An astronaut overseeing a futuristic data hub
Download PDFMarkdown Version

Connect Fossa License Compliance to ChatGPT and Claude

Set it up once and it works in ChatGPT, Claude, Cursor, and any other client you love. It all runs safely in the background, so you can relax and focus on what really matters. Audit your software supply chain through your AI agent.

Ask AI about this Connector

Developed, maintained, and hosted by Vinkius.

MCP VERIFIED · PRODUCTION READY · VINKIUS GUARANTEED

Waiting for input…

Works with modern AI clients that support MCP, including ChatGPT, Claude, Cursor, and more.

ChatGPTClaudeCursorPerplexityGeminiMicrosoft CopilotRaycastMeta AI

Your AI does the work. We keep it safe and sound.

No other AI tool gives you this. Your workflow runs in the client you already love, your account stays protected, and you decide what the agent can and cannot do. It is the whole reason to make the switch.

Each Connector lives inside our infrastructure, the same place where your workflow runs. The three things below are already part of it, working quietly in the background so you never have to think about them. Nothing to add, nothing to set up, nothing to worry about.

A futuristic MCP client docking bay
V8 Isolate01

Each Connector runs inside its own sealed environment.

Each Connector runs inside its own sealed V8 runtime — no access to your files, your system, or other servers. A Connector never sees past its own request.

Kill Switch02

One switch stops every agent. Instantly.

One action deactivates every Connector, revokes every token, and ends every session at once. AI Governance keeps the record.

FinOps per User03

Spending limits that pause instead of surprise.

Every user keeps their own connections and credentials, isolated from everyone else. Anything that would cross your spending limit is held for your approval, not billed.

Three controls, built into the layer your AI connects through.

Curated set · 6 capabilities

We ship only the actions that matter.

Capability set01 / 02

01-03

3 capabilities in this set.

Part of 6 available through FOSSA.

  1. 01

    Get parent projects

    Finds all parent projects that contain a specific dependency. Use this to see the blast radius of a vulnerable package.

  2. 02

    Check vulnerabilities

    Checks for security vulnerabilities using dependency locators. It reads vulnerability data for the locators you provide.

  3. 03

    Get revision

    Retrieves detailed metadata for a specific project revision. It's the fastest way to get context on a particular version.

Capability set02 / 02

04-06

3 capabilities in this set.

Part of 6 available through FOSSA.

  1. 04

    Get revision dependencies

    Fetches the full dependency tree for a specific revision. Use this to inspect your SBOM.

  2. 05

    List projects

    Lists all projects within your FOSSA organization. It supports filtering and pagination for larger organizations.

  3. 06

    List revisions

    Shows the available revisions for a specific project. This helps you track changes across different versions.

Real work

What teams actually run

01

Rapid Vulnerability Response

When a new CVE is released, ask your agent to find every project using that specific dependency.

02

License Compliance Audits

Check specific project revisions to ensure no non-compliant open-source licenses were introduced.

03

SBOM Inspection

Deep-dive into a project's dependency tree to understand exactly what is being shipped.

04

Organization-wide Visibility

Get a high-level view of all projects and their current status via natural language.

Automate a task

Put FOSSA to work on one thing.

Step-by-step automations your AI runs through this Connector: the workflow, the prompts to start with, and the exact capabilities behind each move.

One connector, every AI

FOSSA works with the most popular AI clients.

These are the most popular clients, each with a step-by-step guide: one link, set up once, with governance and visibility built in. And because everything runs on the MCP standard, the same connection also works in any other compatible client — nothing to rebuild.

ClaudeClaudeChatGPTChatGPTGeminiGeminiPerplexityPerplexityGrokGrokMicrosoft CopilotMicrosoft CopilotCursorCursorVS CodeVS CodeWindsurfWindsurfJetBrainsJetBrainsClineClineLangChainLangChainVercel AI SDKVercel AI SDKLovableLovableZ.aiZ.aiRaycastRaycastQwen CodeQwen CodeKimi CodeKimi CodeLe ChatLe Chat

Building your own app? The connector is yours to use.

