Back to Browse

Sunlicense MCP Server

Developer ToolsLow Risk10.0MCP RegistryLocalRemote
Free

Server data from the Official MCP Registry

Manage software license keys: issue, suspend and revoke licenses, free machines, see customers.

About

Manage software license keys: issue, suspend and revoke licenses, free machines, see customers.

Remote endpoints: streamable-http: https://api.sunlicense.com/mcp

Security Report

10.0
Low Risk10.0Low Risk

Valid MCP server (1 strong, 1 medium validity signals). No known CVEs in dependencies. Imported from the Official MCP Registry. 1 finding(s) downgraded by scanner intelligence.

Endpoint verified · Requires authentication · 2 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

What You'll Need

Set these up before or after installing:

A SunLicense personal access token (slp_...): dashboard, Settings, Access tokens.Required

Environment variable: SUNLICENSE_TOKEN

Optional API key (slk_...) that turns on the test_validate tool.Required

Environment variable: SUNLICENSE_API_KEY

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Documentation

View on GitHub

From the project's GitHub README.

SunLicense MCP server

Let your AI assistant run SunLicense, the license key service for software people sell (Minecraft plugins and mods, FiveM resources, Discord bots, desktop apps, games and tools): issue, suspend and revoke licenses, free a customer's machine, block a leaked key, look up customers, build automations, read license-check stats, and add a license check to your code.

It's SunLicense's official MCP server, hosted at:

https://api.sunlicense.com/mcp

Streamable HTTP with OAuth: the first time a tool runs, your assistant opens SunLicense in the browser, you sign in, untick any permission you don't want to give, and choose Connect. No API key to copy. Prefer a local server with a token (scripts, CI, no browser)? Use sunlicense mcp below.

MCP is included in every SunLicense plan: Free (50 tool calls a day), Lite (300) and Standard (3,000). Sign up free at app.sunlicense.com.

mcp-name: com.sunlicense/mcp

Connect

claude.ai, Claude Desktop and mobile: Settings → Connectors → Add custom connector → name SunLicense, URL https://api.sunlicense.com/mcp → Connect.

ChatGPT (a plan that allows custom MCP servers): chatgpt.com/plugins → Add → Add custom MCP server → URL as above, authentication OAuth, default advanced settings.

Claude Code:

claude mcp add --transport http sunlicense https://api.sunlicense.com/mcp

then /mcp → sunlicense → Authenticate. Or install the SunLicense plugin, which adds a skill for writing license checks too.

Cursor: add to ~/.cursor/mcp.json (or the project's .cursor/mcp.json), then Connect in Settings → MCP:

{
  "mcpServers": {
    "sunlicense": { "url": "https://api.sunlicense.com/mcp" }
  }
}

VS Code (GitHub Copilot agent mode):

code --add-mcp '{"name":"sunlicense","type":"http","url":"https://api.sunlicense.com/mcp"}'

Windsurf: add to ~/.codeium/windsurf/mcp_config.json:

{
  "mcpServers": {
    "sunlicense": { "serverUrl": "https://api.sunlicense.com/mcp" }
  }
}

Codex CLI:

codex mcp add sunlicense --url https://api.sunlicense.com/mcp
codex mcp login sunlicense

Cline, Gemini CLI and other clients: add a remote (Streamable HTTP) server with the URL above; any client that supports MCP OAuth works. It identifies itself with a Client ID Metadata Document or Dynamic Client Registration.

Local server: sunlicense mcp

The same tools run locally from the sunlicense CLI (macOS, Linux, Windows; npm installs a single binary). Create a personal access token in the dashboard (Settings → Access tokens) and add:

{
  "mcpServers": {
    "sunlicense": {
      "command": "npx",
      "args": ["-y", "@sunlicense/cli@latest", "mcp"],
      "env": { "SUNLICENSE_TOKEN": "slp_..." }
    }
  }
}

With the CLI installed (npm install -g @sunlicense/cli), sunlicense mcp install writes this for the assistants it finds. SUNLICENSE_API_KEY (an slk_ API key) also turns on test_validate, a real license check. Both servers share your organization's daily allowance.

What it can do

Try: "Issue a Pro license for jane@example.com", "Why is AX8P-… failing?", "Someone posted my key on a forum, stop it", "How many license checks failed this week, and why?", "Add SunLicense to this Paper plugin".

Prompts: add_licensing (set up licensing in this project), investigate_license, block_leak, build_automation. Resources: SDK snippets (sunlicense://sdk/{language}) and the docs.

