MCP SBOM Server

@gkhays

About MCP SBOM Server

MCP server to perform a scan and produce an SBOM

Config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "mcp-sbom": {
      "command": "uv",
      "args": [
        "--directory",
        "/path/to/mcp-sbom",
        "run",
        "mcp-sbom"
      ]
    }
  }
}

Tools

No tools detected

We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.

Overview

What is MCP SBOM Server?

MCP SBOM Server is an MCP server that performs a Trivy scan and produces a software bill of materials (SBOM) in CycloneDX format. It is intended for developers who need to generate SBOMs from container images or filesystems and integrate them into MCP‑enabled AI workflows.

How to use MCP SBOM Server?

Install the prerequisites: uv, trivy, and Node.js. Configure your MCP client with the JSON entry shown in the README, pointing the --directory argument to the server location. Synchronize dependencies with uv sync, then use the MCP client to invoke the server.

Key features of MCP SBOM Server

Performs Trivy scans to generate SBOMs
Outputs SBOMs in CycloneDX format
Built with Python 3.12 and MCP 1.6
Debuggable via MCP Inspector

Use cases of MCP SBOM Server

Generate an SBOM for a container image
Generate an SBOM for a local filesystem
Integrate SBOM generation into AI‑assisted development tools via MCP

FAQ from MCP SBOM Server

What prerequisites are needed to run MCP SBOM Server?

You must install uv, trivy, and Node.js before using the server.

What format does the SBOM output use?

The server produces SBOMs in CycloneDX format.

How can I debug MCP SBOM Server?

Use the MCP Inspector by running npx @modelcontextprotocol/inspector uv --directory /path/to/mcp-sbom run mcp-sbom.

Frequently asked questions

What prerequisites are needed to run MCP SBOM Server?

You must install uv, trivy, and Node.js before using the server.

What format does the SBOM output use?

The server produces SBOMs in CycloneDX format.

How can I debug MCP SBOM Server?

Use the MCP Inspector by running `npx @modelcontextprotocol/inspector uv --directory /path/to/mcp-sbom run mcp-sbom`.

Comments

Basic information

More Other MCP servers

Reactive Resume

amruthpillai

A one-of-a-kind resume builder that keeps your privacy in mind. Completely secure, customizable, portable, open-source and free forever. Try it out today!

39.5K

Maestro

mobile-dev-inc

Painless E2E Automation for Mobile and Web

14.8K

MCP Go 🚀

mark3labs

A Go implementation of the Model Context Protocol (MCP), enabling seamless integration between LLM applications and external data sources and tools.

8.9K

Nginx UI

0xJacky

Yet another WebUI for Nginx

11.3K

Activepieces

activepieces

AI Agents & MCPs & AI Workflow Automation • (~400 MCP servers for AI agents) • AI Automation / AI Agent with MCPs • AI Workflows & AI Agents • MCPs for AI Agents

23.2K