Log inSubmit server
Agent Bom logo

Agent Bom

by msaad00

Scans AI agent supply chains, correlates vulnerabilities with reachable tools and credentials, and exports SBOM and compliance reports.

InstallRepositoryWebsite
Full README Compare alternatives Embed widget Claim this listing

Install Agent Bom

Pick your client, then add it in one click or paste the config.

STDIOPython
~/Library/Application Support/Claude/claude_desktop_config.json
claude_desktop_config.json
{
  "mcpServers": {
    "msaad00-agent-bom": {
      "command": "uvx",
      "args": [
        "agent-bom"
      ]
    }
  }
}

Settings → Developer → Edit Config, merge this into mcpServers, then fully quit and reopen Claude Desktop.

Install not yet sandbox-tested— we haven't run this command through our automated sandbox yet. Not a red flag; we're working through the catalog.

Overview

msaad00/agent-bom scans AI agents, MCP servers, packages, tools, credentials, models, and related cloud resources for supply-chain risk. Its 18 MCP tools support inventory, dependency vulnerability analysis, reachability and blast-radius mapping, security benchmarks, SBOM generation, and compliance checks. Run scans locally or in CI, with outputs including HTML, JSON, SARIF, CycloneDX, and SPDX. Reach for it when AppSec or platform teams need an evidence-backed view of what an agent can access and a repeatable security gate.

Use cases

  • Scan repositories for vulnerable AI and application dependencies
  • Map CVEs to agents, tools, credentials, and reachable resources
  • Generate CycloneDX, SPDX, SARIF, JSON, and HTML reports
  • Gate CI on high or critical security findings
  • Review AI supply-chain posture against security frameworks

Key features

  • 18 MCP tools for AI supply-chain security analysis
  • Dependency scanning with OSV, NVD, EPSS, and CISA KEV data
  • Agent, MCP server, tool, package, and credential relationship graphs
  • CycloneDX, SPDX, SARIF, JSON, and HTML exports
  • CIS benchmark and AI security framework mappings
  • MCP proxy enforcement for poisoned tools and injected results

Security & health

What it can reach and how reliably it runs — from our own checks, not the maintainer’s claims.

ActiveLast checked 2d ago

Recent health check succeeded.

22/22 checks healthy over the last 91d

Supply-chain signal

No high-severity advisories surfaced by our automated scan.

Critical 0High 0Medium 0Low 0

Scanned 5d ago via OSV.dev · agent-bom (PyPI)

Adoption & maintenance

Factual signals from GitHub, npm, and our automated checks — not a rating.

GitHub stars36Stargazers on the source repository.
Last commit2d agoMost recent push to the default branch.
Directory activity2 viewsConfig copies, upvotes, and views on AllMCPs.

How Agent Bom works

What msaad00/agent-bom does

msaad00/agent-bom provides an AI supply-chain inventory and security scanner for agents, MCP servers, tools, packages, models, credential references, and connected resources. It builds relationships between these components so a dependency finding can be evaluated in the context of the agent and tools that may reach it.

Dependency analysis covers lockfiles and manifests across ecosystems including Python, JavaScript, Go, Java, .NET, and Rust. Findings are matched against OSV, GitHub advisories, and NVD, with EPSS and CISA KEV data available for prioritization. The scanner also supports native analysis of AI-related code, containers, infrastructure-as-code, cloud environments, and selected AI platforms.

Results can be mapped to OWASP LLM Top 10, OWASP Agentic Top 10, OWASP MCP Top 10, MITRE ATLAS, NIST AI RMF, and the EU AI Act. These mappings provide investigation context rather than certification.

How it works

A local scan can inspect a repository and its MCP configuration, or skip workstation-wide discovery with --no-discover. Without a project configuration, package findings can still be produced, while agent and tool relationships require configuration or an inventory. The scanner records the collected environment as a graph linking agents, MCP servers, tools, packages, credentials, and data or cloud resources.

The graph represents a collected snapshot. Configured or modeled access links are not runtime observations, and recorded relationships do not by themselves establish exploitation or data access. Coverage should therefore be reviewed alongside findings before treating a scan as a complete assessment.

