Skip to content
← Warrant

License

The SDK and MCP server are Apache 2.0. The mark and the wordmark are not, and the code licence does not give you them.

Last updated

Draft, pending legal review. This document describes how Warrant is built and intended to operate. It has not been reviewed by a lawyer, it is not legal advice, and it is not a contract. Do not rely on it, and do not put real funds through Warrant, until a reviewed version replaces it.

What is open

@warrant/sdk — the TypeScript client, the MCP server and the CLI — is released under the Apache License, Version 2.0.

You may use, copy, modify, merge, publish, distribute, sublicense and sell copies of it, including commercially, subject to the licence. In particular Apache 2.0 gives you an express patent grant, which MIT does not, and that is why it was chosen for a package that sits in a payment path.

The full text is at apache.org/licenses/LICENSE-2.0. A LICENSE file ships in the package, and a NOTICE file will accompany any distributed build.

Copyright 2026 Warrant

Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.

What that includes

  • the API client and its types
  • the MCP server that gives an agent the tools to open and check a warrant
  • the CLI
  • example code and fixtures published alongside them

What that does not include

The hosted service, the console, the verifier and policy engines, the ledger and the API implementation are not covered. They are not published under an open licence, and nothing on this page grants a licence to them. Your use of the hosted service is governed by the Terms.

What is not open: the brand

The Apache licence covers code. It does not cover trade marks, and section 6 of Apache 2.0 says so explicitly. To leave no room for doubt:

The Warrant name, the Warrant wordmark and the Warrant mark — the square in the centre cavity — are not licensed to you by the SDK licence, or by anything else on this page.

You may:

  • say your product works with Warrant, or is built on Warrant, in plain words
  • use the name in truthful, descriptive statements: "Warrant integration", "supports Warrant"
  • reproduce the mark unmodified in a screenshot of your own integration, or in an article about Warrant

You may not:

  • use the mark or wordmark as your own logo, or in one
  • use them in a way that suggests we endorse, sponsor or supply your product
  • put them on a domain, an app name, a package name or a social handle
  • alter the mark: recolour it beyond the four defined states, redraw it, rotate it, stretch it, add effects, or set it below its 20px minimum
  • use the state colours — seal for released, hold for held, flare for escalated — to mean something else in a Warrant context

The mark's centre square is the held value inside the warrant. It carries meaning in this product, and using it to mean anything else makes that meaning worse for everyone.

Asset files and the full usage rules live on the brand page. Anything not covered there, ask at legal@gowarrant.xyz before you ship it.

Third-party licences

Warrant is built on open source. Notable dependencies keep their own licences, which are preserved in the dependency tree and in any distributed build: Next.js, React, Hono, Drizzle ORM, Tailwind CSS and others, largely MIT.

Fonts are licensed separately and are not covered by the SDK licence:

  • Satoshi and Martian Mono are used under their own licences from their foundries. The licence files ship next to the font files in this repository.
  • Instrument Sans and JetBrains Mono are under the SIL Open Font License 1.1.

If you fork this repository, the fonts do not automatically come with you. Check each licence before redistributing.

Contributions

Contributions to the SDK are accepted under Apache 2.0, per section 5 of the licence: anything you deliberately submit for inclusion is licensed under the same terms, without any additional conditions. If a CLA becomes necessary it will be stated here and required before merge, not applied retroactively.

No warranty

The SDK is distributed as is, without warranties or conditions of any kind, as the licence text above says. That includes the MCP server: a tool that lets an agent commit your organisation's funds is exactly the thing to read before you install it, and the source is published so you can.