MCP SBOM Server

Name: MCP SBOM Server
Author: gkhays

@gkhays

Repository

About MCP SBOM Server

MCP server to perform a scan and produce an SBOM

#python #mcp #uv

Basic information

Config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "mcp-sbom": {
      "command": "uv",
      "args": [
        "--directory",
        "/path/to/mcp-sbom",
        "run",
        "mcp-sbom"
      ]
    }
  }
}

Tools

No tools detected

We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.

Overview

What is MCP SBOM Server?

MCP SBOM Server is an MCP server that performs a Trivy scan and produces a software bill of materials (SBOM) in CycloneDX format. It is intended for developers who need to generate SBOMs from container images or filesystems and integrate them into MCP‑enabled AI workflows.

How to use MCP SBOM Server?

Install the prerequisites: uv, trivy, and Node.js. Configure your MCP client with the JSON entry shown in the README, pointing the --directory argument to the server location. Synchronize dependencies with uv sync, then use the MCP client to invoke the server.

Key features of MCP SBOM Server

Performs Trivy scans to generate SBOMs
Outputs SBOMs in CycloneDX format
Built with Python 3.12 and MCP 1.6
Debuggable via MCP Inspector

Use cases of MCP SBOM Server

Generate an SBOM for a container image
Generate an SBOM for a local filesystem
Integrate SBOM generation into AI‑assisted development tools via MCP

FAQ from MCP SBOM Server

What prerequisites are needed to run MCP SBOM Server?

You must install uv, trivy, and Node.js before using the server.

What format does the SBOM output use?

The server produces SBOMs in CycloneDX format.

How can I debug MCP SBOM Server?

Use the MCP Inspector by running npx @modelcontextprotocol/inspector uv --directory /path/to/mcp-sbom run mcp-sbom.

Comments

More Other MCP servers

Reactive Resume

amruthpillai

A one-of-a-kind resume builder that keeps your privacy in mind. Completely secure, customizable, portable, open-source and free forever. Try it out today!

39.5K