The project also provides an MCP proxy and gateway that can alert on poisoned tools and injected results, or block them when injection enforcement is enabled with --injection-mode enforce.

Setup and configuration

For a repository scan, install uv and run:

bash
uvx agent-bom scan . --no-discover -f html -o agent-bom-report.html

Open the generated HTML file for inventory, findings, coverage, and remediation guidance. A bundled offline example is available with:

bash
uvx agent-bom scan --demo --offline

The project supports Python 3.11 through 3.14. Local scans do not require an account. Use uvx agent-bom doctor to investigate setup problems. The CLI can also be run in CI, and a GitHub Actions integration can upload SARIF and fail on high or critical findings using the default security gate.

The MCP interface is started through the agent-bom mcp server command and offers tool profiles for agent use. Claude Code and Codex plugins are also included.

Tools and capabilities

  • Discover agents, MCP servers, tools, packages, credentials, models, and supported connected resources.
  • Scan dependencies against OSV, GitHub advisories, and NVD, with KEV and EPSS context.
  • Trace vulnerability paths to exposed credentials, tools, agents, and reachable data.
  • Run CIS benchmarks and compliance-oriented checks.
  • Generate native agent-bom JSON inventories and CycloneDX or SPDX software BOMs.
  • Export results as HTML, JSON, SARIF, CycloneDX, and SPDX.
  • Import SARIF findings from other analysis tools.
  • Inspect containers, Dockerfiles, Terraform, Kubernetes, Helm, and Compose configurations.
  • Collect read-only posture and graph context from AWS, Azure, GCP, Kubernetes, Databricks, and Snowflake.

Limitations and notes

The scanner’s graph describes the information collected for a scan rather than live execution behavior. Credential references are represented as names, not secret values. A non-zero exit can indicate either a security gate or an incomplete assessment, so the report and coverage should be inspected.

The project is self-hostable and licensed under Apache-2.0. Its control-plane option uses PostgreSQL, SSO/OIDC, roles, tenant isolation, audit records, and evidence import on the operator’s infrastructure. There is no managed cloud offering described; local, CLI, CI, and self-hosted deployment paths are available.

Read the full README View source on GitHub

Reviews

No reviews yet — be the first to share how it worked for you.

Frequently Asked Questions about Agent Bom

msaad00/agent-bom is an MCP server that connects AI agents to supply-chain security analysis for agents, MCP servers, tools, packages, credentials, models, and reachable resources. Its main tools discover inventory, scan dependencies for vulnerabilities, map blast radius, run security checks, generate SBOMs, and assess compliance context.

Run it through `uvx` after installing `uv`; repository scans use commands such as `uvx agent-bom scan .`. The MCP interface is started with `agent-bom mcp server`, and `uvx agent-bom doctor` helps diagnose setup problems.

It supports HTML, JSON, SARIF, CycloneDX, and SPDX exports. For example, `uvx agent-bom scan . -f sarif -o findings.sarif` writes a SARIF report for upload or CI processing.

Yes, it can run local and CI scans, upload SARIF through its GitHub Actions integration, and fail the default gate on high or critical findings. A non-zero result can also indicate incomplete coverage, so the report should be reviewed.

No, local scans do not require an account. The project can also be self-hosted, while its CLI, CI, export, and MCP server functions run locally.

Related MCP servers

All in Security All alternatives
Add a badge to your READMEShow it’s listed — live SVG, Markdown or HTML.

AllMCPs Directory Badge

Full Badge Customizer

Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.

Badge Style:
Live Dynamic SVG PreviewAgent Bom AllMCPs Directory Badge
Markdown (GitHub README)
[![AllMCPs](https://allmcps.com/api/badge/msaad00-agent-bom?style=directory)](https://allmcps.com/mcp/msaad00-agent-bom)
HTML Embed
<a href="https://allmcps.com/mcp/msaad00-agent-bom"><img src="https://allmcps.com/api/badge/msaad00-agent-bom?style=directory" alt="Agent Bom on AllMCPs" /></a>