# npm-license-check

> npm-license-check is a paid API for AI agents from intel.rallylive.ca, paid per call via x402, $0.01/call, status unknown (last checked 2026-09-14).

Returns SPDX license, permissiveness classification, repository/homepage/maintainer info, and one-hop dependency license compliance data for an npm package.

## Facts

- Endpoint: GET https://intel.rallylive.ca/dev/npm-license
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/npm-license-check-43b0f77c
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_n7yxzmd7CGJS3w-hxJTh3

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability npm-license-check-43b0f77c
```

Example prompt: What license does the 'axios' npm package use, is it permissive or copyleft, and what licenses do its direct dependencies use?

## When to prefer this

Use this endpoint when you need quick, automated license and compliance metadata for an npm package including its direct dependencies, without having to install the package locally or run a full audit tool. Ideal for CI/CD license gates, vendor due diligence, and pre-merge dependency screening in Node.js projects.

## Known failure modes

- Package not found on npm registry — returns error or null result
- Package has no license field set — license reported as unknown
- Private or scoped packages may be inaccessible
- Network timeout fetching npm registry data
- Dependency license data missing if dependency has no declared license

## How this service works

License and provenance of an npm package: SPDX license of the latest version, whether it is permissive/copyleft/unknown, repository URL, homepage, maintainers (names only), author, funding link, and the license of each direct dependency for a one-hop compliance check. $0.01 per package.

## Output

Returns the SPDX license identifier for the latest version of the package, a classification of whether the license is permissive, copyleft, or unknown, the repository URL, homepage, author, maintainer names, funding link, and a one-hop dependency license map showing the license of each direct dependency.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/npm-license-check-43b0f77c/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from intel.rallylive.ca](https://www.zero.xyz/host/intel.rallylive.ca/llms.txt)