License-aware Git asset discovery, inside the editor. Searches 78,094+ curated, license-tagged Git assets and checks SPDX compatibility against your project's license — without launching a chat sidebar.
Companion to
@buygit/mcp-serverand@buygit/cli. Same data, three surfaces — pick whichever fits your workflow.
Commands
| Command | What it does |
|---|---|
BuyGit: Search Open Index |
Free-text search with optional license filter, opens result on buygit.com |
BuyGit: Check License Compatibility |
"Is this SPDX safe in my project?" verdict against the configured target |
BuyGit: Audit dependencies in current file |
Parses package.json / Cargo.toml / requirements.txt / go.mod / composer.json / Gemfile and reports license + risk for every dep |
BuyGit: Open MCP install page |
Opens https://buygit.com/mcp |
The audit command also appears in the Explorer right-click menu on the supported manifest files.
Settings
| Setting | Default | Effect |
|---|---|---|
buygit.baseUrl |
https://buygit.com |
Base URL for the API. Override for self-hosted instances. |
buygit.targetLicense |
MIT |
Your project's license. The audit + check-compat commands use this as the "target" side of the SPDX matrix. |
Why use this alongside an MCP client?
If you already run Cline / Continue / Roo Code / Antigravity with
@buygit/mcp-server configured, you have BuyGit answers in your chat
sidebar. This extension gives you the same answers as menu commands +
explorer-context actions without opening a chat — useful when you
just want to right-click package.json and get a one-line "are these
deps safe to ship under MIT" answer.
License
MIT.