csoai-org avatar

Sbom Cyclonedx Mcp

csoai-org/sbom-cyclonedx-mcp

Generates Software Bill of Materials in CycloneDX 1.6 and SPDX 2.3 formats, addressing requirements from Executive Order 14028, NIS2, and the EU Cyber Resilience Act. Useful when you need to document dependencies for compliance audits, security assessments, or regulatory submissions. The server validates SBOM structure and exports standardized manifests that procurement and security teams expect. Installs via pip and runs over stdio transport. Part of MEOK AI Labs' compliance-focused tooling, so expect additional EU AI Act oriented features bundled in. Reach for this when you're dealing with government contracts, regulated industries, or supply chain transparency requirements where machine-readable dependency declarations are mandatory.

GitHub stars
1
tools
3
transport
STDIO
last updated
Aug 19, 2026

Tools

3 tools

Public tool metadata for what this MCP can expose to an agent.

generate_sbom_cyclonedx

No parameter schema in public metadata yet.

generate_sbom_spdx

No parameter schema in public metadata yet.

validate_sbom

No parameter schema in public metadata yet.

Sponsors

Readme

MCP Scorecard: 90/100

Sbom Cyclonedx MCP

MEOK AI Labs GSPC License PyPI

SBOM generation in CycloneDX 1

SBOM generation in CycloneDX 1.6 + SPDX 2.3. Required by EO 14028, NIS2, CRA. MIT


🚀 Quick Start

# Install via pip
pip install sbom_cyclonedx_mcp

# Or install via Smithery
npx -y @smithery/cli@latest install sbom-cyclonedx-mcp --client claude

✨ Features

  • MCP protocol compliant
  • Easy installation
  • Well-documented API
  • Production-ready
  • Active maintenance

📖 Documentation

🛡️ Compliance


View the full README on GitHub

Details

Repository
github.com/csoai-org/sbom-cyclonedx-mcp
Package
sbom-cyclonedx-mcp
Transport
STDIO
Registry
MCP registry, active

More from csoai-org