WritersLogic Verifiable AI Agent Hub Spdx Policy API
The Spdx Policy API from WritersLogic Verifiable AI Agent Hub — 1 operation(s) for spdx policy.
Work with this as data
Every API here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for apis
7 MCP tools reach this
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This API
curl "https://apis.io/api/v1/apis/writerslogic-com:writerslogic-com-spdx-policy-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
OpenAPI Specification
openapi: 3.2.0
info:
title: WritersLogic Verifiable AI Agent Hub Spdx Policy API
version: 2.0.0
description: Pay-per-call agents settled in USDC on Base via x402. Every response carries a signed provenance envelope.
contact:
name: WritersLogic
url: https://writerslogic.com/agents
email: agents@writerslogic.com
servers:
- url: https://agents.writerslogic.com
tags:
- name: Spdx Policy
paths:
/api/v1/spdx-policy:
post:
operationId: spdx_policy
summary: SPDX license expression parse and policy check
description: 'Parses up to 50 SPDX license expressions (AND, OR, WITH exceptions, + or-later, LicenseRef) and evaluates each against a caller policy (allow list, deny list, allowed exceptions, OSI/FSF flags, copyleft tier) for agents vetting dependency licenses. Returns the canonical expression, per-license flags from the pinned SPDX License List, the verdict, and which licenses satisfy an OR. Does not detect licenses from source text, read package manifests or give legal advice; copyleft tiers are an id-family heuristic, not an SPDX attribute.
Price: 0.005 USDC on Base (x402).'
x-x402-price-usdc: '0.005'
x-x402-amount: '5000'
x-payment-info:
protocols:
- x402
price:
mode: fixed
currency: USD
amount: '0.005'
x-audience: developer
x-sample-url: https://agents.writerslogic.com/api/v1/samples/spdx-policy
security:
- x402: []
- apiKey: []
requestBody:
required: true
content:
application/json:
schema:
type: object
additionalProperties: false
required:
- expressions
properties:
expressions:
type: array
minItems: 1
maxItems: 50
items:
type: string
maxLength: 500
description: SPDX expressions, e.g. 'MIT OR (GPL-2.0-only WITH Classpath-exception-2.0)'.
allow:
type: array
maxItems: 200
items:
type: string
maxLength: 100
description: If non-empty, only these SPDX ids pass (GPL-2.0-only and GPL-2.0 are the same entry; GPL-2.0+ means or-later and must be listed as such).
deny:
type: array
maxItems: 200
items:
type: string
maxLength: 100
description: SPDX ids that always fail.
allowExceptions:
type: array
maxItems: 100
items:
type: string
maxLength: 100
description: If non-empty, only these WITH exception ids pass.
allowLicenseRefs:
type: array
maxItems: 100
items:
type: string
maxLength: 100
description: LicenseRef-* ids the caller has reviewed; other refs yield unknown.
requireOsiApproved:
type: boolean
description: Fail licenses without isOsiApproved in the SPDX list.
requireFsfLibre:
type: boolean
description: Fail licenses without isFsfLibre in the SPDX list.
allowDeprecated:
type: boolean
description: 'Default true: deprecated ids only add a witness. false: they fail.'
denyCopyleft:
type: string
enum:
- none
- strong
- any
description: 'Id-family heuristic: strong = GPL/AGPL/SSPL/EUPL/OSL/CC-BY-SA; any adds LGPL/MPL/EPL/CDDL and similar.'
example:
expressions:
- MIT OR (GPL-3.0-only WITH GCC-exception-3.1)
- Apache-2.0 AND LicenseRef-Internal
allow:
- MIT
- Apache-2.0
allowLicenseRefs:
- LicenseRef-Internal
responses:
'200':
description: Paid result with provenance
content:
application/json:
schema:
type: object
properties:
data:
type: object
properties:
status:
type: string
enum:
- pass
- fail
- unknown
- unsupported
description: 'pass: every rule held. fail: a rule was violated (see witnesses). unknown: the input lacks the evidence to decide. unsupported: outside what this engine covers. Missing evidence is never a pass.'
results:
type: array
items:
type: object
properties:
index:
type: integer
expression:
type: string
valid:
type: boolean
canonical:
type: string
verdict:
type: string
enum:
- ok
- violation
- unknown
- invalid
leaves:
type: array
items:
type: object
properties:
id:
type: string
kind:
type: string
enum:
- license
- reference
- unknown
plus:
type: boolean
exception:
type: string
osiApproved:
type: boolean
fsfLibre:
type: boolean
deprecated:
type: boolean
verdict:
type: string
enum:
- ok
- violation
- unknown
reasons:
type: array
items:
type: string
satisfiedBy:
type: array
items:
type: string
witnesses:
type: array
items:
type: object
properties:
ruleId:
type: string
detail:
type: string
path:
type: string
description: JSON pointer or dotted path into the input.
offset:
type: integer
index:
type: integer
expected:
description: What the rule required.
actual:
description: What the input had.
versions:
type: object
description: Every semantic dependency of this answer (engine, tables and their as-of dates, tokenizer, calendar, rounding profile).
limits:
type: array
items:
type: string
deterministic:
type: boolean
description: 'Always true: pure code, no model.'
_provenance:
type: object
description: C2PA-aligned manifest and W3C VC 2.0 (eddsa-jcs-2022) issued by the hub DID; verify at POST /api/v1/verify-provenance
required:
- data
- _provenance
'400':
description: Invalid request (no payment consumed)
content:
application/json:
schema:
type: object
properties:
error:
type: string
code:
type: string
'401':
description: Invalid X-API-KEY
content:
application/json:
schema:
type: object
properties:
error:
type: string
code:
type: string
'402':
description: Payment required or invalid
content:
application/json:
schema:
type: object
description: x402 v2 PaymentRequired (also base64 in the PAYMENT-REQUIRED header)
properties:
x402Version:
type: integer
error:
type: string
code:
type: string
resource:
type: object
accepts:
type: array
items:
type: object
extensions:
type: object
'502':
description: Upstream failure; the payment is released or not settled
content:
application/json:
schema:
type: object
properties:
error:
type: string
code:
type: string
tags:
- Spdx Policy
components:
securitySchemes:
x402:
type: apiKey
in: header
name: PAYMENT-SIGNATURE
description: x402 v2 payment payload (base64) sent after a 402 challenge
apiKey:
type: apiKey
in: header
name: X-API-KEY