MCPLow riskUnclaimed
agent-bom
Security scanner and graph for agentic infrastructure — agents, MCP, runtime, and blast radius.
msaad00msaad00/agent-bom
server.json
{
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"name": "io.github.msaad00/agent-bom",
"description": "Security scanner and graph for agentic infrastructure — agents, MCP, runtime, and blast radius.",
"title": "agent-bom",
"repository": {
"url": "https://github.com/msaad00/agent-bom",
"source": "github"
},
"version": "0.108.4",
"packages": [
{
"registryType": "pypi",
"identifier": "agent-bom",
"version": "0.108.4",
"runtimeHint": "uvx",
"transport": {
"type": "stdio"
},
"packageArguments": [
{
"value": "mcp",
"type": "positional"
},
{
"value": "server",
"type": "positional"
}
],
"environmentVariables": [
{
"description": "NVD API key for higher rate limits on vulnerability enrichment",
"isSecret": true,
"name": "NVD_API_KEY"
}
]
}
]
}Permissions
DeclaredDetected
Runs code—
pythonInstalls—
pypi:agent-bom@0.108.4Runs install scripts—None
NetworkNoneNone
Needs credentials
NVD_API_KEYNVD_API_KEYOutside the workspace—None
Agent tools—None
Checks
Low risk · Nothing worth a warning was found.
Not reviewed by a person · Checked by rules; the model review is not switched on yet.
Versions
- #40.108.4latestOct 10, 2026
- #30.108.3Oct 8, 2026
- #20.108.2Oct 8, 2026
- #10.108.1Oct 7, 2026
agent-bomOpen in Codeg