Back to MCP directory
publicPublicdnsLocal runtime

mcp-sbom-server

一个基于Python的MCP服务器,用于执行Trivy扫描并生成CycloneDX格式的SBOM报告。

article

README

🚀 MCP SBOM 服务器

MCP SBOM 服务器可执行 Trivy 扫描,并生成 CycloneDX 格式的软件物料清单(SBOM),助力软件供应链的安全管理与合规性检查。

🚀 快速开始

安装

先决条件

需提前安装以下工具:

MCP 客户端配置

配置示例

"mcpServers": {
        "mcp-sbom": {
            "command": "uv",
            "args": [
                "--directory",
                "/path/to/mcp-sbom",
                "run",
                "mcp-sbom"
            ]
        }
    }

构建

⚠️ 重要提示

本项目使用 uv

  1. 同步依赖项并更新锁文件:
uv sync

调试

MCP Inspector

可使用 MCP Inspector 进行调试,按以下方式启动:

npx @modelcontextprotocol/inspector uv --directory /path/to/mcp-sbom run mcp-sbom

MCP Inspector

Windows 系统

在 Windows 上运行时,使用类似以下的路径格式:

C:/Users/gkh/src/mcp-sbom-server/src/mcp_sbom
help

Runtime guide

cloud

Hosted runtime

Hosted servers run from a provider-managed environment. You usually connect the MCP client to the hosted endpoint or follow the provider's authorization flow, without keeping a local process alive

  1. Open provider connection page
  2. Authorize or copy endpoint
  3. Connect from your MCP client
terminal

Local runtime / other methods

Local servers run on your own machine or infrastructure. You normally copy the server_config into your MCP client, install the required package, and provide env variables from env_schema when needed

  1. Copy server_config
  2. Install required package
  3. Fill env variables and restart client