MCP server

SBOMApp - SBOM Generator & Vulnerability Scanner

io.github.mcpsbom/sbom-mcp

Checked 26 Oct 2026, 08:29 UTC · It answered and asked for a sign-in

Generate SBOMs, scan vulnerabilities, and analyze dependencies from local projects or Git repos.

Needs an API key

https://mcp.sbomapp.com/mcp

At a glance

Type: MCP server
Publisher: Not verified
Status: Needs an API key
Sets up in: Claude Code, Claude Desktop, Codex, Gemini CLI, Cursor, VS Code, Antigravity, ChatGPT, OpenAI API, Grok
Last checked: 26 Oct 2026, 08:29 UTC

Opens the app, which shows the server and asks you to confirm. For other apps, copy the setup below.

Claude Code

claude mcp add --transport http sbom-mcp https://mcp.sbomapp.com/mcp

Claude Desktop

Settings → Connectors → Add custom connector, and paste the URL.

Codex (config.toml)

[mcp_servers.sbom-mcp]
url = "https://mcp.sbomapp.com/mcp"

Gemini CLI

{"mcpServers":{"sbom-mcp":{"httpUrl":"https://mcp.sbomapp.com/mcp"}}}

Cursor

{"mcpServers":{"sbom-mcp":{"url":"https://mcp.sbomapp.com/mcp"}}}

VS Code

{"servers":{"sbom-mcp":{"type":"http","url":"https://mcp.sbomapp.com/mcp"}}}

Antigravity

agy mcp add sbom-mcp https://mcp.sbomapp.com/mcp

ChatGPT

Settings → Apps & Connectors → Advanced settings: turn on Developer mode, then Create a connector and paste the URL. Which plans can do this varies.

OpenAI API (Responses tools)

{"type":"mcp","server_label":"sbom-mcp","server_url":"https://mcp.sbomapp.com/mcp","require_approval":"always"}

Grok (xAI API tools)

{"type":"mcp","server_label":"sbom-mcp","server_url":"https://mcp.sbomapp.com/mcp"}

Needs an API key or token from its maker, usually added as a header in the setup.

Osv
OSV.dev (Open Source Vulnerabilities) MCP.
DataNexus MCP
Public data intelligence for AI agents — CVE, compliance, patents, contracts, domains.
ScanLabsAI Security Scanner
Scan a website for vulnerabilities: OWASP Top 10, CVEs, SSL, headers - with plain-English fixes
PreClick — An MCP-native URL preflight scanning service for autonomous agents.
PreClick scans links for threats and confirms intent match with high accuracy before agents click.
ScanMalware.com URL Scanner
MCP server for ScanMalware.com URL scanning, malware detection, and analysis.
Paladin Front PHP Rescue & Zero-PHP Migration MCP
PHP2Shell (CVE-2026-109618) scanner and automated WordPress to Zero-PHP Next.js migration.
x402 Agent Tollbooth
On-chain DeFi smart contract auditor, arbitrage scanner, and agent tollbooth via x402 on Base.
Spook SEO
Free SEO tools + the Spook SEO autopilot: analyze domains, generate and publish SEO articles.

[![AptLynx](https://aptlynx.net/badge/io.github.mcpsbom/sbom-mcp.svg)](https://aptlynx.net/servers/io.github.mcpsbom/sbom-mcp)

Listing text is written by the maker; AptLynx lists tools and does not vouch for them. Find another tool · Browse by topic · For agents