Fossa License ComplianceをChatGPTとClaudeに接続

• 01 / 03ライセンス監査の方法
• 02 / 03SBOMの調査方法
• 03 / 03依存関係の影響範囲を特定する方法

最速日

794ms

最遅日

1382ms

14日間の傾向

安定-2%

FOSSA Connector

準備完了です。MCPクライアントを選択し、セットアップ手順に従ってください。

コネクタリンクhttps://edge.vinkius.com/vk_preview_OrrKjBZcQcoQ9lOxWynXvkokseUtlrQY2s1yYaDD/mcpコピー

Claude Desktop

以下の手順で数秒で接続できます。

1. 1In Claude Desktop, open Settings → Connectors.
2. 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
3. 3Click Add and start a new chat — FOSSA capabilities are ready to use.

設定 · claude_desktop_config.jsonコピー

{
  "mcpServers": {
    "fossa-license-compliance-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_OrrKjBZcQcoQ9lOxWynXvkokseUtlrQY2s1yYaDD/mcp"
    }
  }
}

• Claude
• ChatGPT
• Cursor
• VS Code
• Windsurf
• Claude Code
• JetBrains
• Cline

各クライアントの手順ガイドはこちらです。 接続方法

Claude向けのガイド付きセットアップ？ FOSSAをClaudeや他のAIに設定する

このConnectorが対応するすべてのAIクライアントを見る ↑

• 01

  セキュリティエンジニア

  組織全体で脆弱なパッケージがどこで使用されているかを迅速に特定できます。

• 02

  法務・コンプライアンスチーム

  FOSSAのUIを操作することなく、プロジェクトのリビジョンがライセンスを遵守しているか監査できます。

• 03

  DevOps・アーキテクト

  ターミナルやコードエディタから直接、依存関係ツリーやプロジェクトのメタデータを確認できます。

• 01

  How do I connect FOSSA to my AI client?

  You subscribe to the MCP on Vinkius and enter your FOSSA API Token. Once connected, you can use it immediately in Claude, Cursor, or Windsurf.

• 02

  Do I need to use the FOSSA web dashboard?

  No. This MCP allows you to perform most auditing, project listing, and dependency checks directly through your AI agent.

• 03

  Can I check for vulnerabilities in specific packages?

  Yes. You can provide dependency locators to your agent, and it will check them for known vulnerabilities.

• 04

  How does the MCP handle large organizations?

  The list_projects capability includes support for filtering and pagination to handle large numbers of projects.

• 05

  What information can I get about a project revision?

  You can retrieve detailed metadata and the full dependency tree for any specific revision of a project.

• 06

  Can I find which projects are affected by a specific vulnerable package?

  Yes. Use the get_parent_projects capability with the dependency locator (e.g., npm+coa$2.0.2) to see every project in your organization that includes that specific dependency.

• 07

  How do I check for security vulnerabilities in a list of dependencies?

  You can use the check_vulnerabilities capability by providing an array of dependency locators. The agent will return any known security issues impacting those specific versions.

• 08

  Can I see the full dependency list for a specific project version?

  Absolutely. By using get_revision_dependencies with a revision locator, you can retrieve the complete list of dependencies identified by FOSSA for that specific build or release.

• 

  LicenseCheck API AIコネクタ

  Search software licenses — audit permissions and conditions via AI.

  表示
• 

  Black Duck (Synopsys) AIコネクタ

  Secure your open source supply chain via Black Duck — list projects, versions, and vulnerabilities directly fr

  表示
• 

  zrok (Open-Source Tunnel) AIコネクタ

  Securely share local resources with the world using zrok — manage environments, create public/private shares,

  表示
• 

  Google Deps.dev Security Hacker AIコネクタ

  Transform your AI into a Senior DevSecOps Engineer. Instantly audit any open-source package, hunt for hidden s

  表示

おすすめ

• 

  Dependency License Compliance Checker AIコネクタ

  Audit software dependencies against approved SPDX license identifiers to ensure supply-chain compliance.

  表示
• 

  Open-Source Strategy Economics AIコネクタ

  Calculate the economic impact and strategic value of open-source initiatives.

  表示
• 

  Socket.dev (Dependency Security) AIコネクタ

  Protect your software supply chain by scanning dependencies, checking package security scores, and monitoring

  表示
• 

  Joomla (Open-Source CMS) AIコネクタ

  Manage content via Joomla — list and create articles, manage categories and tags, and audit site menus.

  表示