Ai Bom Mcp
Generate and audit AI Bills of Materials (models, datasets, dependencies) in CycloneDX and SPDX formats before you ship AI features.
Overview
AI-BOM MCP is a Ship-phase MCP server that generates and audits AI Bills of Materials using CycloneDX ML-BOM and SPDX 3.0 AI profile formats.
What is this MCP server?
- AI Bill of Materials generator and auditor via MCP
- CycloneDX ML-BOM output support
- SPDX 3.0 AI profile support
- Python stdio server ai-bom-mcp v1.2.7 on PyPI
- GitHub source at CSOAI-ORG/ai-bom-mcp for schema and tool details
- MCP server version 1.2.7
- 1 PyPI package with stdio transport and runtimeHint python
- Supports CycloneDX ML-BOM and SPDX 3.0 AI profile per registry description
What problem does it solve?
Shipping AI features without a machine-readable inventory of models and related components makes security reviews slow and leaves you unsure what is actually in production.
Who is it for?
Solo builders shipping agent or ML-powered products who need CycloneDX or SPDX-style AI supply-chain documentation before launch or customer audit.
Skip if: Pure static sites or apps with no models, datasets, or AI pipelines where traditional app SBOMs are sufficient.
What do I get? / Deliverables
You produce and audit AI-BOM documents in standard formats from your agent workflow so release and compliance conversations start from structured evidence.
- Generated AI-BOM artifacts aligned with CycloneDX ML-BOM and SPDX 3.0 AI profile
- Audit-oriented review of AI component inventory via MCP tools
- stdio server ai-bom-mcp v1.2.7 integration
Recommended MCP Servers
Journey fit
How it compares
MCP AI supply-chain BOM tool, not a generic dependency scanner skill or cloud deploy server.
Common Questions / FAQ
Who is ai-bom-mcp for?
It is for indie developers and small teams shipping AI or agent products who must document models and related components in CycloneDX or SPDX AI profiles.
When should I use ai-bom-mcp?
Use it during ship—before security review, enterprise signup, or release—when you need to generate or audit an AI Bill of Materials from your agent environment.
How do I add ai-bom-mcp to my agent?
Install the PyPI package ai-bom-mcp, register it as a stdio MCP server in Claude Code, Cursor, or another host, and point it at the project metadata your BOM workflow requires per the GitHub documentation.