LicenseGate

io.github.Computersmarts1Published by GitHub account Computersmarts1v0.3.0Updated Oct 24, 2026

Open-source licence risk checks for AI coding agents and dependency trees.

VerifiedStreamable HTTPWeb executableDeveloper ToolsSecurity & Monitoring

Overview

AI-generated overview

LicenseGate checks a software package and its dependency tree for open-source licence risk before an assistant adds it to a project.

What you can do
  • Check a package and its dependency tree for open-source licence risk before adding it to a project
  • Run the check across ecosystems such as pypi, npm, maven and cargo
  • Assess licence implications for use cases such as hosted SaaS or distributed closed-source software
When to use it
Useful when an AI coding agent is about to introduce a new dependency and you want a quick licence-risk read on the package and its transitive dependencies, especially for hosted or closed-source distribution scenarios.
Requirements
A remote MCP endpoint; no local package, account, API key or environment variable is declared. Network access to the hosted endpoint is required.
Before you install
The server is hosted by a third party, so the package names and dependency information you submit are sent to that service. Results are advisory licence-risk signals, not legal advice; verify licensing before shipping.

Installation

In SourceWeft

  1. Open LicenseGate in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.Computersmarts1%2Flicensegate/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "licensegate": {
      "type": "http",
      "url": "https://licensegate.onrender.com/mcp"
    }
  }
}

Tools

1

check_software_license

Check a software package and its dependency tree for open-source licence risk before adding it to a project. ecosystem examples: pypi, npm, maven, cargo use_case examples: hosted-saas distributed-closed-source

Parameterspackagerequiredversionrequireduse_caseecosystemrequired

Version history

1
  1. v0.3.0LatestSep 16, 2026

Score

83% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • LicenseNot applicable

    A hosted service is used under its provider's terms, so no license is expected here. This check is left out of the percentage.