MCP SBOM Server

@gkhays

About MCP SBOM Server

MCP server to perform a scan and produce an SBOM

Config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "mcp-sbom": {
      "command": "uv",
      "args": [
        "--directory",
        "/path/to/mcp-sbom",
        "run",
        "mcp-sbom"
      ]
    }
  }
}

Tools

No tools detected

We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.

Overview

What is MCP SBOM Server?

MCP SBOM Server is an MCP server that performs a Trivy scan and produces a software bill of materials (SBOM) in CycloneDX format. It is intended for developers who need to generate SBOMs from container images or filesystems and integrate them into MCP‑enabled AI workflows.

How to use MCP SBOM Server?

Install the prerequisites: uv, trivy, and Node.js. Configure your MCP client with the JSON entry shown in the README, pointing the --directory argument to the server location. Synchronize dependencies with uv sync, then use the MCP client to invoke the server.

Key features of MCP SBOM Server

Performs Trivy scans to generate SBOMs
Outputs SBOMs in CycloneDX format
Built with Python 3.12 and MCP 1.6
Debuggable via MCP Inspector

Use cases of MCP SBOM Server

Generate an SBOM for a container image
Generate an SBOM for a local filesystem
Integrate SBOM generation into AI‑assisted development tools via MCP

FAQ from MCP SBOM Server

What prerequisites are needed to run MCP SBOM Server?

You must install uv, trivy, and Node.js before using the server.

What format does the SBOM output use?

The server produces SBOMs in CycloneDX format.

How can I debug MCP SBOM Server?

Use the MCP Inspector by running npx @modelcontextprotocol/inspector uv --directory /path/to/mcp-sbom run mcp-sbom.

Frequently asked questions

What prerequisites are needed to run MCP SBOM Server?

You must install uv, trivy, and Node.js before using the server.

What format does the SBOM output use?

The server produces SBOMs in CycloneDX format.

How can I debug MCP SBOM Server?

Use the MCP Inspector by running `npx @modelcontextprotocol/inspector uv --directory /path/to/mcp-sbom run mcp-sbom`.

Comments

Basic information

More Other MCP servers

FastMCP v2 🚀

jlowin

🚀 The fast, Pythonic way to build MCP servers and clients.

26.0K

Lemon.io

lemon-io

Request dedicated senior developers to work on your project, write job descriptions, and prep technical interviews — all without leaving your Claude chat. Just describe what you need, and Lemon.io MCP does the rest. 1–3