English Français العربية

io.github.CSOAI-ORG/sbom-cyclonedx-mcp

Official registry Developer tools

Software Bill of Materials generation + validation in CycloneDX 1.6 and SPDX 2.3 formats. Requir...

Source code Documentation

What can you do with io.github.CSOAI-ORG/sbom-cyclonedx-mcp?

  • MCP protocol compliant
  • Easy installation
  • Well-documented API
  • Production-ready
  • Active maintenance

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

PYPI package sbom-cyclonedx-mcp
Claude Code 
claude mcp add sbom-cyclonedx-mcp -- python sbom-cyclonedx-mcp==1.0.5
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "sbom-cyclonedx-mcp": {
            "command": "python",
            "args": [
                "sbom-cyclonedx-mcp==1.0.5"
            ]
        }
    }
}

Documentation

From the project's README on GitHub, refreshed weekly. Links open on GitHub.

Contents
  1. Sbom Cyclonedx MCP
  2. 🚀 Quick Start
  3. ✨ Features
  4. 📖 Documentation
  5. 🛡️ Compliance
  6. 🏢 Enterprise
  7. 🤝 Part of the MEOK Ecosystem
  8. 📜 License
  9. 💸 Try MEOK in 30 seconds — instant buy ladder
  10. Configuration
  11. Examples

Sbom Cyclonedx MCP

SBOM generation in CycloneDX 1

SBOM generation in CycloneDX 1.6 + SPDX 2.3. Required by EO 14028, NIS2, CRA. MIT

🚀 Quick Start

# Install via pip
pip install sbom_cyclonedx_mcp

# Or install via Smithery
npx -y @smithery/cli@latest install sbom-cyclonedx-mcp --client claude

✨ Features

  • MCP protocol compliant
  • Easy installation
  • Well-documented API
  • Production-ready
  • Active maintenance

📖 Documentation

🛡️ Compliance

This MCP server is built with EU AI Act compliance built-in:

  • Free: 10 calls/day. No API key required.
  • Pro £79/mo: unlimited + signed attestations. Subscribe
  • Enterprise £1,499/mo: white-label + on-premise + SLA. hello@meok.ai
  • ✅ Article 9 — Risk Management System
  • ✅ Article 13 — Transparency & Instructions for Use
  • ✅ Article 15 — Bias Detection & Testing
  • ✅ Article 26 — FRIA Support (where applicable)
  • ✅ Article 50 — AI Content Watermarking (where applicable)

Need help getting compliant? Book a free 15-min diagnostic →

🏢 Enterprise

Need custom development, SLA guarantees, or white-label deployment?

  • Pro: $99/mo — Full MCP suite + EU AI Act tracking
  • Enterprise: $499/mo — Custom dev + SLA + Dedicated support

View Pricing → | Contact Sales →

🤝 Part of the MEOK Ecosystem

This server is part of the MEOK AI Labs ecosystem — 300+ MCP servers for sovereign AI governance.

DomainPurpose
councilof.aiEU AI Act compliance marketplace
safetyof.aiAI safety & monitoring
meok.aiSovereign AI platform
cobolbridge.aiLegacy modernization

📜 License

MIT © CSOAI-ORG

Built with 💜 by MEOK AI Labs · UK Companies House 16939677

Agent interop protocols supported (8 live):

  • ✅ MCP (Anthropic) — native
  • ✅ A2A (Google + Linux Foundation, absorbed IBM ACP Sept 2025)
  • ✅ IBM ACP — covered via A2A merge
  • ◐ Stripe ACP (Agentic Commerce Protocol) — Q3 bridge via agent-commerce-protocol-mcp
  • ◐ AP2 (Google Agent Payments) — partial via agent-commerce-payments-mcp
  • ◐ x402 (Coinbase HTTP 402) — partial via api.meok.ai gateway
  • → OASF / AGNTCY (Cisco Outshift + Linux Foundation) — Q3 bridge
  • 👁 ANP (Cisco Agent Network) — watch-list

Pricing options:

OptionPriceBest for
Self-host (this MCP)£0 — MITDevs
This MCP Starter£29/moOne-MCP teams
This MCP Pro£79/moProduction + 24h SLA
Universal PAYG£29/mo + £0.0002/callSpiky usage across many MCPs
Substrate bundle (this category)£99-£499/moA whole pack
MEOK Universe£1,499/moAll 47 MCPs, 500K calls

Each tier above the free self-host adds HMAC-signed attestations verifiable at verify.meok.ai. Linux Foundation governance on the A2A spine means EU regulated buyers can deploy without vendor-lock-in objections.

💸 Try MEOK in 30 seconds — instant buy ladder

TierPriceWhat you getStripe
Smoke test£1Signed sample MCP-Hardening report + Article 50 PDFhttps://buy.stripe.com/aFa7sNcgAdQS0ZT1Uc8k91t
Quick Kit£9EU AI Act Article 50 implementation guide (C2PA + EU-Icon)https://buy.stripe.com/aFa7sNcgAdQS0ZT1Uc8k91t
Founder Call£2930-min 1-on-1 with the founderhttps://buy.stripe.com/aFa7sNcgAdQS0ZT1Uc8k91t

Refundable. UK Stripe — VAT-clean. Builds on the 81-MCP MEOK fleet. Verify any signed report at https://meok.ai/verify.

Configuration

Add to your claude_desktop_config.json (Claude Desktop) or your MCP client config:

{
  "mcpServers": {
    "sbom-cyclonedx-mcp": {
      "command": "uvx",
      "args": ["sbom-cyclonedx-mcp"]
    }
  }
}

Or: pip install sbom-cyclonedx-mcp then run the sbom-cyclonedx-mcp command (stdio transport).

Examples

Once configured, ask your assistant, for example:

  • "Use generate_sbom_cyclonedx to …"
  • "Use generate_sbom_spdx to …"
  • "Use validate_sbom to …"

Frequently asked questions

What is io.github.CSOAI-ORG/sbom-cyclonedx-mcp?

Software Bill of Materials generation + validation in CycloneDX 1.6 and SPDX 2.3 formats. Requir...

How do I install io.github.CSOAI-ORG/sbom-cyclonedx-mcp?

It runs on your machine. In Claude Code: claude mcp add sbom-cyclonedx-mcp -- python sbom-cyclonedx-mcp==1.0.5. For other clients, paste the JSON configuration from this page into their MCP settings.

Does io.github.CSOAI-ORG/sbom-cyclonedx-mcp need an API key?

Its registry entry lists no required key or secret. Some features may still need an account with the service it connects to.

Is io.github.CSOAI-ORG/sbom-cyclonedx-mcp open source?

Yes. Its code is on GitHub under the MIT license.

Who maintains io.github.CSOAI-ORG/sbom-cyclonedx-mcp?

It is published by CSOAI-ORG. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.