agent-bom

agent-bom is a comprehensive AI supply chain security scanner and runtime enforcement MCP server for discovering, assessing, and remediating vulnerabilities across AI agent infrastructure, MCP servers, and dependencies.

Core Scanning & Discovery

• scan – Full AI supply chain scan: auto-discovers MCP configs (Claude Desktop, Cursor, Windsurf, VS Code Copilot, etc.), extracts packages, queries OSV.dev for CVEs, assesses credential exposure, computes blast radius, and returns a structured report. Supports Docker image scanning, policy evaluation, SBOM ingestion, and NVD/EPSS/CISA KEV enrichment.

• inventory – Fast discovery and package extraction without CVE scanning; quick inventory of MCP configs, servers, packages, and transport types.

• where – List all MCP client config discovery paths and show which files exist on the current system.

• check – Check a specific package (npm, PyPI, Go, Cargo, Maven, NuGet) for known CVEs before installing, with severity, CVSS score, and fix version.

Risk Analysis

• blast_radius – Map the full attack chain for a CVE: affected packages → MCP servers → agents → exposed credentials and tools.

• context_graph – Build an agent context graph with lateral movement analysis (BFS paths) to answer "if agent X is compromised, what else is reachable?"

• runtime_correlate – Cross-reference scan results with proxy runtime audit logs to identify which vulnerable tools were actually called in production.

Policy, Compliance & Remediation

• policy_check – Evaluate security policy rules (severity thresholds, CISA KEV, AI risk flags, denied packages) against scan results; returns pass/fail with violations.

• compliance – Map findings to 47 controls across OWASP LLM Top 10, OWASP MCP Top 10, MITRE ATLAS, and NIST AI RMF with per-control status and an overall score.

• remediate – Generate actionable fix commands (npm/pip upgrades), credential scope reduction guidance, and flag unfixable vulnerabilities.

• cis_benchmark – Run CIS Foundations Benchmark checks against AWS (18 checks) or Snowflake (12 checks) with per-check pass/fail results.

Trust & Integrity

• skill_trust – Assess SKILL.md/instruction files across 5 trust categories with a benign/suspicious/malicious verdict.

• verify – Verify package integrity via SHA-256/SRI hashes and SLSA build provenance attestations against npm/PyPI registries.

• marketplace_check – Pre-install trust check for an MCP server package: download count, CVE status, registry verification, and trust signals.

• registry_lookup – Query the built-in threat intelligence registry (109+ MCP servers) for risk level, known tools, credential requirements, and verification status.

Advanced Capabilities

• generate_sbom – Generate a standards-compliant SBOM in CycloneDX 1.6 or SPDX 3.0 format.

• diff – Compare a fresh scan against a baseline to identify new/resolved vulnerabilities and package inventory changes.

• code_scan – Run SAST via Semgrep on source code to detect SQL injection, XSS, command injection, hardcoded credentials, and more.

• fleet_scan – Batch-scan a list of MCP server names against the security registry for fleet-wide risk assessment.

• analytics_query – Query vulnerability trends, posture history, and runtime event summaries from ClickHouse.

Additional features: real-time runtime enforcement proxy with behavioral attack pattern detection, MCP config drift watching, SIEM integration (Splunk, Datadog, Elasticsearch), output in JSON/SARIF/HTML/Mermaid formats, and AI-specific scanning for GPU/ML packages and model provenance (HuggingFace, Ollama, MLflow, W&B).

Scans AWS cloud infrastructure and Amazon Q configurations to identify security vulnerabilities and ensure compliance with CIS benchmarks.

Integrates with ClickHouse to provide security scan analytics, visualization, and posture scoring for AI infrastructure.

Performs security scanning of Databricks environments to detect misconfigurations and dependency vulnerabilities.

Scans Docker images and Docker-based MCP servers for security risks, tool poisoning, and dependency vulnerabilities.

Integrates as a CI/CD gate to automate security scans and enforce compliance policies during the development lifecycle.

Supports deployment and fleet-wide security scanning of AI agent infrastructure within Kubernetes using Helm charts.

Discovers and analyzes JetBrains AI configurations to identify potential credential leaks and security risks.

Enables dispatching security alerts and vulnerability findings to Jira for incident management and remediation tracking.

Scans Kubernetes clusters to map vulnerability propagation and assess the security posture of AI agent deployments.

Discovers and scans MLflow platforms to identify security risks and verify the provenance of AI models.

Provides integration with OpenTelemetry for monitoring and tracing the security scan pipeline and execution.

Dispatches real-time security alerts and scan reports to Slack channels via webhooks for immediate notification.

Provides governance and security scanning for Snowflake instances, including compliance checks against CIS Snowflake benchmarks.

Generates standardized Software Bill of Materials (SBOM) reports in the SPDX format for security compliance and transparency.

Analyzes security risks and maps the blast radius for AI agent tools and MCP servers utilizing SQLite databases.