# AgentsTools License Compliance Scanner

> AgentsTools License Compliance Scanner is a paid API for AI agents from api.agentstools.dev, paid per call via x402, $0.15/call, status unknown (last checked 2026-09-15).

Scans a full dependency list or package manifest for SPDX license compliance and returns per-dependency plus aggregate copyleft contamination verdicts.

## Facts

- Endpoint: POST https://api.agentstools.dev/license/scan
- Price: $0.15/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/agentstools-license-compliance-scanner-4530858f
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_Vn1rGI1obYUlwOOAOguDN

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability agentstools-license-compliance-scanner-4530858f -d '<json body>'
```

Example prompt: Scan these npm dependencies for license compliance — ['react@18.2.0', 'lodash@4.17.21', 'gpl-module@2.0.0'] — we're shipping a SaaS product under MIT and I need to know if any of them are copyleft problems.

## When to prefer this

Use this endpoint when you need a fast, automated, whole-manifest license compliance check across npm, PyPI, Go, Maven, Cargo, or NuGet ecosystems in a single API call, especially when you need per-dependency granularity plus an aggregate copyleft contamination verdict for CI/CD pipelines or pre-release audits.

## Known failure modes

- Unrecognized or unpublished package versions may fail to resolve a license
- Ambiguous or dual-licensed packages may return uncertain verdicts
- Ecosystem mismatch between declared ecosystem and actual package registry can cause lookup failures
- Malformed dependency strings not matching name-at-version convention return validation errors
- Non-SPDX or proprietary licenses may not be resolved and appear as unknown

## How this service works

License-compliance verdict for a whole dependency list or parsed manifest in one call. Accepts name-at-version strings, a parsed package.json, a requirements.txt list or go.mod imports, resolves each declared SPDX license, and returns a per-dependency plus aggregate verdict with the worst copyleft contamination point. Automated indicators, not legal advice.

## Output

Returns a per-dependency breakdown of resolved SPDX license identifiers and compliance verdicts, plus an aggregate verdict identifying the worst copyleft contamination point across all listed dependencies. Includes automated risk indicators but is not legal advice.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "ecosystem": {
   "enum": [
    "npm",
    "pypi",
    "go",
    "maven",
    "cargo",
    "nuget"
   ],
   "type": "string",
   "description": "Default ecosystem for entries without one"
  },
  "dependencies": {
   "type": "array",
   "items": {
    "type": "string"
   },
   "description": "Dependencies as name, name-at-version, or ecosystem-prefixed"
  },
  "distribution": {
   "enum": [
    "saas",
    "binary",
    "internal"
   ],
   "type": "string",
   "description": "How you ship it (default saas)"
  },
  "target_license": {
   "type": "string",
   "description": "Your project SPDX license"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/agentstools-license-compliance-scanner-4530858f/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.agentstools.dev](https://www.zero.xyz/host/api.agentstools.dev/llms.txt)