SunLicense

com.sunlicensePublished by sunlicense.comOfficial publisherv0.7.1Updated Nov 3, 2026

Manage software license keys: issue, suspend and revoke licenses, free machines, see customers.

VerifiedStreamable HTTPWeb executable

Overview

SunLicense's hosted MCP server (api.sunlicense.com), published by sunlicense.com; OAuth sign-in required; Streamable HTTP.

No AI overview yet: these facts come from the registry entry and the server itself.

Publisher
sunlicense.com
Endpoint
api.sunlicense.com
Documentation
docs.sunlicense.com
Last checked

Installation

In SourceWeft

  1. Open SunLicense in the dashboard and add it to a workspace.
  2. Connect the required credentials. They are stored privately and never shown on public pages.
  3. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/com.sunlicense%2Fmcp/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config. The client completes OAuth sign-in on first connect.

{
  "mcpServers": {
    "sunlicense": {
      "type": "http",
      "url": "https://api.sunlicense.com/mcp"
    }
  }
}

README

SunLicense MCP server

Let your AI assistant run SunLicense, the license key service for software people sell (Minecraft plugins and mods, FiveM resources, Discord bots, desktop apps, games and tools): issue, suspend and revoke licenses, free a customer's machine, block a leaked key, look up customers, build automations, read license-check stats, and add a license check to your code.

It's SunLicense's official MCP server, hosted at:

text
https://api.sunlicense.com/mcp

Streamable HTTP with OAuth: the first time a tool runs, your assistant opens SunLicense in the browser, you sign in, untick any permission you don't want to give, and choose Connect. No API key to copy. Prefer a local server with a token (scripts, CI, no browser)? Use sunlicense mcp below.

MCP is included in every SunLicense plan: Free (50 tool calls a day), Lite (300) and Standard (3,000). Sign up free at app.sunlicense.com.

mcp-name: com.sunlicense/mcp

Connect

claude.ai, Claude Desktop and mobile: Settings → Connectors → Add custom connector → name SunLicense, URL https://api.sunlicense.com/mcp → Connect.

ChatGPT (a plan that allows custom MCP servers): chatgpt.com/plugins → Add → Add custom MCP server → URL as above, authentication OAuth, default advanced settings.

Claude Code:

bash
claude mcp add --transport http sunlicense https://api.sunlicense.com/mcp

then /mcp → sunlicense → Authenticate. Or install the SunLicense plugin, which adds a skill for writing license checks too.

Cursor: add to ~/.cursor/mcp.json (or the project's .cursor/mcp.json), then Connect in Settings → MCP:

json
{  "mcpServers": {    "sunlicense": { "url": "https://api.sunlicense.com/mcp" }  }}

VS Code (GitHub Copilot agent mode):

bash
code --add-mcp '{"name":"sunlicense","type":"http","url":"https://api.sunlicense.com/mcp"}'

Windsurf: add to ~/.codeium/windsurf/mcp_config.json:

json
{  "mcpServers": {    "sunlicense": { "serverUrl": "https://api.sunlicense.com/mcp" }  }}

Codex CLI:

bash
codex mcp add sunlicense --url https://api.sunlicense.com/mcpcodex mcp login sunlicense

Cline, Gemini CLI and other clients: add a remote (Streamable HTTP) server with the URL above; any client that supports MCP OAuth works. It identifies itself with a Client ID Metadata Document or Dynamic Client Registration.

Local server: sunlicense mcp

The same tools run locally from the sunlicense CLI (macOS, Linux, Windows; npm installs a single binary). Create a personal access token in the dashboard (Settings → Access tokens) and add:

json
{  "mcpServers": {    "sunlicense": {      "command": "npx",      "args": ["-y", "@sunlicense/cli@latest", "mcp"],      "env": { "SUNLICENSE_TOKEN": "slp_..." }    }  }}

With the CLI installed (npm install -g @sunlicense/cli), sunlicense mcp install writes this for the assistants it finds. SUNLICENSE_API_KEY (an slk_ API key) also turns on test_validate, a real license check. Both servers share your organization's daily allowance.

What it can do

Try: "Issue a Pro license for [email protected]", "Why is AX8P-… failing?", "Someone posted my key on a forum, stop it", "How many license checks failed this week, and why?", "Add SunLicense to this Paper plugin".

Prompts: add_licensing (set up licensing in this project), investigate_license, block_leak, build_automation. Resources: SDK snippets (sunlicense://sdk/{language}) and the docs.

