Generates and validates Software Bill of Materials (SBOM) documents in SPDX 2.3 format.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type @ followed by the MCP server name and your instructions, e.g., "@Sbom Cyclonedx MCP Generate a CycloneDX SBOM for my project"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
SBOM generation in CycloneDX 1
SBOM generation in CycloneDX 1.6 + SPDX 2.3. Required by EO 14028, NIS2, CRA. MIT
# Install via pip
pip install sbom_cyclonedx_mcp
# Or install via Smithery
npx -y @smithery/cli@latest install sbom-cyclonedx-mcp --client claudeRelated MCP server: GoThreatScope
MCP protocol compliant
Easy installation
Well-documented API
Production-ready
Active maintenance
This MCP server is built with EU AI Act compliance built-in:
Free: 10 calls/day. No API key required.
Pro £79/mo: unlimited + signed attestations. Subscribe
Enterprise £1,499/mo: white-label + on-premise + SLA. hello@meok.ai
✅ Article 9 — Risk Management System
✅ Article 13 — Transparency & Instructions for Use
✅ Article 15 — Bias Detection & Testing
✅ Article 26 — FRIA Support (where applicable)
✅ Article 50 — AI Content Watermarking (where applicable)
Need help getting compliant? Book a free 15-min diagnostic →
Need custom development, SLA guarantees, or white-label deployment?
Pro: $99/mo — Full MCP suite + EU AI Act tracking
Enterprise: $499/mo — Custom dev + SLA + Dedicated support
View Pricing → | Contact Sales →
This server is part of the MEOK AI Labs ecosystem — 300+ MCP servers for sovereign AI governance.
Domain | Purpose |
EU AI Act compliance marketplace | |
AI safety & monitoring | |
Sovereign AI platform | |
Legacy modernization |
MIT © CSOAI-ORG
✅ MCP (Anthropic) — native
✅ A2A (Google + Linux Foundation, absorbed IBM ACP Sept 2025)
✅ IBM ACP — covered via A2A merge
◐ Stripe ACP (Agentic Commerce Protocol) — Q3 bridge via agent-commerce-protocol-mcp
◐ AP2 (Google Agent Payments) — partial via agent-commerce-payments-mcp
◐ x402 (Coinbase HTTP 402) — partial via api.meok.ai gateway
→ OASF / AGNTCY (Cisco Outshift + Linux Foundation) — Q3 bridge
👁 ANP (Cisco Agent Network) — watch-list
Pricing options:
Option | Price | Best for |
Self-host (this MCP) | £0 — MIT | Devs |
This MCP Starter | £29/mo | One-MCP teams |
This MCP Pro | £79/mo | Production + 24h SLA |
£29/mo + £0.0002/call | Spiky usage across many MCPs | |
Substrate bundle (this category) | £99-£499/mo | A whole pack |
£1,499/mo | All 47 MCPs, 500K calls |
Each tier above the free self-host adds HMAC-signed attestations verifiable at
verify.meok.ai. Linux Foundation governance on the A2A spine means EU regulated
buyers can deploy without vendor-lock-in objections.
Tier | Price | What you get | Stripe |
Smoke test | £1 | Signed sample MCP-Hardening report + Article 50 PDF | |
Quick Kit | £9 | EU AI Act Article 50 implementation guide (C2PA + EU-Icon) | |
Founder Call | £29 | 30-min 1-on-1 with the founder |
Refundable. UK Stripe — VAT-clean. Builds on the 81-MCP MEOK fleet. Verify any signed report at https://meok.ai/verify.
Add to your claude_desktop_config.json (Claude Desktop) or your MCP client config:
{
"mcpServers": {
"sbom-cyclonedx-mcp": {
"command": "uvx",
"args": ["sbom-cyclonedx-mcp"]
}
}
}Or: pip install sbom-cyclonedx-mcp then run the sbom-cyclonedx-mcp command (stdio transport).
Once configured, ask your assistant, for example:
"Use generate_sbom_cyclonedx to …"
"Use generate_sbom_spdx to …"
"Use validate_sbom to …"
This server cannot be deployed
Generate SBOMs, scan vulnerabilities, and analyze dependencies from local projects or Git repos.
DependencyOracle - 10 ICT dependency tools: SBOM, supply chain, third-party graph.
Linux kernel CVE analyzer: upload a .config, get a CycloneDX VEX report of affecting CVEs.
EOL dates, risk scores, CISA KEV exposure, SBOM audits and edge-device EOS for 500+ products.
