Skip to content

Relicense server to AGPL-3.0 (packages stay MIT)#440

Merged
MikeyPetrillo merged 1 commit into
mainfrom
claude/sweet-brown-i99jl3
Jul 18, 2026
Merged

Relicense server to AGPL-3.0 (packages stay MIT)#440
MikeyPetrillo merged 1 commit into
mainfrom
claude/sweet-brown-i99jl3

Conversation

@MikeyPetrillo

Copy link
Copy Markdown
Owner

Relicenses the self-hostable server to AGPL-3.0 while keeping the three npm packages MIT. Prepared as a draft for legal review before merge.

Why the split

  • Server → AGPL-3.0: protects against a competitor forking the service, hosting a closed modified version, and undercutting you. AGPL's network-copyleft means a modified server offered over a network must share its source. The code stays fully open; only the fork-and-close path is removed.
  • client/ (buyer SDK), mcp/ (connector), tollbooth/ (middleware) → stay MIT: these are adoption tools. AGPL would poison embedding them in proprietary apps. Also, the site publicly promises agent402-tollbooth stays MIT (tollbooth-cloud.js:293).

What changed

  • LICENSE: MIT → verbatim GNU AGPL-3.0 (GitHub/SPDX auto-detects).
  • NOTICE (new): documents the per-directory license split + copyright. The three packages keep their existing MIT LICENSE files.
  • Root package.json license → AGPL-3.0-or-later; package license fields untouched.
  • Machine-readable /.well-known/x402 license field → AGPL-3.0-or-later + its test.
  • Server-describing copy (blog, FAQ, community, seo, contribute nav, README badge+body, CONTRIBUTING, 3 docs) now reads AGPL with a note that the packages are MIT.
  • Tollbooth/package-describing copy (ledger-home, sell, compare, tollbooth-cloud, README tollbooth line, wiki) deliberately left MIT.
  • CHANGELOG entry added.

Verified

Discovery manifest serves AGPL-3.0-or-later live; FAQ shows the split; the tollbooth compare page still reads MIT; gitleaks tree clean; discovery tests green; all edited files syntax-clean.

For counsel before merging

  1. Outside contributor PRs were merged under MIT. AGPL can incorporate MIT code, but confirm the relicense of the aggregate is clean (inbound=outbound was MIT at contribution time).
  2. .cursor-plugin/plugin.json left MIT as a client-side integration adapter, pending review.
  3. Existing MIT commits and the 5 existing forks remain MIT; relicensing binds future work, not the past.

🤖 Generated with Claude Code

Protects the self-hostable server from fork-and-host competition without
closing the source: run a modified server as a network service and the AGPL
requires you to offer that modified source to its users. The buyer SDK
(client/), MCP connector (mcp/), and pay-per-crawl middleware (tollbooth/)
stay MIT so they can be embedded without copyleft obligation, and because
the site publicly promises agent402-tollbooth stays MIT.

- LICENSE: MIT -> verbatim GNU AGPL-3.0 (GitHub/SPDX auto-detects it).
- NOTICE (new): documents the per-directory split and the Havok Holdings
  copyright; the three packages keep their own MIT LICENSE files (unchanged).
- root package.json license -> AGPL-3.0-or-later (packages' license fields
  untouched).
- Machine-readable manifest: /.well-known/x402 license field -> AGPL-3.0-or-later
  (src/discovery.js), plus its differentiator copy; test-discovery.js updated.
- Served copy that describes the SERVER now reads AGPL-3.0 with a note that
  the packages are MIT: blog, FAQ (pages.js), community stat, seo optional
  list, contribute-a-tool nav, README (badge + body), CONTRIBUTING
  (inbound=outbound now per-component), docs (base-mcp-plugin,
  ecosystem-listings, anthropic-directory-submission).
- Copy that describes TOLLBOOTH or the packages stays MIT and is untouched:
  ledger-home, sell, compare, tollbooth-cloud, README tollbooth line,
  wiki/Pay-per-crawl.
- CHANGELOG entry added.

Verified: discovery manifest serves AGPL-3.0-or-later live, FAQ shows the
split, the tollbooth compare page still reads MIT, gitleaks tree clean,
all edited files syntax-clean, discovery tests green.

Open for review, not to be treated as final legal effect without counsel:
outside contributor PRs were merged under MIT (AGPL can incorporate MIT, but
confirm), and .cursor-plugin/plugin.json is left MIT as a client-side
integration adapter pending that review.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
@MikeyPetrillo
MikeyPetrillo marked this pull request as ready for review July 18, 2026 03:20
@MikeyPetrillo
MikeyPetrillo merged commit 13166bc into main Jul 18, 2026
15 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant