# sicher.halowerk.com License Check

> sicher.halowerk.com License Check is a paid API for AI agents from sicher.halowerk.com, paid per call via x402, $0.002/call, status unknown (last checked 2026-09-15).

Looks up the declared open-source licence for each submitted package via deps.dev and categorises it by copyleft obligation level relevant to commercial and SaaS distribution.

## Facts

- Endpoint: POST https://sicher.halowerk.com/v1/license-check
- Price: $0.002/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/sicher-halowerk-com-license-check-154add3c
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_PA8bLDxn4LyC9_v6BDaOr

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability sicher-halowerk-com-license-check-154add3c -d '<json body>'
```

Example prompt: Can you check the licences on these npm packages — react@18.2.0, lodash@4.17.21, and agpl-licensed-lib@1.0.0 — and tell me which ones would be a problem for a closed-source, sold product, especially anything that bites on running a paid API?

## When to prefer this

Prefer this endpoint when you need a licence-obligation-aware classification (not just the raw SPDX identifier) specifically oriented toward commercial and SaaS risk — it goes beyond raw licence lookup by categorising each licence into permissive/weak-copyleft/strong-copyleft/network-copyleft tiers that matter for a paid, closed, or operated-as-a-service product. Choose it over generic SBOM or vulnerability tools when the question is legal/licence compliance rather than security CVEs.

## Known failure modes

- Package not found on deps.dev — unknown or private package returns an error or null licence
- Package version not found — specific pinned version unavailable in the index
- Licence field missing in package metadata — some packages declare no licence, returned as unknown
- Rate or payload limits exceeded — very large package lists may be rejected or truncated
- Network copyleft classification ambiguity — dual-licensed packages may require manual review

## How this service works

Looks up the declared licence of each package through deps.dev and sorts the result by the only question that matters for a closed, sold product: what does this licence demand. Permissive licences need attribution. Weak copyleft affects changes to the library itself. Strong copyleft can force disclosure of the whole work on distribution. Network copyleft such as AGPL and SSPL bites on operating the software as a service, which is the sharpest case for a paid API.

## Output

Returns each package with its declared licence identifier (e.g. MIT, Apache-2.0, GPL-3.0, AGPL-3.0), a classification of the licence obligation level (permissive/attribution-only, weak copyleft, strong copyleft, network copyleft), and a plain-language summary of what that licence demands in the context of a closed, sold, or SaaS-operated product.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "usage": {
   "enum": [
    "saas",
    "distributed",
    "internal"
   ],
   "type": "string",
   "default": "saas",
   "description": "How you use the code. saas = operated as a network service, which is what triggers AGPL."
  },
  "packages": {
   "type": "array",
   "items": {
    "type": "object",
    "required": [
     "name"
    ],
    "properties": {
     "name": {
      "type": "string",
      "maxLength": 200,
      "minLength": 1
     },
     "version": {
      "type": "string",
      "maxLength": 60,
      "description": "Exact version. The default version is used if omitted."
     },
     "ecosystem": {
      "type": "string",
      "maxLength": 30
     }
    },
    "additionalProperties": false
   },
   "maxItems": 80,
   "minItems": 1,
   "description": "Packages to check."
  },
  "ecosystem": {
   "type": "string",
   "default": "npm",
   "maxLength": 30,
   "description": "Default ecosystem."
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/sicher-halowerk-com-license-check-154add3c/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from sicher.halowerk.com](https://www.zero.xyz/host/sicher.halowerk.com/llms.txt)