Labs64/NetLicensing-MCP

**The official Labs64 NetLicensing MCP Server** — a natural language interface that lets AI agents manage software licenses, customers, and entitlements through conversational commands.
Works with Claude Desktop, GitHub Copilot (Agent mode), VS Code, JetBrains / IntelliJ IDEA, and any other MCP-compatible client.
---
Why use this?
- **Natural Language Licensing** — Ask your AI assistant to create products, issue licenses, validate entitlements, and generate shop URLs without touching the NetLicensing UI or writing API calls.
- **Full API coverage** — Various tools spanning the entire NetLicensing REST API: products, modules, templates, licensees, licenses, bundles, tokens, transactions, and payment methods.
- **Built-in audit prompts** — Five ready-to-run prompt templates for account audits, expiry sweeps, anomaly detection, and cleanup workflows.
- **Safe by default** — All delete operations expose a force_cascade option; nothing is silently cascaded.
- **Zero-dependency quick start** — Run with uvx or Docker without a local Python install.
---
What can you ask?
Once connected, you can talk to NetLicensing in plain language:
- *"List all products in my NetLicensing account."*
- *"Create a new licensee for customer@example.com under product PTEST."*
- *"Validate the license for licensee L001 — does it pass?"*
- *"Generate a shop URL for licensee L001 so they can self-serve their renewal."*
- *"Which licenses are expiring in the next 30 days?"*
- *"Find any licensees with no active licenses — flag them for cleanup."*
- *"Transfer all licenses from licensee L001 to L002."*
- *"Create an API key token scoped to read-only access."*
- *"Show me all transactions from the last month."*
---
Features
| Area | Tools |
|---|---|
| **Products** | list, get, create, update, delete |
| **Product Modules** | list, get, create, update, delete |
| **License Templates** | list, get, create, update, delete |
| **Licensees** | list, get, create, update, delete, validate, transfer |
| **Licenses** | list, get, create, update (activate/deactivate), delete |
| **Bundles** | list, get, create, update, delete, obtain |
| **Tokens** | list, get, create shop URL, create API token, revoke |
| **Transactions** | list, get, create, update |
| **Payment Methods** | list, get, update |
| **Utilities** | list licensing models, list license types |
| **Audit Prompts** | full account, single customer, expiry sweep, cleanup, anomaly detection |
| **Delete Safety** | force_cascade option on all delete tools |
| **Redaction** | secrets (apiKey, licenseeSecret, nodeSecret, …) masked in all responses and logs |
---
Security defaults
The server is designed to be safe by default:
- **No silent credential fallback** — if NETLICENSING_API_KEY is not set and NETLICENSING_ALLOW_DEMO is not explicitly enabled, the server refuses to start (stdio) or returns 503 (HTTP) rather than silently using demo credentials.
- **Redaction layer** — every tool response passes through a redaction filter. Sensitive fields (apiKey, licenseeSecret, nodeSecret, password, secret) are masked to a partial form (e.g. s3c****ecret). The set is extendable via MCP_REDACT_FIELDS.
- **One-time credentials** — create_api_token and create_shop_token tag their response with "shown_once": true so clients know the credential will not be visible in full again. Subsequent get_token / list_tokens calls return masked values.
- **Delete confirmation** — all destructive operations require a two-step confirmation token flow; nothing is silently cascaded.
---
Quick Start
Option A — uvx (no install required)
Option B — pip
Option C — Docker
stdio (default) — for Claude Desktop / VS Code
HTTP mode — for remote/shared deployments