agent-bom
Security scanner and graph for agentic infrastructure — agents, MCP, runtime, and blast radius.
Topics: Security
Connect
Review any command before running it. Package names and URLs come from the server's own registry entry.
Package (pypi 0.108.4)
uvx agent-bomOr add to your MCP client config:
{
"mcpServers": {
"agent-bom": {
"command": "uvx",
"args": [
"agent-bom"
],
"env": {
"NVD_API_KEY": "<YOUR_VALUE>"
}
}
}
}NVD_API_KEYsecret — NVD API key for higher rate limits on vulnerability enrichment
This server takes extra arguments — see its repository.
Related servers
semgrep
Scan code for security vulnerabilities using Semgrep.
ida-pro-mcp
IDA Pro plugin for binary analysis: decompilation, disassembly and automatic malware analysis reports.
GhidraMCP
Autonomous reverse engineering with Ghidra: decompile binaries, rename methods and data, and list methods, classes, imports and exports.
jadx-ai-mcp
JADX decompiler plugin providing live, LLM-assisted reverse engineering.
beelzebub
Honeypot framework for building decoy MCP tools that an agent would never use in normal work, to detect prompt injection and malicious…
SafeDep Vet MCP
Protect your AI agents and IDEs from malicious open-source packages.
Listed in punkpeye/awesome-mcp-servers (MIT)
Data from the Official MCP Registry