agent-bom
Rank #5,214io.github.msaad00/agent-bom
Scan AI/MCP dependencies, descriptor injection, risky tool inputs and authentication configuration.
What you can do with agent-bom
agent-bom is a Model Context Protocol (MCP) server published by msaad00. It ranks #5,214 of 171,866 active servers on MCP Toplist, and its repository has 36 GitHub stars. agent-bom is listed across 2 registries — PulseMCP and Glama, with 1 tracked version. It was first listed on Feb 22, 2026 and most recently updated on Nov 25, 2024.
Not verifiedMCP Toplist has not yet written a checked profile for this server, so the paragraph above is assembled from registry data only. The repository README is the authority on what it does.
What agent-bom can and cannot do
Not verifiedMCP Toplist has not catalogued this server's tools or limitations. The repository README lists them.
What you need before using agent-bom
The registry listing declares no required environment variables or authentication. This is declared metadata, not a verified install — the repository README is the authority.
Declared by the Official MCP Registry, last synced Nov 8, 2026. Not independently verified by MCP Toplist.
- NVD_API_KEY · optional
Connect agent-bom and confirm it works
claude mcp add agent-bom -e "NVD_API_KEY=<your NVD_API_KEY>" -- uvx agent-bom mcp serverReplace each placeholder with your own value before saving.
[mcp_servers.agent-bom]
command = "uvx"
args = ["agent-bom", "mcp", "server"]
[mcp_servers.agent-bom.env]
NVD_API_KEY = "<your NVD_API_KEY>"Add to ~/.codex/config.toml. Replace each placeholder with your own value before saving.
{
"mcpServers": {
"agent-bom": {
"command": "uvx",
"args": [
"agent-bom",
"mcp",
"server"
],
"env": {
"NVD_API_KEY": "<your NVD_API_KEY>"
}
}
}
}Add to claude_desktop_config.json (Settings → Developer → Edit Config). Replace each placeholder with your own value before saving.
{
"mcpServers": {
"agent-bom": {
"command": "uvx",
"args": [
"agent-bom",
"mcp",
"server"
],
"env": {
"NVD_API_KEY": "<your NVD_API_KEY>"
}
}
}
}Add to ~/.cursor/mcp.json (global) or .cursor/mcp.json (per project). Replace each placeholder with your own value before saving.
{
"servers": {
"agent-bom": {
"type": "stdio",
"command": "uvx",
"args": [
"agent-bom",
"mcp",
"server"
],
"env": {
"NVD_API_KEY": "<your NVD_API_KEY>"
}
}
}
}Save as .vscode/mcp.json in your workspace. Replace each placeholder with your own value before saving.
{
"mcpServers": {
"agent-bom": {
"command": "uvx",
"args": [
"agent-bom",
"mcp",
"server"
],
"env": {
"NVD_API_KEY": "<your NVD_API_KEY>"
}
}
}
}Add to ~/.codeium/windsurf/mcp_config.json. Replace each placeholder with your own value before saving.
{
"mcpServers": {
"agent-bom": {
"command": "uvx",
"args": [
"agent-bom",
"mcp",
"server"
],
"env": {
"NVD_API_KEY": "<your NVD_API_KEY>"
}
}
}
}Replace each placeholder with your own value before saving.
After adding the config, ask your client to list this server's tools. A tool list confirms the connection; an empty list or an error means the server did not start or needs credentials.
What changed, and when this was checked
- First listed
- Feb 22, 2026
- Latest version published
- Nov 25, 2024
- Version history
- 1 version tracked (below)
- Requirements evidence
- Declared by the Official MCP Registry, last synced Nov 8, 2026. Not independently verified by MCP Toplist.
- Profile checked
- Not yet — purpose, capabilities and requirements above come from registry data only
- Ranking data as of
- Oct 28, 2026
- PulseMCP ↗listed since Jun 4, 2026 · delisted, last seen Jun 4, 2026
- Glama ↗listed since Jun 4, 2026 · delisted, last seen Jun 4, 2026
Do you maintain agent-bom? to correct or enrich this profile.
Available versions (1)
| Version | Published |
|---|---|
| 0.1.0 | Nov 25, 2024 |
Ranks ahead of 166,652 of 171,866 servers on MCP Toplist.
Show your rank
Maintain this server? Add the live rank badge to your README — it updates automatically as the leaderboard changes.
[](https://mcptoplist.com/server/io.github.msaad00%2Fagent-bom)<a href="https://mcptoplist.com/server/io.github.msaad00%2Fagent-bom"><img src="https://mcptoplist.com/badge/io.github.msaad00%2Fagent-bom.svg" alt="MCP Toplist: Top 5% of 171,866" /></a>Variants: append ?metric=score or ?metric=stars to the image URL.
Frequently asked questions
- Who maintains agent-bom?
- agent-bom is maintained by msaad00, which publishes 4 MCP servers (1 total version) tracked on MCP Toplist.
- Is agent-bom listed on the Official MCP Registry?
- agent-bom is not on the Official MCP Registry. It is listed on PulseMCP and Glama.
- How many versions does agent-bom have?
- MCP Toplist tracks 1 version of agent-bom, most recently published on Nov 25, 2024.
- Where can I find the source code for agent-bom?
- The source code for agent-bom is hosted at github.com/msaad00/agent-bom.
Do you run this server?
Community projects list the MCP servers behind real agents and apps. Publish yours and this page will link to it.