SBOM CycloneDX MCP

Software Bill of Materials in CycloneDX 1.6. EU CRA + US EO 14028 evidence.

Install

# Option 1 — uvx (no install)
uvx sbom-cyclonedx-mcp

# Option 2 — pip
pip install sbom-cyclonedx-mcp

# Option 3 — npx meok-setup install (recommended)
npx meok-setup --pack cybersec

What it does

✓CycloneDX 1.6 generation
✓EU CRA Annex I alignment
✓US EO 14028 + NIST SSDF
✓Component licensing audit

Claude Desktop config

{
  "mcpServers": {
    "sbom-cyclonedx": {
      "command": "uvx",
      "args": ["sbom-cyclonedx-mcp"]
    }
  }
}

Part of the MEOK governance MCP suite — see all 38 servers

MIT licensed · HMAC-signed attestations · Built by MEOK AI Labs