---
title: "List unlicensed SCA packages"
method: POST
path: "/api/v1/sca/licenses/unlicensed"
tags: ["SCA"]
---

# List unlicensed SCA packages

`POST /api/v1/sca/licenses/unlicensed`

## Request

- Base URL: `https://zeropath.com`
- URL: `https://zeropath.com/api/v1/sca/licenses/unlicensed`
- Auth: API key in header `X-ZeroPath-API-Token-Id` and API key in header `X-ZeroPath-API-Token-Secret`

List packages that deps.dev CONFIRMED have no license for the user's repositories. An unlicensed package is represented as the absence of a license — there is no synthetic 'Unknown' license. Packages whose license lookup FAILED transiently (deps.dev unreachable) are NOT included: their license is unknown, not absent, so they are excluded rather than mislabeled as unlicensed. Org-scoped: packages in repos outside the caller's access are never returned. Honest empty when the org has none.

## Request body

- ScaUnlicensedPackagesInput
  - `organizationId` string, required
  - `repositoryIds` string[]
  - `branch` string: Read each repository as of its newest finished scan on this branch. Omit for the newest scan on any branch.
  - `cursor` string: Package id cursor for pagination
  - `limit` integer

## Response `200`

Successful response

- ScaUnlicensedPackagesResponse
  - `packages` ScaPackage[], required
    - `id` string, required
    - `name` string, required
    - `version` string, nullable
    - `ecosystem` string, required
    - `manifestPath` string, nullable
    - `manifestStartLine` integer, nullable
    - `manifestEndLine` integer, nullable
    - `manifestStartColumn` integer, nullable
    - `manifestEndColumn` integer, nullable
    - `repositoryId` string, nullable
    - `repositoryName` string, nullable
    - `branch` string, nullable
    - `commitSha` string, nullable
    - `count` integer: Number of packages in this group
    - `items` ScaPackage[]
  - `hasMorePackages` boolean, required
  - `nextPackageCursor` string, nullable

## Other responses

- `400`: Bad Request
- `401`: Unauthorized

---

[API](https://skmtc.dev/zeropath/apis/zeropath-api-2.md) - [All operations](https://skmtc.dev/zeropath/apis/zeropath-api-2/llms.txt) - [OpenAPI document](https://skmtc.dev/zeropath/apis/zeropath-api-2/revisions/ea6ae4b68cd3?raw)