You don't need a client to put FOSSA to work: the same hosted connection plugs into your own applications and agent code, with the same governance on every request. Build with it, chat with it — one connection for both.

Observed, not estimated

1072ms average. Fast in production.

FOSSA is checked daily against the live service.

Daily averagePeak 1382ms
Oct 3Today
Fastest day
794ms
Slowest day
1382ms
14-day trend
Stable-2%

Connect your client

One URL. Every client.

Activate the Connector, copy your link, and paste it into the client you already use. 6 capabilities arrive ready to run.

Preview access · not provider authentication

The vk_preview_* token belongs to Vinkius preview infrastructure. It lets Claude discover and display the capabilities of FOSSA, so you can see the experience inside your AI.

It does not authenticate your account with FOSSA. Actions requiring credentials or live account data may not run until you activate the Connector and authorize the service.

FOSSA Connector

You're all set. Choose your MCP client and follow the setup instructions.

Connector linkhttps://edge.vinkius.com/vk_preview_OrrKjBZcQcoQ9lOxWynXvkokseUtlrQY2s1yYaDD/mcp

Claude Desktop

Follow the steps below to connect in seconds.

  1. 1In Claude Desktop, open Settings → Connectors.
  2. 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
  3. 3Click Add and start a new chat — FOSSA capabilities are ready to use.
Configuration · claude_desktop_config.jsonCopy
{
  "mcpServers": {
    "fossa-license-compliance-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_OrrKjBZcQcoQ9lOxWynXvkokseUtlrQY2s1yYaDD/mcp"
    }
  }
}
  • Claude
  • ChatGPT
  • Cursor
  • VS Code
  • Windsurf
  • Claude Code
  • JetBrains
  • Cline

Step-by-step instructions for each client are in the guide. How to connect

Guided setup for Claude? Set up FOSSA in Claude and other AIs

See all the AI clients this connector works with ↑

Who it's for

Built for the work FOSSA owners hand off.

This MCP is built for technical teams managing software supply chain risk.

  • 01

    Security Engineers

    They use the agent to quickly locate where vulnerable packages are used across the organization.

  • 02

    Legal and Compliance Teams

    They audit project revisions for license compliance without using the FOSSA UI.

  • 03

    DevOps and Architects

    They verify dependency trees and project metadata directly from their code editors.

FAQ

Questions FOSSA owners ask.

  • 01

    How do I connect FOSSA to my AI client?

    You subscribe to the MCP on Vinkius and enter your FOSSA API Token. Once connected, you can use it immediately in Claude, Cursor, or Windsurf.

  • 02

    Do I need to use the FOSSA web dashboard?

    No. This MCP allows you to perform most auditing, project listing, and dependency checks directly through your AI agent.

  • 03

    Can I check for vulnerabilities in specific packages?

    Yes. You can provide dependency locators to your agent, and it will check them for known vulnerabilities.

  • 04

    How does the MCP handle large organizations?

    The list_projects capability includes support for filtering and pagination to handle large numbers of projects.

  • 05

    What information can I get about a project revision?

    You can retrieve detailed metadata and the full dependency tree for any specific revision of a project.

  • 06

    Can I find which projects are affected by a specific vulnerable package?

    Yes. Use the get_parent_projects capability with the dependency locator (e.g., npm+coa$2.0.2) to see every project in your organization that includes that specific dependency.

  • 07

    How do I check for security vulnerabilities in a list of dependencies?

    You can use the check_vulnerabilities capability by providing an array of dependency locators. The agent will return any known security issues impacting those specific versions.

  • 08

    Can I see the full dependency list for a specific project version?

    Absolutely. By using get_revision_dependencies with a revision locator, you can retrieve the complete list of dependencies identified by FOSSA for that specific build or release.

Explore

More in Developer Tools

Suggestions

Connect FOSSA to Claude, Cursor, ChatGPT & more