Data licence: reusing VerifyMCP scores and trust reports
The data VerifyMCP publishes is licensed under Creative Commons Attribution-NonCommercial 4.0 International (CC BY-NC 4.0). In short: you can use it, share it and build on it for free, as long as you credit us and you are not doing it for commercial gain. If you want to use it commercially, ask.
What the licence covers
The licence applies to the data VerifyMCP produces:
- Scores and the findings behind them: the total, the tier, the per-category scores and the reasons we give for each.
- Trust reports, in both forms: the markdown at
/servers/<server>/<component>.mdand the JSON at/servers/<server>/<component>.json. The JSON carries the licence in itslicenseproperty. - Change feeds: the RSS at
/servers/<server>/<component>.xmland the JSON at/servers/<server>/<component>/changelog.json. - Score badges: the SVGs at
/badge/<server>.svg. See Score badge for how to embed one. - The aggregate figures on the statistics page, including the charts.
The same licence is stated in the OpenAPI description, in
llms.txt and in the Dataset structured data on the statistics page.
What you can do
CC BY-NC 4.0 lets you:
- Copy and redistribute the data in any medium or format.
- Adapt it: remix it, transform it, build on it, combine it with your own data.
- Do all of that for non-commercial purposes: personal projects, research, teaching, internal tooling that earns nothing, open-source projects that are free to use, and a badge in the README of a server you maintain for free.
Checking servers in your own CI or tooling
We also give this permission on top of the licence: any organisation, including a
company, can use VerifyMCP data to vet MCP servers in its own CI pipelines and internal
tooling. That covers gating a build on a score with
@verifymcp/cli, or reading the trust
report JSON in your own scripts. What still needs asking is the list below:
redistributing the data, reselling it, or building a paid product on it.
What you cannot do
Without asking us first, you cannot use the data primarily for commercial advantage or monetary compensation. In practice that means:
- Selling the data, or a product whose main value is the data.
- Selling access to it, or making it the main reason someone pays for your product.
- Using it to market a paid product or service, for example showing our scores to sell your own scanning or consulting service.
You also cannot suggest that VerifyMCP endorses you or your use, and you cannot add legal terms or technical measures that stop others doing what the licence allows.
If your case sits on the line, ask. It is quicker than guessing.
How to credit us
Credit has to name the source, say the data is licensed CC BY-NC 4.0, link to the licence, and say if you changed it. This line does all of that:
Data from VerifyMCP (verifymcp.io), CC BY-NC 4.0Where you can use links, link VerifyMCP to verifymcp.io and
CC BY-NC 4.0 to
creativecommons.org/licenses/by-nc/4.0:
Data from [VerifyMCP](https://verifymcp.io), [CC BY-NC 4.0](https://creativecommons.org/licenses/by-nc/4.0/)If you altered the data, add “modified” to the line.
Commercial use
Email hello@verifymcp.io with what you want to build and how you would use the data. We will tell you what is possible.
The licence itself
This page is a plain-words summary and is not legal advice. The licence text is the authority: read the CC BY-NC 4.0 deed and the full legal code.