SCANOSS MCP Server

Name: SCANOSS MCP Server
Author: matiasdaloia

@matiasdaloia

Repository

About SCANOSS MCP Server

No overview available yet

#scanoss #mcp-server #open-source-compliance

Basic information

Config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "scanoss-mcp-server": {
      "command": "uv",
      "args": [
        "run",
        "scanoss_mcp_server.py"
      ]
    }
  }
}

Tools

`code`: The code snippet to scan (required)

Overview

What is SCANOSS MCP Server?

The SCANOSS MCP Server integrates SCANOSS’s open source scanning capabilities with the Model Context Protocol, allowing language models to scan code snippets for undeclared open source content, check license compliance for combinations of open source licenses, and get actionable insights on open source components in code.

How to use SCANOSS MCP Server?

Install via uv locally (uv venv, uv pip install -e .) or use the Docker image (docker pull mcp/scanoss-mcp-server). Configure your MCP client (e.g., Claude Desktop) with the appropriate command and environment variables (SCANOSS_API_KEY, SCANOSS_API_URL). Run the server and invoke tools such as scan_code_snippet.

Key features of SCANOSS MCP Server

Detect open source components in code snippets, files, and snippets
Analyze license combinations for compatibility and compliance
Receive well‑formatted actionable scan insights
Works with free (osskb.org) or enterprise SCANOSS instances

Use cases of SCANOSS MCP Server

Scan code generated by an AI assistant for undeclared open source content
Check license compliance before including third‑party code in a project
Get real‑time compliance feedback during code review or development

FAQ from SCANOSS MCP Server

What are the runtime requirements?

Python 3.12+ and the uv package manager are required. Dependencies include the SCANOSS Python SDK and MCP Python SDK.

Is an API key required?

No. If no API key is provided, the server uses the free osskb.org service. An optional key enables enterprise SCANOSS instances.

How can I run the server with Docker?

Pull the image with docker pull mcp/scanoss-mcp-server, then run it with docker run -i --rm -e SCANOSS_API_KEY=your_key -e SCANOSS_API_URL=your_url mcp/scanoss-mcp-server.

What tools does the server expose?

The only tool documented is scan_code_snippet, which scans a code snippet for open source components and requires the parameters code and file_name.