Agent Bom vs Pqc Tools — MCP Server Comparison | AllMCPs
Side-by-Side Model Context Protocol Comparison
Agent Bom vs Pqc Tools
In-depth architectural comparison of the Agent Bom and Pqc Tools MCP servers. Compare execution transports, security boundaries, tool capabilities, quality scores, and ready-to-paste client installation snippets for Claude, Cursor, Windsurf, and VS Code.
At a Glance & Executive Verdict
Agent Bom
Security · Local stdio
Quality: 56/100 (Good) | Auth: No auth required
Pqc Tools
Security · Local stdio
Quality: 55/100 (Good) | Auth: OAuth 2.0
Verdict Summary: Choose Agent Bom if you need specialized Security tools running via a local process. Choose Pqc Tools if your workspace requires Security integration with local subprocess execution. Both servers can be configured concurrently in your client's mcpServers manifest.
Which MCP Server Should You Choose?
Choose Agent Bom when:
You need dedicated capabilities in the Security domain.
You prefer local stdio subprocess transport architecture.
Your security boundary fits: No auth required (Free / Open Source).
You have access to required keys: AGENT_BOM_API_KEY, AGENT_BOM_DB_URL, AGENT_BOM_CLOUD_CREDENTIALS.
Primary tools included: Auto-discovers 20 MCP clients and supports 15 package ecosystems, Detects CVEs using OSV, NVD, EPSS, and CISA KEV databases, Maps blast radius from vulnerabilities to exposed credentials and tools.
AI supply chain security scanner with 18 MCP tools. Auto-discovers 20 MCP clients, scans dependencies for CVEs (OSV/NVD/EPSS/CISA KEV), maps blast radius from vulnerabilities to exposed credentials and tools, runs CIS benchmarks, generates CycloneDX/SPDX SBOMs, and enforces compliance across OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF, and EU AI Act.
Post-quantum readiness for AI coding agents: scan code for quantum-vulnerable cryptography (RSA/ECDH/ECDSA/DH), explain the harvest-now-decrypt-later exposure, get NIST ML-KEM/ML-DSA/SLH-DSA (and hybrid) migration guidance, verify fixes, and check dependencies. Content-based/advisory tools only. Run local (npx @quantakrypto/mcp) or the hosted OAuth endpoint at mcp.quantakrypto.com.
Tools & Capabilities Breakdown
Agent Bom Tools (6)
Auto-discovers 20 MCP clients and supports 15 package ecosystems
Detects CVEs using OSV, NVD, EPSS, and CISA KEV databases
Maps blast radius from vulnerabilities to exposed credentials and tools
Runs CIS benchmarks and compliance checks across 16 compliance surfaces
Generates CycloneDX and SPDX SBOM formats
Provides a unified graph model correlating static and runtime evidence
Pqc Tools Tools (6)
Ready-to-Paste Client Configurations
Paste either (or both) of these JSON server blocks into your client config file (e.g. claude_desktop_config.json or ~/.cursor/mcp.json).
Agent Bom is categorized under Security and uses a local stdio subprocess. In contrast, Pqc Tools belongs to Security using local stdio subprocess. Select Agent Bom when you need capabilities focused on security and Pqc Tools when you require tools for security.