)

Pro feature. Assemble a starter project from 3-8 complementary licence-cleared components for what you are building: file tree, files with attribution headers, a README listing every source and licence, a NOTICE file and install commands. Cost: 10 credits per call (Pro plan; other plans get an upgrade message and are not charged). Parameters: prompt (required) -- what you are building, e.g. "saas with stripe billing and magic-link login". stack -- optional, e.g. "nextjs" or "python fastapi". Returns JSON with files, tree, readme, notice, install commands and credits_charged. Example: compose_starter(prompt="todo api with jwt auth", stack="python fastapi")

Parametersstackpromptrequired

Version history

3
  1. v1.11.0LatestNov 1, 2026
  2. v1.10.0Oct 31, 2026
  3. v1.7.0Oct 29, 2026

Score

83% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • LicenseNot applicable

    A hosted service is used under its provider's terms, so no license is expected here. This check is left out of the percentage.