agent-bom
Rank #5,739io.github.koda-ai-studio/agent-bom
Scan AI/MCP dependencies, descriptor injection, risky tool inputs and authentication configuration.
What you can do with agent-bom
agent-bom is a Model Context Protocol (MCP) server published by koda-ai-studio. It ranks #5,739 of 163,510 active servers on MCP Toplist, and its repository has 35 GitHub stars. agent-bom is listed on Official MCP, with 2 tracked versions. It was first listed on Oct 8, 2026 and most recently updated on Oct 28, 2026.
Not verifiedMCP Toplist has not yet written a checked profile for this server, so the paragraph above is assembled from registry data only. The repository README is the authority on what it does.
What agent-bom can and cannot do
Not verifiedMCP Toplist has not catalogued this server's tools or limitations. The repository README lists them.
What you need before using agent-bom
The registry listing declares no required environment variables or authentication. This is declared metadata, not a verified install — the repository README is the authority.
Declared by the Official MCP Registry, last synced Oct 29, 2026. Not independently verified by MCP Toplist.
- NVD_API_KEY · optional
Connect agent-bom and confirm it works
claude mcp add agent-bom -e "NVD_API_KEY=<your NVD_API_KEY>" -- uvx agent-bom mcp serverReplace each placeholder with your own value before saving.
[mcp_servers.agent-bom]
command = "uvx"
args = ["agent-bom", "mcp", "server"]
[mcp_servers.agent-bom.env]
NVD_API_KEY = "<your NVD_API_KEY>"Add to ~/.codex/config.toml. Replace each placeholder with your own value before saving.
{
"mcpServers": {
"agent-bom": {
"command": "uvx",
"args": [
"agent-bom",
"mcp",
"server"
],
"env": {
"NVD_API_KEY": "<your NVD_API_KEY>"
}
}
}
}Add to claude_desktop_config.json (Settings → Developer → Edit Config). Replace each placeholder with your own value before saving.
{
"mcpServers": {
"agent-bom": {
"command": "uvx",
"args": [
"agent-bom",
"mcp",
"server"
],
"env": {
"NVD_API_KEY": "<your NVD_API_KEY>"
}
}
}
}Add to ~/.cursor/mcp.json (global) or .cursor/mcp.json (per project). Replace each placeholder with your own value before saving.
{
"servers": {
"agent-bom": {
"type": "stdio",
"command": "uvx",
"args": [
"agent-bom",
"mcp",
"server"
],
"env": {
"NVD_API_KEY": "<your NVD_API_KEY>"
}
}
}
}Save as .vscode/mcp.json in your workspace. Replace each placeholder with your own value before saving.
{
"mcpServers": {
"agent-bom": {
"command": "uvx",
"args": [
"agent-bom",
"mcp",
"server"
],
"env": {
"NVD_API_KEY": "<your NVD_API_KEY>"
}
}
}
}Add to ~/.codeium/windsurf/mcp_config.json. Replace each placeholder with your own value before saving.
{
"mcpServers": {
"agent-bom": {
"command": "uvx",
"args": [
"agent-bom",
"mcp",
"server"
],
"env": {
"NVD_API_KEY": "<your NVD_API_KEY>"
}
}
}
}Replace each placeholder with your own value before saving.
After adding the config, ask your client to list this server's tools. A tool list confirms the connection; an empty list or an error means the server did not start or needs credentials.
When to choose another server
No task-specific alternatives are catalogued for agent-bomyet; the list above is its publisher's other servers.
What changed, and when this was checked
- First listed
- Oct 8, 2026
- Latest version published
- Oct 28, 2026
- Version history
- 2 versions tracked (below)
- Requirements evidence
- Declared by the Official MCP Registry, last synced Oct 29, 2026. Not independently verified by MCP Toplist.
- Profile checked
- Not yet — purpose, capabilities and requirements above come from registry data only
- Ranking data as of
- Oct 28, 2026
- Official MCP ↗listed since Oct 23, 2026 · still listed
Do you maintain agent-bom? to correct or enrich this profile.
Available versions (2)
| Version | Published |
|---|---|
| 0.111.0 | Oct 28, 2026 |
| 0.110.0 | Oct 22, 2026 |
Ranks ahead of 157,771 of 163,510 servers on MCP Toplist.
Show your rank
Maintain this server? Add the live rank badge to your README — it updates automatically as the leaderboard changes.
[](https://mcptoplist.com/server/io.github.koda-ai-studio%2Fagent-bom)<a href="https://mcptoplist.com/server/io.github.koda-ai-studio%2Fagent-bom"><img src="https://mcptoplist.com/badge/io.github.koda-ai-studio%2Fagent-bom.svg" alt="MCP Toplist: Top 5% of 163,510" /></a>Variants: append ?metric=score or ?metric=stars to the image URL.
Frequently asked questions
- Who maintains agent-bom?
- agent-bom is maintained by koda-ai-studio, which publishes 3 MCP servers (6 total versions) tracked on MCP Toplist.
- Is agent-bom listed on the Official MCP Registry?
- Yes — agent-bom is listed on the Official MCP Registry.
- How many versions does agent-bom have?
- MCP Toplist tracks 2 versions of agent-bom, most recently published on Oct 28, 2026.
- Where can I find the source code for agent-bom?
- The source code for agent-bom is hosted at github.com/koda-ai-studio/agent-bom.
Do you run this server?
Community projects list the MCP servers behind real agents and apps. Publish yours and this page will link to it.