Security / agent-bom

agent-bom

io.github.koda-ai-studio/agent-bom · v0.112.1

AI supply-chain BOM: agents, MCP servers, packages and recorded reach. Scan and investigate via MCP.

Description supplied by the publisher in the MCP Registry. We have not tested this server.

GitHub repository

Install

uvx agent-bom mcp server

Assembled from the package metadata in the official MCP Registry (including any subcommand or flag the publisher lists). Some publishers do not list the subcommand that starts MCP mode, so confirm the command in the README, along with any required configuration and credentials, before connecting it to real data.

Signals

GitHub stars36
npm weekly downloads-
Last pushtoday
LicenceApache-2.0
Open issues34
SECURITY.mdYes
LanguagePython
Latest version published2026-11-01

Signals captured from GitHub, npm and the official MCP Registry on November 2, 2026. See the scoring method.

Similar servers

SkillTotal

Score 81

Deterministic security scan of MCP servers, agent skills and npm/PyPI packages. Runs locally.

★ 16Apache-2.0pushed today
SecurityAI & media

Aguara MCP

Score 72

Scan skills, MCP configs, and agent content for injection and supply-chain risks. Offline, no LLM.

★ 4MITpushed 1d ago
SecurityAI & media

agent-security-scanner-mcp

Score 89

Security layer for AI agents: blocks prompt injection, detects fake packages, scans vulnerabilities.

★ 123↓ 327/wkMITpushed 16d ago
Security

Five MCP servers worth your time, every week

The Plug Weekly is a free email picked from these scores. About a 3-minute read. Unsubscribe any time.

Subscribe free