F
licenseNot graded
qualityD
maintenanceScans Python, Node.js, Java/Spring, and PHP dependency manifests for known vulnerabilities using OSV and GitHub Advisory APIs.
-
SBOMApp - SBOM Generator & Vulnerability Scanner
Server Details
Generate SBOMs, scan vulnerabilities, and analyze dependencies from local projects or Git repos.
The last two health checks of this connector failed. If this server requires authentication, missing or expired test credentials may be the cause. A test profile lets Glama authenticate for health checks and discover tools; it is separate from your personal connections.
If you are the author, claim ownership, then add or update a test profile under Admin → Test Profile.
- Status
- Unhealthy
- Uptime
- 0.0% over 83 days
- Last Tested
- Transport
- Streamable HTTP
- URL
- Repository
- mcpsbom/sbomapp-mcp-server
- GitHub Stars
- 0
- Server Listing
- sbomapp-mcp-server
- ChatGPT
- –
- Claude
- –
Related MCP Connectors
Scan packages and lockfiles (npm, PyPI, Go, Maven, Cargo, NuGet) for vulnerabilities and malware.
Deep security scans of repos you own from your editor: dependency CVEs, SAST, git-history secrets.
Audit GitHub repos for malicious and supply-chain code before you depend on them.
Free deterministic security scan of public git repos: OSV.dev vulnerable deps, secrets, config lint.
Related MCP Servers
- AlicenseNot gradedqualityAmaintenanceEnables auditing npm, Yarn, and pnpm lockfiles from local project directories or remote Git repositories and returning unified vulnerability reports with configurable severity thresholds, dev-dependency skipping, and text or JSON output.5 npmMIT
- AlicenseAqualityCmaintenanceEnables coding agents to check individual project dependencies or local CycloneDX/SPDX SBOM files against the public OSV.dev advisory database and receive ranked vulnerability findings.2MIT
- AlicenseNot gradedqualityAmaintenanceAudits npm, Yarn, and pnpm lockfiles from local project directories or remote Git repositories (public or private) and returns vulnerability reports in text or JSON. Supports configurable severity thresholds, custom npm registries, dev-dependency skipping, and report language selection.5 npmMIT
Try in Browser
Claude Code, inside the Godot 4 editorFlockbay puts an AI agent in the real Godot 4 editor: it writes GDScript, runs your game and fixes what breaks. Free, or bring your own Claude Code or Codex.flockbay.comAd
Glama MCP Gateway
Add one secure layer between your agents and this server.