FOSSA (License Compliance) Connector for AI agents.
6 live capabilities
Audit open-source licenses and security vulnerabilities in your software supply chain.
Waiting for input…
Why people use FOSSA (License Compliance)
FOSSA for fixing manual license compliance headaches
With this Connector, you just tell your agent what you need. It pulls the revision data and metadata instantly, turning a multi-hour audit into a quick conversation. You get to skip the clicking and start making decisions.
What Vinkius changes
You get to replace manual dashboard navigation with direct, natural language queries into your software supply chain.
Use it from Claude, ChatGPT, Cursor or another AI client you already have.
One account · 5,900+ Connectors
- Real-world use case 01
Rapid Vulnerability Impact Assessment
A security engineer finds a critical CVE in a common library and needs to know which 50 projects are affected.
- Real-world use case 02
Automated License Compliance Audits
A legal team needs to verify the license of a new release.
- Real-world use case 03
Software Bill of Materials (SBOM) Mapping
A developer wants to see the full dependency tree for a legacy app.
Complete set · 6capabilities
The complete FOSSA (License Compliance) capability set.
These are the exact actions your AI can choose when you ask it to work with FOSSA (License Compliance).
01—03
3 capabilities in this set.
Part of 6 available through FOSSA (License Compliance).
- 01 Capability
List revisions
Use list_revisions to see the history of a project. It lets you browse through different versions to see how the software has evolved.
- 02 Capability
List projects
Use list_projects to view all projects in your organization. This capability supports filtering and pagination so you can quickly find specific workspaces.
- 03 Capability
Get revision dependencies
Use get_revision_dependencies to see the full dependency list for a specific version. It helps you understand the exact software bill of materials for any given revision.
04—06
3 capabilities in this set.
Part of 6 available through FOSSA (License Compliance).
- 04 Capability
Check vulnerabilities
Use check_vulnerabilities to scan specific dependency locators for security issues. It gives you a direct look at risks without needing to browse the dashboard.
- 05 Capability
Get revision
Use get_revision to pull the metadata for a specific project version. It provides the core details you need to inspect a revision's properties.
- 06 Capability
Get parent projects
Use get_parent_projects to find every project that contains a specific dependency. This is the fastest way to do an impact assessment when a package is flagged.
Set up in minutes
One URL. Then ask FOSSA (License Compliance) to work.
Claude and ChatGPT only need the Connector URL. Copy it once, add it in settings, and use FOSSA (License Compliance) from the conversation.
Choose your client
Live previewAdvanced clients IDE · CLI
Claude · Web + desktop
Connector URL · ready to paste
Streamable HTTPhttps://edge.vinkius.com/vk_preview_OrrKjBZcQcoQ9lOxWynXvkokseUtlrQY2s1yYaDD/mcp - Step 01
Open Connectors
In Claude Web or Claude Desktop, open Settings and choose Connectors.
- Step 02
Add the URL
Choose Add custom connector, name it FOSSA (License Compliance), and paste the URL above.
- Step 03
Turn it on in chat
Select +, open Connectors, and enable FOSSA (License Compliance) for the conversation.
ChatGPT · Web + desktop
Connector URL · ready to paste
Streamable HTTPhttps://edge.vinkius.com/vk_preview_OrrKjBZcQcoQ9lOxWynXvkokseUtlrQY2s1yYaDD/mcp - Step 01
Open MCP settings
On desktop, open Settings and MCP servers. On web, open your workspace app or connector settings.
- Step 02
Add the URL
Choose Add server with Streamable HTTP, or create a custom MCP app, then paste the FOSSA (License Compliance) URL.
- Step 03
Save and start
Save the connection and enable FOSSA (License Compliance) in your conversation. Desktop may ask you to restart once.
Cursor · IDE configuration
Advanced setup
{
"mcpServers": {
"fossa-license-compliance": {
"url": "https://edge.vinkius.com/vk_preview_OrrKjBZcQcoQ9lOxWynXvkokseUtlrQY2s1yYaDD/mcp"
}
}
}- Step 01
Open MCP Settings
Press Cmd+Shift+P (macOS) or Ctrl+Shift+P (Windows/Linux) → search "MCP Settings"
- Step 02
Add the server config
Paste the JSON configuration above into the mcp.json file that opens
- Step 03
Save the file
Cursor will automatically detect the new Connector
- Step 04
Start using FOSSA (License Compliance)
Open Agent mode in chat and ask: "Using FOSSA (License Compliance), help me...". 6 tools available
VS Code Copilot · IDE configuration
Advanced setup
{
"mcpServers": {
"fossa-license-compliance": {
"url": "https://edge.vinkius.com/vk_preview_OrrKjBZcQcoQ9lOxWynXvkokseUtlrQY2s1yYaDD/mcp"
}
}
}- Step 01
Create MCP config
Create a .vscode/mcp.json file in your project root
- Step 02
Add the server config
Paste the JSON configuration above
- Step 03
Enable Agent mode
Open GitHub Copilot Chat and switch to Agent mode using the dropdown
- Step 04
Start using FOSSA (License Compliance)
Ask Copilot: "Using FOSSA (License Compliance), help me...". 6 tools available
Windsurf · IDE configuration
Advanced setup
{
"mcpServers": {
"fossa-license-compliance": {
"url": "https://edge.vinkius.com/vk_preview_OrrKjBZcQcoQ9lOxWynXvkokseUtlrQY2s1yYaDD/mcp"
}
}
}- Step 01
Open MCP Settings
Go to Settings → MCP Configuration or press Cmd+Shift+P and search "MCP"
- Step 02
Add the server
Paste the JSON configuration above into mcp_config.json
- Step 03
Save and reload
Windsurf will detect the new server automatically
- Step 04
Start using FOSSA (License Compliance)
Open Cascade and ask: "Using FOSSA (License Compliance), help me...". 6 tools available
Cline · IDE configuration
Advanced setup
{
"mcpServers": {
"fossa-license-compliance": {
"url": "https://edge.vinkius.com/vk_preview_OrrKjBZcQcoQ9lOxWynXvkokseUtlrQY2s1yYaDD/mcp"
}
}
}- Step 01
Open Cline MCP Settings
Click the Connectors icon in the Cline sidebar panel
- Step 02
Add remote server
Click "Add Connector" and paste the configuration above
- Step 03
Enable the server
Toggle the server switch to ON
- Step 04
Start using FOSSA (License Compliance)
Ask Cline: "Using FOSSA (License Compliance), help me...". 6 tools available
Claude Code · Terminal command
Advanced setup
claude mcp add fossa-license-compliance --transport http "https://edge.vinkius.com/vk_preview_OrrKjBZcQcoQ9lOxWynXvkokseUtlrQY2s1yYaDD/mcp"- Step 01
Install Claude Code
Run npm install -g @anthropic-ai/claude-code if not already installed
- Step 02
Add the Connector
Run the command above in your terminal
- Step 03
Verify the connection
Run claude mcp to list connected servers, or type /mcp inside a session
- Step 04
Start using FOSSA (License Compliance)
Ask Claude: "Using FOSSA (License Compliance), show me...". 6 tools are ready
Where the request belongs
Work FOSSA can move forward.
