Agent Bom vs Agentscore Mcp Server

In-depth architectural comparison of the Agent Bom and Agentscore Mcp Server MCP servers. Compare execution transports, security boundaries, tool capabilities, quality scores, and ready-to-paste client installation snippets for Claude, Cursor, Windsurf, and VS Code.

Which MCP Server Should You Choose?

Choose Agent Bom when:

• You need dedicated capabilities in the Security domain.
• You prefer local stdio subprocess transport architecture.
• Your security boundary fits: No auth required (Free / Open Source).
• You have access to required keys: AGENT_BOM_API_KEY, AGENT_BOM_DB_URL, AGENT_BOM_CLOUD_CREDENTIALS.
• Primary tools included: Auto-discovers 20 MCP clients and supports 15 package ecosystems, Detects CVEs using OSV, NVD, EPSS, and CISA KEV databases, Maps blast radius from vulnerabilities to exposed credentials and tools.

Explore Agent Bom Details

Choose Agentscore Mcp Server when:

• You need dedicated capabilities in the Security domain.
• You prefer local stdio subprocess transport architecture.
• Your security boundary fits: No auth required (Free / Open Source).
• Primary tools included: Security scans for MCP packages, Allow, warn, or block trust verdicts, Repository-wide MCP dependency inspection.

Feature & Specification Comparison

Specification	Agent Bom msaad00 Security	Agentscore Mcp Server Thezenmonster Security
Summary	AI supply chain security scanner with 18 MCP tools. Auto-discovers 20 MCP clients, scans dependencies for CVEs (OSV/NVD/EPSS/CISA KEV), maps blast radius from vulnerabilities to exposed credentials and tools, runs CIS benchmarks, generates CycloneDX/SPDX SBOMs, and enforces compliance across OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF, and EU AI Act.	MCP security trust layer. Continuously monitors 800+ MCP packages on npm for install scripts, command injection, hardcoded secrets, capability drift, and publisher posture. Ships a GitHub Action policy gate for PR-level allow/warn/block decisions with OIDC auto-provisioning. 5 MCP tools, no API key required.
Category & Scope

Tools & Capabilities Breakdown

Ready-to-Paste Client Configurations

Paste either (or both) of these JSON server blocks into your client config file (e.g. claude_desktop_config.json or ~/.cursor/mcp.json).

{
  "mcpServers": {
    "msaad00-agent-bom": {
      "command": "uvx",
      "args": [
        "agent-bom"
      ],
      "env": {
        "AGENT_BOM_API_KEY": "YOUR_AGENT_BOM_API_KEY_HERE",
        "AGENT_BOM_DB_URL": "YOUR_AGENT_BOM_DB_URL_HERE",
        "AGENT_BOM_CLOUD_CREDENTIALS": "YOUR_AGENT_BOM_CLOUD_CREDENTIALS_HERE"
      }
    }
  }
}

{
  "mcpServers": {
    "thezenmonster-agentscore-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "@agentscore-xyz/mcp-server"
      ]
    }
  }
}

Related MCP Server Comparisons