Products and policies

ToolWhat it does
list_productsList productsreads
create_productCreate a productchanges
delete_productDelete a productchanges, asks first
list_policiesList policiesreads
create_policyCreate a policy (plan/tier)changes
update_policyChange a policy (plan/tier)changes, asks first
delete_policyDelete a policychanges, asks first

Licenses

ToolWhat it does
list_licensesList licensesreads
get_licenseShow a licensereads
issue_licenseIssue a licensechanges
suspend_licenseSuspend a licensechanges, asks first
reinstate_licenseReinstate a licensechanges
revoke_licenseRevoke a licensechanges, asks first
delete_licenseDelete a licensechanges, asks first
reveal_license_keyReveal a license keychanges
rotate_license_keyGive a license a new keychanges, asks first
offline_license_fileOffline license filereads

Machines and IP addresses

ToolWhat it does
list_machinesList a license's machinesreads
deactivate_machineDeactivate a machinechanges, asks first
list_license_ipsList a license's IP addressesreads
release_license_ipFree a license's IP addresschanges, asks first

Customers

ToolWhat it does
list_customersList customersreads
create_customerAdd a customerchanges
update_customerEdit a customerchanges
block_customerBlock a customerchanges, asks first
unblock_customerUnblock a customerchanges
merge_customersMerge two customerschanges, asks first
delete_customerDelete a customerchanges, asks first

Blacklist and exclusion rules

ToolWhat it does
list_access_rulesList access rulesreads
add_access_ruleAdd a blacklist or exclusion rulechanges
delete_access_ruleDelete an access rulechanges, asks first

API keys and team

ToolWhat it does
list_api_keysList API keysreads
create_api_keyCreate an API keychanges
revoke_api_keyRevoke an API keychanges, asks first
sign_out_memberSign a member outchanges, asks first

Automations

ToolWhat it does
automation_catalogAutomation building blocksreads
list_automationsList automationsreads
get_automationShow an automationreads
validate_automationCheck an automationreads
create_automationCreate an automation (switched off)changes
update_automationChange an automationchanges, asks first
test_automationTest-run an automationreads
enable_automationSwitch an automation onchanges, asks first
disable_automationSwitch an automation offchanges, asks first
list_automation_runsList an automation's runsreads

Stats and setup

ToolWhat it does
licensing_statsLicensing statsreads
validation_statsValidation statsreads
integration_statusIntegration statusreads
mcp_usageMCP calls todayreads
test_validateTest a license check (CLI only)changes

Trash

ToolWhat it does
list_trashList the Trashreads
restore_from_trashRestore from the Trashchanges

Product analytics

ToolWhat it does
analytics_summaryProduct analytics summaryreads
analytics_breakdownProduct analytics breakdownreads
analytics_featuresProduct feature usagereads

Code obfuscation

ToolWhat it does
obfuscate_fileObfuscate a filechanges
obfuscation_statusObfuscation run statusreads
obfuscation_profiles_listList obfuscation profilesreads

Code and docs

ToolWhat it does
sdk_snippetSDK snippetreads
search_docsSearch the docsreads

"Asks first" tools are marked destructive (destructiveHint), so assistants ask before running them. Every tool has a title and explicit read-only, destructive and open-world hints.

Safety and privacy

  • The assistant acts as you: only what your role and the permissions you approved allow. Changes say "Issued by AI assistant (…)" on the license.
  • License keys stay masked (AX8P-XXXX-XXXX-XXXX); a full key is shown only when you ask (reveal_license_key).
  • SunLicense receives the tool calls only (the tool's name and arguments), never your prompts, chats or code.
  • Disconnect any time: dashboard → Settings → Access tokens → Connected AI apps. Unused connections end after 30 days.

Details: Connect claude.ai, ChatGPT and other apps, sunlicense mcp, privacy policy.

For developers

Endpointhttps://api.sunlicense.com/mcp (Streamable HTTP, stateless, JSON responses)
AuthOAuth 2.1, authorization code with PKCE (S256); protected resource metadata, authorization server metadata
ClientsClient ID Metadata Documents or Dynamic Client Registration; https or loopback redirect URIs
Unauthenticated request401 with WWW-Authenticate: Bearer resource_metadata=…
Registrycom.sunlicense/mcp in the official MCP Registry

This repository holds the listing files (server.json, lhm.plugin.json, .cursor-plugin/, glama.json); the server itself is part of SunLicense Cloud.

Support

docs.sunlicense.com · Support · hello@sundevs.com · status.sunlicense.com

License

The files in this repository: MIT No Attribution. SunLicense itself is a hosted service under its terms.

Reviews

No reviews yet

Be the first to review this server!