MCP SBOM Server

@gkhays

Repository

Basic information

About MCP SBOM Server

MCP server to perform a scan and produce an SBOM

#python #mcp #uv

MCP SBOM Server config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "mcp-sbom": {
      "command": "uv",
      "args": [
        "--directory",
        "/path/to/mcp-sbom",
        "run",
        "mcp-sbom"
      ]
    }
  }
}

MCP SBOM Server tools

Tool list not available yet

This listing does not currently have a tool list to display. This does not mean the server has no tools; check its documentation for supported capabilities.

We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.

Overview

What is MCP SBOM Server?

MCP SBOM Server is an MCP server that performs a Trivy scan and produces a software bill of materials (SBOM) in CycloneDX format. It is intended for developers who need to generate SBOMs from container images or filesystems and integrate them into MCP‑enabled AI workflows.

How to use MCP SBOM Server?

Install the prerequisites: uv, trivy, and Node.js. Configure your MCP client with the JSON entry shown in the README, pointing the --directory argument to the server location. Synchronize dependencies with uv sync, then use the MCP client to invoke the server.

Key features of MCP SBOM Server

Performs Trivy scans to generate SBOMs
Outputs SBOMs in CycloneDX format
Built with Python 3.12 and MCP 1.6
Debuggable via MCP Inspector

Use cases of MCP SBOM Server

Generate an SBOM for a container image
Generate an SBOM for a local filesystem
Integrate SBOM generation into AI‑assisted development tools via MCP

Frequently asked questions

What prerequisites are needed to run MCP SBOM Server?

You must install uv, trivy, and Node.js before using the server.

What format does the SBOM output use?

The server produces SBOMs in CycloneDX format.

How can I debug MCP SBOM Server?

Use the MCP Inspector by running `npx @modelcontextprotocol/inspector uv --directory /path/to/mcp-sbom run mcp-sbom`.

Comments

More Other MCP servers

Blender

ahujasid

Open-source MCP to use Blender with any LLM

23.6K

Figs, Relationship Expert

Figs O'Sullivan, LMFT

Couples therapist Figs O'Sullivan (LMFT, 17 years, endorsed by Sue Johnson, creator of EFT) inside your AI. Ask relationship questions answered from his clinical writing, name the pattern in a fight, get a three-step rep