MCPLow riskUnclaimed

agent-bom

Security scanner and graph for agentic infrastructure — agents, MCP, runtime, and blast radius.

msaad00msaad00/agent-bom★ 31Updated Oct 10, 2026

server.json

{
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "name": "io.github.msaad00/agent-bom",
  "description": "Security scanner and graph for agentic infrastructure — agents, MCP, runtime, and blast radius.",
  "title": "agent-bom",
  "repository": {
    "url": "https://github.com/msaad00/agent-bom",
    "source": "github"
  },
  "version": "0.108.4",
  "packages": [
    {
      "registryType": "pypi",
      "identifier": "agent-bom",
      "version": "0.108.4",
      "runtimeHint": "uvx",
      "transport": {
        "type": "stdio"
      },
      "packageArguments": [
        {
          "value": "mcp",
          "type": "positional"
        },
        {
          "value": "server",
          "type": "positional"
        }
      ],
      "environmentVariables": [
        {
          "description": "NVD API key for higher rate limits on vulnerability enrichment",
          "isSecret": true,
          "name": "NVD_API_KEY"
        }
      ]
    }
  ]
}

Permissions

DeclaredDetected
Runs code—python
Installs—pypi:agent-bom@0.108.4
Runs install scripts—None
NetworkNoneNone
Needs credentialsNVD_API_KEYNVD_API_KEY
Outside the workspace—None
Agent tools—None

Checks

Low risk · Nothing worth a warning was found.

Not reviewed by a person · Checked by rules; the model review is not switched on yet.

Versions

  1. #40.108.4latestOct 10, 2026
  2. #30.108.3Oct 8, 2026
  3. #20.108.2Oct 8, 2026
  4. #10.108.1Oct 7, 2026