Licensed tools: great, but read the license

14 high-value tools with restrictive, source-available or missing licenses. Point, don't bundle: we never copy or redistribute their code. We review each one, explain the license in plain words, link to the original and give install steps that pull from the original source. The license notes are plain-language guidance, not legal advice. GitHub data checked 2026-10-13.

npx create-video@latest   (official scaffolder, pulls from npm)
npx skills add remotion-dev/skills   (official skills, pulled from the original repo)
npx remotion render   (renders locally; no account needed)

git clone https://github.com/calesthio/OpenMontage && cd OpenMontage
Follow its README to install dependencies and connect it to your agent
Keep it local, or publish any modifications if you serve it to others

Follow the install section of the README at github.com/mksglu/context-mode (pinned commit below)
Review the hooks it adds before enabling them
Verify: run a noisy command and confirm the output is summarized

claude plugin marketplace add austinmarchese/buildpartner-plugin
claude plugin install buildpartner@buildpartner
Expect an account to be created on first start (owner decision)

Claude Code: claude mcp add --transport http sentry https://mcp.sentry.dev/mcp   (or the plugin: claude plugin marketplace add getsentry/sentry-mcp)
Codex: codex mcp add sentry --url https://mcp.sentry.dev/mcp
Gemini CLI: settings.json mcpServers.sentry.httpUrl = https://mcp.sentry.dev/mcp
Grok Bot: Settings → Connectors → custom MCP → https://mcp.sentry.dev/mcp

npx n8n   (or the official Docker image n8nio/n8n)
Create credentials with least-privilege scopes
Expose workflows to your agent via webhook or n8n's MCP features (check current docs)

git clone https://github.com/firecrawl/firecrawl
Follow SELF_HOST.md in the repo (Docker)
Point the Firecrawl MCP at your self-hosted URL

brew install trufflehog   (or the official release binary / Docker image from the repo)
trufflehog git file://. --no-verification --only-verified=false
Rotate any real secret it finds; don't just delete the commit

pipx install semgrep   (or brew install semgrep)
semgrep scan --config auto   (downloads rules from the registry; 'auto' sends anonymous metrics, use --metrics=off to opt out)

docker run -d -p 3000:3000 --name metabase metabase/metabase
Connect it with a read-only database user
Use its API or a community MCP to let the agent draft questions (review before saving)

docker run -d -p 3000:3000 grafana/grafana-oss
Create a Viewer-role service account token for the agent

Follow github.com/plausible/community-edition (official self-host repo)
Create a read-only Stats API key for the agent

git clone https://github.com/langgenius/dify && cd dify/docker
cp .env.example .env && docker compose up -d

pip install -U autogen-agentchat autogen-ext   (official packages; check the README for current names)

Considered and not listed

• anthropics/claude-code: It's a proprietary product you install from the vendor, not a repo to review here. It's covered as an agent in /connect.
• rbur0425/Open-Generative-AI: 0 stars, no license file despite claiming MIT, and it bundles many third-party models: unclear rights.
• beelabstudio/ai: 0 stars, no license, and it's a studio's internal config.
• Google Maps lead scrapers (e.g. 'seven monetizable'): Legal risk: scraping against the site's terms.
• AI voice cold-calling setups: Legal risk: TCPA and robocall rules.
• Trading/backtesting bots and 'wall-street' prompt packs: Legal risk: investment-advice exposure.
• Replica / website or persona cloners: Legal risk: copying others' IP or identity.