This is for security engineers tired of manual audits, legal teams needing fast license verification, and DevOps architects who need to map out dependencies without the clicking fatigue.
Security Engineer
Uses the Connector to quickly identify which projects are running vulnerable packages across the whole organization.
Legal & Compliance Officer
Audits project revisions for license compliance to ensure the company stays out of legal trouble.
DevOps Architect
Verifies dependency trees and project metadata to maintain a clean software bill of materials.
Build the capability set
Add more capabilities.
Each Connector adds new actions and data without changing how you work.
Browse ConnectorsBlack Duck (Synopsys)
Secure your open source supply chain via Black Duck. list projects, versions, and vulnerabilities directly from any AI agent.
Google Deps.dev Security Hacker
Transform your AI into a Senior DevSecOps Engineer. Instantly audit any open-source package, hunt for hidden supply-chain threats in dependency trees, and analyze full GitHub repositories using Google's deps.dev API. No authentication required.
Socket.dev (Dependency Security)
Protect your software supply chain by scanning dependencies, checking package security scores, and monitoring threat feeds directly from your AI agent.
Snyk
Bring your Snyk code security ecosystem directly to your AI. Analyze vulnerabilities, project metadata, and scan issues right from your editor.
License Compatibility Checker
Audit software licenses and check compatibility between dependencies.
Aikido Security
Query security vulnerabilities via Aikido. list open issues, check repositories, monitor cloud assets, and track compliance directly from any AI agent.
Bring your own AI
Change the model, client or framework. Keep FOSSA connected.
-
Claude -
ChatGPT -
Gemini -
Cursor -
VS Code -
Windsurf -
ZCode -
Cline -
Zed -
Continue -
Kiro -
Roo Code -
Zencoder -
Goose -
Void -
Augment Code -
Amp -
Qodo -
Tabnine -
Pieces -
Sourcegraph Cody -
JetBrains -
Warp -
Amazon Q -
Antigravity -
BoltAI -
Raycast -
Jan -
LM Studio -
AnythingLLM -
Open WebUI -
Msty -
Cherry Studio -
LibreChat -
TypingMind -
Chorus -
5ire -
n8n -
LangChain -
LlamaIndex -
CrewAI -
Vercel AI SDK
Before you connect
Questions about FOSSA.
The practical details behind the request, access and result.
How does the FOSSA MCP help with license compliance?
It lets you query your project revisions and metadata using natural language. You can quickly check if your software meets legal requirements without manually clicking through the FOSSA dashboard.
Can I use the FOSSA MCP to find security vulnerabilities?
Yes, you can ask your agent to scan specific dependency locators for known vulnerabilities. It returns a clear list of risks found in your software supply chain.
Does the FOSSA MCP work with my existing FOSSA account?
Yes, it connects directly to your existing FOSSA account using your API token. It gives your AI agent the ability to read and query your organization's data.
How do I use the FOSSA MCP to audit my software supply chain?
Once connected, you can simply ask your agent to list projects, pull dependency trees, or find every project using a specific library to identify risks across your organization.
Can the FOSSA MCP show me which projects use a specific package?
It can. You can ask the agent to identify all parent projects containing a specific dependency, which is perfect for understanding the impact of a security vulnerability.
Can I find which projects are affected by a specific vulnerable package?
Yes. Use the get_parent_projects capability with the dependency locator (e.g., npm+coa$2.0.2) to see every project in your organization that includes that specific dependency.
How do I check for security vulnerabilities in a list of dependencies?
You can use the check_vulnerabilities capability by providing an array of dependency locators. The agent will return any known security issues impacting those specific versions.
Can I see the full dependency list for a specific project version?
Absolutely. By using get_revision_dependencies with a revision locator, you can retrieve the complete list of dependencies identified by FOSSA for that specific build or release.
One connection away
Give your agent a direct line to FOSSA.
Connect FOSSA once. Keep it beside 5,900+ managed Connectors when the next task needs more.
Explore every Connector No credit card required · Free tier available