README.md•1.29 kB
# MCP SBOM Server
[](https://www.python.org/)
[](https://www.anthropic.com/news/model-context-protocol)
MCP server to perform a Trivy scan and produce an SBOM in CycloneDX format.
## Installation
### Prerequisites
Install the following.
- [uv](https://github.com/astral-sh/uv)
- [trivy](https://github.com/aquasecurity/trivy)
- [Node.js](https://nodejs.org/en)
## MCP Clients
### Configuration
```json
"mcpServers": {
"mcp-sbom": {
"command": "uv",
"args": [
"--directory",
"/path/to/mcp-sbom",
"run",
"mcp-sbom"
]
}
}
```
## Building
> [!NOTE]
> This project employs `uv`.
1. Synchronize dependencies and update the lockfile.
```
uv sync
```
## Debugging
### MCP Inspector
Use [MCP Inspector](https://github.com/modelcontextprotocol/inspector).
Launch the MCP Inspector as follows:
```
npx @modelcontextprotocol/inspector uv --directory /path/to/mcp-sbom run mcp-sbom
```
### Windows
When running on Windows, use paths of the style:
```console
C:/Users/gkh/src/mcp-sbom-server/src/mcp_sbom
```