agent-bom

io.github.koda-ai-studio/agent-bom

AI supply-chain BOM: agents, MCP servers, packages and recorded reach. Scan and investigate via MCP.

View repository →

Connect this server

Add this to your MCP client config — claude_desktop_config.json (Claude Desktop) or .cursor/mcp.json (Cursor).Suits: Claude Desktop · Cursor.

{
  "mcpServers": {
    "agent-bom": {
      "command": "uvx",
      "args": [
        "agent-bom"
      ],
      "env": {
        "NVD_API_KEY": "<your NVD_API_KEY>"
      }
    }
  }
}
Environment variables
  • NVD_API_KEYsecretNVD API key for higher rate limits on vulnerability enrichment

A starting point — check the repository for exact arguments and setup. Restart your client after editing the config.

Category
Developer Tools
Version
0.113.2
Registry
active
Published
11/4/2026

Remotes

  • streamable-httphttps://agent-bom-mcp.up.railway.app/mcp

More Developer Tools servers

Browse all Developer Tools →

GRC Lake

koda-ai-studio

Read-only connectors; local writes. Evidence and assessments for agents. Only people approve.

Developer ToolsAdded 1 week ago

io.github.kodandy/jp-biz-opportunity

kodandy

Japanese public-sector business opportunities for AI agents: tenders, subsidies, sanctions. x402.

Developer ToolsAdded 5 months ago

io.github.kodandy/jp-crypto-tax-rules

kodandy

Machine-readable Japanese crypto-asset tax rules for AI agents: rules-as-code with citations, x402.

Developer ToolsAdded 4 months ago

io.github.kodandy/jp-m2m-gateway

kodandy

Raw Japanese regulatory data for AI agents: pension, gazette, gBizINFO. x402-metered (USDC).

Developer ToolsAdded 5 months ago

Kody

kody-hq

Your agents' cloud for individuals and teams. Search, execute, packages, jobs, and credentials.

Developer ToolsAdded 2 weeks ago

io.github.kody-w/dogg-world-check

kody-w

Verified, citable world numbers right now, each with a public tick and SHA-256 fingerprint.

Developer ToolsAdded 1 month ago

Add the badge to your site

Show visitors that agent-bom is listed here — it’s also the link we check for a free listing.

agent-bom — listed on Serverdex

HTML — for your website

<a href="https://serverdex.io/server/io-github-koda-ai-studio-agent-bom?utm_source=badge"><img src="https://serverdex.io/brand/badge.svg" alt="agent-bom — listed on Serverdex" width="123" height="40" loading="lazy"></a>

Recommended. A dofollow link from your own domain is the one that counts for search engines, and it's the link we check for a free listing.

Markdown — for your README

[![agent-bom — listed on Serverdex](https://serverdex.io/brand/badge.svg)](https://serverdex.io/server/io-github-koda-ai-studio-agent-bom?utm_source=badge)

Nice for visibility, but GitHub marks README links nofollow, so it doesn't pass authority. Use the HTML badge on your site as well.