Products and policies

ToolWhat it does
list_productsList productsreads
create_productCreate a productchanges
delete_productDelete a productchanges, asks first
list_policiesList policiesreads
create_policyCreate a policy (plan/tier)changes
update_policyChange a policy (plan/tier)changes, asks first
delete_policyDelete a policychanges, asks first

Licenses

ToolWhat it does
list_licensesList licensesreads
get_licenseShow a licensereads
issue_licenseIssue a licensechanges
suspend_licenseSuspend a licensechanges, asks first
reinstate_licenseReinstate a licensechanges
revoke_licenseRevoke a licensechanges, asks first
delete_licenseDelete a licensechanges, asks first
reveal_license_keyReveal a license keychanges
rotate_license_keyGive a license a new keychanges, asks first
offline_license_fileOffline license filereads

Machines and IP addresses

ToolWhat it does
list_machinesList a license's machinesreads
deactivate_machineDeactivate a machinechanges, asks first
list_license_ipsList a license's IP addressesreads
release_license_ipFree a license's IP addresschanges, asks first

Customers

ToolWhat it does
list_customersList customersreads
create_customerAdd a customerchanges
update_customerEdit a customerchanges
block_customerBlock a customerchanges, asks first
unblock_customerUnblock a customerchanges
merge_customersMerge two customerschanges, asks first
delete_customerDelete a customerchanges, asks first

Blacklist and exclusion rules

ToolWhat it does
list_access_rulesList access rulesreads
add_access_ruleAdd a blacklist or exclusion rulechanges
delete_access_ruleDelete an access rulechanges, asks first

API keys and team

ToolWhat it does
list_api_keysList API keysreads
create_api_keyCreate an API keychanges
revoke_api_keyRevoke an API keychanges, asks first
sign_out_memberSign a member outchanges, asks first

Automations

ToolWhat it does
automation_catalogAutomation building blocksreads
list_automationsList automationsreads
get_automationShow an automationreads
validate_automationCheck an automationreads
create_automationCreate an automation (switched off)changes
update_automationChange an automationchanges, asks first
test_automationTest-run an automationreads
enable_automationSwitch an automation onchanges, asks first
disable_automationSwitch an automation offchanges, asks first
list_automation_runsList an automation's runsreads

Stats and setup

ToolWhat it does
licensing_statsLicensing statsreads
validation_statsValidation statsreads
integration_statusIntegration statusreads
mcp_usageMCP calls todayreads
test_validateTest a license check (CLI only)changes

Trash

ToolWhat it does
list_trashList the Trashreads
restore_from_trashRestore from the Trashchanges

Product analytics

ToolWhat it does
analytics_summaryProduct analytics summaryreads
analytics_breakdownProduct analytics breakdownreads
analytics_featuresProduct feature usagereads

Code obfuscation

ToolWhat it does
obfuscate_fileObfuscate a filechanges
obfuscation_statusObfuscation run statusreads
obfuscation_profiles_listList obfuscation profilesreads

Code and docs

ToolWhat it does
sdk_snippetSDK snippetreads
search_docsSearch the docsreads

"Asks first" tools are marked destructive (destructiveHint), so assistants ask before running them. Every tool has a title and explicit read-only, destructive and open-world hints.

Safety and privacy

  • The assistant acts as you: only what your role and the permissions you approved allow. Changes say "Issued by AI assistant (…)" on the license.
  • License keys stay masked (AX8P-XXXX-XXXX-XXXX); a full key is shown only when you ask (reveal_license_key).
  • SunLicense receives the tool calls only (the tool's name and arguments), never your prompts, chats or code.
  • Disconnect any time: dashboard → Settings → Access tokens → Connected AI apps. Unused connections end after 30 days.

Details: Connect claude.ai, ChatGPT and other apps, sunlicense mcp, privacy policy.

For developers

Endpointhttps://api.sunlicense.com/mcp (Streamable HTTP, stateless, JSON responses)
AuthOAuth 2.1, authorization code with PKCE (S256); protected resource metadata, authorization server metadata
ClientsClient ID Metadata Documents or Dynamic Client Registration; https or loopback redirect URIs
Unauthenticated request401 with WWW-Authenticate: Bearer resource_metadata=…
Registrycom.sunlicense/mcp in the official MCP Registry

This repository holds the listing files (server.json, lhm.plugin.json, .cursor-plugin/, glama.json); the server itself is part of SunLicense Cloud.

Support

docs.sunlicense.com · Support · [email protected] · status.sunlicense.com

License

The files in this repository: MIT No Attribution. SunLicense itself is a hosted service under its terms.

Source: README.md at commit 76eb8f8

Tools

0
This server asks you to sign in, so SourceWeft could not read its tools without an account and has not indexed them. What a connected account sees can depend on that account and its permissions.

Version history

1
  1. v0.7.1LatestNov 3, 2026

Score

85% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts