• RISK
  • CLEAN
  • HUMAN
  • DATA

How to audit project license compliance with your AI

Connect FOSSA to your AI client to scan project metadata for license risks. Your agent handles the heavy lifting of digging through revisions to find problematic dependencies.

Ask AI about this page

Short answer

How can I audit project license compliance with my AI?

Your AI pulls project and revision data from FOSSA to identify non-compliant open-source licenses. It compares your current project state against your compliance policies to flag risks. You'll get a clear breakdown of which revisions contain problematic licenses.

Audit outcomes

Where your findings land.

The AI organizes the results based on how you need to act on them.

RISK

Non-compliant licenses

The AI identifies specific revisions where open-source licenses violate your rules. You get a list of exact versions that need attention.

CLEAN

Compliant revisions

The AI confirms which project versions meet all your license requirements. This gives you confidence to ship specific builds.

HUMAN

Policy decisions

The AI flags the conflicts, but you decide if a specific license exception is acceptable. It presents the data so you can make the final call.

DATA

Project metadata

The AI pulls the raw dependency and version information from FOSSA. This provides the context needed to understand why a license was flagged.

The workflow

What your AI does when the audit request arrives.

Your agent moves through your FOSSA data to isolate the exact versions you want to check.

  1. Identify projects

    The AI looks through your FOSSA account to find the specific software projects you want to audit.

    list_projects

  2. Locate revisions

    Once a project is selected, the AI finds all available versions and revisions for that specific codebase.

    list_revisions

  3. Fetch metadata

    The AI pulls the deep dependency and license data for a specific point in your project's history.

    get_revision

  4. Flag violations

    The AI compares the fetched license data against your compliance requirements to find mismatches.

    get_revision

Try it

Copy these to start.

Use these prompts to kick off an audit.

Starting points

Swap out the project names and revision IDs with your actual FOSSA data.

FOSSA Connector

You're all set. Choose your MCP client and follow the setup instructions.

Connector linkhttps://edge.vinkius.com/vk_preview_OrrKjBZcQcoQ9lOxWynXvkokseUtlrQY2s1yYaDD/mcp

Claude Desktop

Follow the steps below to connect in seconds.

  1. 1In Claude Desktop, open Settings → Connectors.
  2. 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
  3. 3Click Add and start a new chat — FOSSA capabilities are ready to use.
Configuration · claude_desktop_config.jsonCopy
{
  "mcpServers": {
    "fossa-license-compliance-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_OrrKjBZcQcoQ9lOxWynXvkokseUtlrQY2s1yYaDD/mcp"
    }
  }
}
Copy into chat04

  • List all my projects in FOSSA and tell me which one has the most recent revision.

  • Check the latest revision of the 'web-app-frontend' project for any GPL licenses.

  • Find the revision ID for the 'auth-service' project and check its license compliance.

  • Are there any non-compliant licenses in the 'payment-gateway' project's last three revisions?

  • Claude
  • ChatGPT
  • Cursor
  • VS Code
  • Windsurf
  • Claude Code
  • JetBrains
  • Cline

Start here

Connect FOSSA once, then ask.

Just link your FOSSA account through Vinkius. Your credentials stay encrypted, and you can immediately start asking your AI about your project licenses.

Connect FOSSA to your AI

FAQ

How this task behaves.

  • 01

    Can the AI fix license violations automatically?

    No. The AI identifies the non-compliant licenses in your project metadata, but you must manually update your dependencies or change your policies.

  • 02

    Can the AI delete a project in FOSSA?

    No. The AI only has permission to read project, revision, and metadata information.

  • 03

    How does the AI know which licenses are bad?

    The AI reads the license data provided by FOSSA and compares it to the compliance rules you've established.

  • 04

    Does the AI see my source code?

    No. The AI only accesses the project metadata and license information provided by the FOSSA tools.

  • 05

    Can I audit a specific version of a library?

    Yes. By using the revision data, the AI can look at the specific state of a project at a particular point in time.

  • More questions about FOSSA? See everything the FOSSA Connector can do

Connect FOSSA to Claude, Cursor, ChatGPT & more