mcpField
M
MCP SBOM Server

MCP SBOM Server

Local
github.com/gkhaysSecurity3Updated 82w ago
Repository

About MCP SBOM Server

MCP SBOM Server runs Trivy scans and generates software bills of materials in CycloneDX format for MCP clients. It is intended for workflows that need a scan result in a standardized SBOM format.

Key features

  1. 01Trivy-based scanning
  2. 02CycloneDX SBOM generation

Use cases

  1. 01Generating an SBOM from a scan
  2. 02Providing scan output to an MCP client

MCP support

Exposes Trivy scanning and CycloneDX SBOM generation to MCP clients.

#python#mcp#uv

Configuration

Local server config is the same for every client. Copy it into your client’s MCP config file.

No install method listed yet

We haven’t collected a package or remote endpoint for this server. Follow the instructions in the project README.

Repository

Tools

No tool list yet

Local servers expose tools only once running on your machine, and the maintainer has not provided a tool list.

Details

From the project README

MCP SBOM Server

Python MCP

MCP server to perform a Trivy scan and produce an SBOM in CycloneDX format.

Installation

Prerequisites

Install the following.

MCP Clients

Configuration
"mcpServers": {
        "mcp-sbom": {
            "command": "uv",
            "args": [
                "--directory",
                "/path/to/mcp-sbom",
                "run",
                "mcp-sbom"
            ]
        }
    }

Building

Note

This project employs uv.

  1. Synchronize dependencies and update the lockfile.
uv sync

Debugging

MCP Inspector

Use MCP Inspector.

Launch the MCP Inspector as follows:

npx @modelcontextprotocol/inspector uv --directory /path/to/mcp-sbom run mcp-sbom

MCP Inspector

Windows

When running on Windows, use paths of the style:

C:/Users/gkh/src/mcp-sbom-server/src/mcp_sbom

Comments

Markdown supported

New to MCP?

From what the protocol is to installing your first server, these answers cover most first questions.

An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.