HomeSecurity › agent-bom

agent-bom

Security scanner and graph for agentic infrastructure — agents, MCP, runtime, and blast radius.

Python CloudLocal macOSWindowsLinux
★ 31 stars Last pushed 2026-09-24 License: Apache-2.0

Topics: Security

Connect

Review any command before running it. Package names and URLs come from the server's own registry entry.

Package (pypi 0.82.3)

uvx agent-bom

Or add to your MCP client config:

{
  "mcpServers": {
    "agent-bom": {
      "command": "uvx",
      "args": [
        "agent-bom"
      ],
      "env": {
        "NVD_API_KEY": "<YOUR_VALUE>"
      }
    }
  }
}
  • NVD_API_KEY secret — NVD API key for higher rate limits on vulnerability enrichment

This server takes extra arguments — see its repository.

Related servers

Listed in punkpeye/awesome-mcp-servers (MIT)

Data from the Official MCP Registry