Mmcp.market

Sbom Cyclonedx MCP server

by CSOAI-ORG·io.github.CSOAI-ORG/sbom-cyclonedx-mcp·v1.0.5
No reviews yet

Software Bill of Materials generation + validation in CycloneDX 1.6 and SPDX 2.3 formats. Requir...

C65/100grade C
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
C65/100

full report

Adoption
Not measured yet

Usage numbers are collected on the next scan

Reviews

Write one

Nobody has reviewed Sbom Cyclonedx yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Sbom Cyclonedx tools (5)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • generate_sbom_cyclonedx

    Generate CycloneDX 1.6 SBOM from package manifests

  • generate_sbom_spdx

    Generate SPDX 2.3 SBOM

  • regulation_map

    Map SBOM to EO 14028 / NIS2 / CRA / FDA requirements

  • validate_sbom

    Validate SBOM against CycloneDX/SPDX schema + completeness

  • vex_attach

    Attach VEX (Vulnerability Exploitability eXchange) statements

Public scan report

scanner v0.1.9 · 2026-09-22 · same rubric, same numbers if you re-run it

no findings
  • Code scan12 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancerepository not readable: repo not found3/15
  • Maintainer identityno repository or website to verify2/10
Overall 65/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

Install directly

claude mcp add sbom-cyclonedx-mcp -- uvx sbom-cyclonedx-mcp
Add to Cursor

Sbom Cyclonedx: common questions

Is Sbom Cyclonedx MCP server safe?
With care: it is graded C, so read the findings first (65/100). Read the Sbom Cyclonedx safety report
How do I install Sbom Cyclonedx?
It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
Does Sbom Cyclonedx need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Sbom Cyclonedx maintained?
The latest release is v1.0.5.

More from CSOAI-ORG →