In-depth architectural comparison of the Agent Bom and Vectordecisions MCP Server MCP servers. Compare execution transports, security boundaries, tool capabilities, quality scores, and ready-to-paste client installation snippets for Claude, Cursor, Windsurf, and VS Code.
At a Glance & Executive Verdict
Agent Bom
Security · Local stdio
Quality: 56/100 (Good) | Auth: No auth required
Vectordecisions MCP Server
Security · Local stdio
Quality: 45/100 (Fair) | Auth: No auth required
Verdict Summary: Choose Agent Bom if you need specialized Security tools running via a local process. Choose Vectordecisions MCP Server if your workspace requires Security integration with local subprocess execution. Both servers can be configured concurrently in your client's mcpServers manifest.
Which MCP Server Should You Choose?
Choose Agent Bom when:
You need dedicated capabilities in the Security domain.
You prefer local stdio subprocess transport architecture.
Your security boundary fits: No auth required (Free / Open Source).
Primary tools included: MCP tools, resources, and workflow prompts, OSV, NVD, EPSS, and CISA KEV vulnerability assessment, Agent, MCP server, package, and credential discovery.
AI supply chain security scanner with 18 MCP tools. Auto-discovers 20 MCP clients, scans dependencies for CVEs (OSV/NVD/EPSS/CISA KEV), maps blast radius from vulnerabilities to exposed credentials and tools, runs CIS benchmarks, generates CycloneDX/SPDX SBOMs, and enforces compliance across OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF, and EU AI Act.
AI Governance MCP Server - GATRI trust scoring, kill-switch, EU AI Act compliance for Claude
Category & Scope
Tools & Capabilities Breakdown
Agent Bom Tools (6)
MCP tools, resources, and workflow prompts
OSV, NVD, EPSS, and CISA KEV vulnerability assessment
Agent, MCP server, package, and credential discovery
Credential and tool blast-radius mapping
CycloneDX, SPDX, SARIF, JSON, and HTML exports
Self-hosted dashboard and cloud connectors
Vectordecisions MCP Server Tools (6)
gatri_trust_score
Ready-to-Paste Client Configurations
Paste either (or both) of these JSON server blocks into your client config file (e.g. claude_desktop_config.json or ~/.cursor/mcp.json).
Agent Bom is categorized under Security and uses a local stdio subprocess. In contrast, Vectordecisions MCP Server belongs to Security using local stdio subprocess. Select Agent Bom when you need capabilities focused on security and Vectordecisions MCP Server when you require tools for security.