MCP SBOM Server

Created By
gkhaysa year ago
MCP server to perform a scan and produce an SBOM
Overview

what is MCP SBOM Server?

MCP SBOM Server is a tool designed to perform scans and produce Software Bill of Materials (SBOM) in CycloneDX format using the Trivy scanner.

how to use MCP SBOM Server?

To use the MCP SBOM Server, install the required prerequisites including uv, trivy, and Node.js. Configure the MCP clients and run the server using the specified command.

key features of MCP SBOM Server?

  • Performs Trivy scans to identify vulnerabilities in software dependencies.
  • Generates SBOM in CycloneDX format for better software transparency.
  • Supports integration with MCP clients for streamlined operations.

use cases of MCP SBOM Server?

  1. Scanning software projects for vulnerabilities before deployment.
  2. Generating SBOMs for compliance and auditing purposes.
  3. Integrating with CI/CD pipelines to ensure security in software development.

FAQ from MCP SBOM Server?

  • What is an SBOM?

A Software Bill of Materials (SBOM) is a list of components in a software product, providing transparency and aiding in security assessments.

  • Is MCP SBOM Server free to use?

Yes! MCP SBOM Server is open-source and free to use.

  • What are the prerequisites for using MCP SBOM Server?

You need to install uv, trivy, and Node.js to run the server.

Project Info
Created At
a year ago
Updated At
a year ago
Author Name
gkhays
Star
1
Language
Python
License
-

Recommend Servers

View All
Bring your real authenticated browser session to AI coding agents. Local-first MCP server + Chrome MV3 extension. No cloud. No telemetry.
@Cubenest

peek records the user's actual logged-in browser (DOM via rrweb, console events, network metadata, optional response bodies via opt-in Deep capture) through a Chrome MV3 extension. The extension ships events through a native-messaging stdio bridge to a local MCP server (peek-mcp), which persists them to a SQLite database at ~/.peek/sessions.db. AI coding agents (Claude Code, Cursor, Cline, Windsurf) read sessions from the database via 10 MCP tools: Tool What it does list_recent_sessions List recently recorded sessions (id, origin, ts, event count). get_session_summary LLM-readable narrative summary of a session. get_session_console_errors Console errors recorded in a session. get_session_network_errors Failed/notable network requests in a session. get_user_action_before_error Last N user actions before a console error. generate_playwright_repro Generate a runnable Playwright test from a session. get_dom_snapshot Reconstruct the DOM at a given timestamp. query_dom_history Timeline of attribute/text changes for a selector. request_authorization Side-panel consent for write actions (Level 3). execute_action Dispatch a UI action (gated by permission level + destructive blocklist). Why local-first matters Every other "browser session for AI" tool ships to a vendor cloud. peek's SQLite + extension live on the user's machine — no remote endpoints, no telemetry. The privacy policy (docs/peek/PRIVACY_POLICY.md) is the source of truth. Install # 1. Add the MCP server to Claude Code claude mcp add peek -- npx -y @peekdev/mcp # 2. Install the Chrome extension from the Chrome Web Store # (link added once the CWS listing is approved)

3 hours ago
Myrsu
@VidhiJav

2 days ago
Tavily Mcp
@tavily-ai

JavaScript
a year ago