A
licenseA
qualityA
maintenanceAI Bill of Materials compliance tracking and SBOM generation for AI/ML systems
4
MIT
Best SPDX MCP Servers
SPDX (Software Package Data Exchange) is an open standard for communicating software bill of material information, including components, licenses, copyrights, and security references.
Why this server?
Generates AI-BOMs in SPDX 3.0 format, providing a standard way to document AI software bill of materials.
Why this server?
Generates standardized Software Bill of Materials (SBOM) reports in the SPDX format for security compliance and transparency.
Why this server?
Uses SPDX license identifiers to filter and validate the licensing of hardware IP cores imported from external repositories.
AlicenseAqualityDmaintenanceProvides AI assistants with a complete FPGA toolchain for HDL linting, simulation, synthesis, and place-and-route across various hardware targets. It features a GitHub-backed IP core registry that enables users to search for and import MIT-licensed cores directly through their chat interface.151MITWhy this server?
Generates Machine Learning Bill of Materials (MLBOM) in SPDX format for documenting AI agent dependencies and supply chain compliance.
Why this server?
Provides tools for parsing SPDX license expressions, checking license compatibility, and generating SPDX documents for open source compliance.
License Checker AI MCPofficial
Alicense-qualityAmaintenanceLicense Checker AI - MCP server providing AI-powered tools and automation by MEOK AI Labs8MITWhy this server?
Generates Software Bill of Materials (SBOM) reports in SPDX format for documenting software components and dependencies.
Why this server?
Generates SBOMs using the SPDX standard.
Why this server?
Uses SPDX identifiers to perform license risk assessments, categorizing npm packages into risk levels from low to critical.
Alicense-qualityCmaintenanceAn MCP server for searching, inspecting, and evaluating NPM packages through health scoring and license risk assessments. It provides comprehensive package analysis including maintenance status, popularity trends, and security vulnerability reports to help users make informed dependency decisions.3MITWhy this server?
Provides tools for querying the SPDX License List, including listing licenses with filters (OSI-approved, FSF Free/Libre, deprecated), retrieving license metadata and full text, and performing substring search across license IDs and names.
Alicense-qualityCmaintenanceEnables querying SPDX license list, metadata, and full license texts through natural language or direct tool calls.5MIT
