{
  "$schema": "https://glama.ai/mcp/schemas/server.json",
  "maintainers": [
    "msaad00"
  ],
  "name": "agent-bom",
  "title": "agent-bom",
  "description": "AI supply-chain BOM: every agent, MCP server and AI package, and what each one can reach. Discovers agents, MCP servers, models, and runtime traffic; scans for vulnerable packages, prompt-injection, license violations, and risky tool capabilities; and maps blast radius across a security graph. Starts with 8 focused MCP tools for scanning, exposure analysis, and remediation. Select task profiles or the explicit full compatibility catalog for specialized work.",
  "license": "Apache-2.0",
  "repository": {
    "type": "git",
    "url": "https://github.com/koda-ai-studio/agent-bom"
  },
  "homepage": "https://github.com/koda-ai-studio/agent-bom",
  "transport": "stdio",
  "command": "agent-bom",
  "args": [
    "mcp",
    "server"
  ],
  "dockerfile": "integrations/glama/Dockerfile",
  "environmentVariables": {
    "NVD_API_KEY": {
      "description": "NVD API key for higher rate limits on vulnerability enrichment",
      "required": false
    }
  },
  "categories": [
    "security",
    "developer-tools"
  ],
  "tags": [
    "security",
    "sbom",
    "supply-chain",
    "ai-security",
    "mcp",
    "cloud-security",
    "vulnerability-scanning",
    "prompt-injection",
    "compliance",
    "license-compliance"
  ],
  "relatedServers": [
    {
      "name": "filesystem",
      "url": "https://github.com/modelcontextprotocol/servers/tree/main/src/filesystem",
      "reason": "Reference MCP server commonly paired for local artifact access during scans."
    },
    {
      "name": "git",
      "url": "https://github.com/modelcontextprotocol/servers/tree/main/src/git",
      "reason": "Reference MCP server for repository inspection alongside dependency and SBOM scanning."
    }
  ]
}