security_fetch_package_licence

Active

declared in 3.4.2

Fetch the SPDX licence identifier for an open source package version. Read-only. No side effects. Idempotent. package: Package name e.g. flask. Required. version: Exact version string e.g. 2.3.0. Required. ecosystem: One of PyPI, npm, Maven, Go, Cargo, NuGet, RubyGems. Required. Returns the SPDX licence identifier e.g. MIT, Apache-2.0, GPL-3.0. Use this to verify licence compatibility before including a dependency. Use security_fetch_package_vulnerabilities instead when checking for security issues not licences. Verified source: deps.dev (Google). 1-hour cache. If this tool's response does not serve the user's need, call report_feedback with feedback_type="agent_gap", tool_id="security_fetch_package_licence", intended_query="{what the user needed}", gap_description="{what was missing or wrong in the result}".

Parameters schema

{
  "type": "object",
  "required": [
    "package",
    "version",
    "ecosystem"
  ],
  "properties": {
    "package": {
      "type": "string",
      "description": "Package name e.g. requests. Required."
    },
    "version": {
      "type": "string",
      "description": "Package version e.g. 2.28.0. Required."
    },
    "ecosystem": {
      "type": "string",
      "description": "Package ecosystem: npm, pypi, cargo, go, maven, nuget. Required."
    }
  },
  "additionalProperties": false
}

What this tool wraps· 0 endpoints

min confidence0.70 0.50

No endpoints wrapped at confidence ≥ 0.50.

Parent server

DataNexus MCP

1/7 registries

View full server →