Bomly MCP Server

Give your coding agent the dependency graph it is about to change: scan, diff, explain, audit

Local serverstdioPython

What is the Bomly MCP Server?

Give your coding agent the dependency graph it is about to change: scan, diff, explain, audit

The short version

Bomly is a free, open-source CLI for dependency intelligence. It scans source trees, SBOMs, Git refs, and container images; explains why dependencies are present; enriches packages with vulnerability and license data when you ask for it; evaluates policy; and writes automation-friendly output for CI.

More MCP options

Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.

Maintainer setup documentation.

Recorded tools

Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.

ToolWhat it does
usesactions/checkout@v5

How to install the Bomly MCP Server

{
  "mcpServers": {
    "bomly-cli": {
      "command": "npx",
      "args": ["-y", "bomly-mcp"]
    }
  }
}

Add to claude_desktop_config.json, then restart Claude Desktop.

Example prompts to try

  • “Use Bomly to uses.”
  • “Use Bomly to Question.”

Frequently asked questions

Give your coding agent the dependency graph it is about to change: scan, diff, explain, audit Confirm the tools offered by your installed version in the connected client. Tool availability and permissions depend on the server and account configuration.