Bomly MCP Server

Give your coding agent the dependency graph it is about to change: scan, diff, explain, audit

Local serverstdioPython

What is the Bomly MCP server?

Give your coding agent the dependency graph it is about to change: scan, diff, explain, audit. That is what the bomly mcp server brings to an AI assistant: the same capability, reachable through the Model Context Protocol rather than a separate app or dashboard.

The short version

Bomly is a free, open-source CLI for dependency intelligence. It scans source trees, SBOMs, Git refs, and container images; explains why dependencies are present; enriches packages with vulnerability and license data when you ask for it; evaluates policy; and writes automation-friendly output for CI.

Getting it running

bomly-mcp on npm is all you need. Most clients run it directly, so configuration is a few lines and a restart.

The tools it exposes

The server publishes 2 tools. What each one is for:

  • uses — actions/checkout@v5
  • Question — Command

Things to watch

  • It runs with your machine's permissions. That is convenient and also the reason to think about what you point it at before you approve a tool call.
  • Keep per-call confirmation enabled while you learn its behaviour; it is the cheapest safeguard you have.

How it compares

This sits in the payments and commerce group, where several servers overlap in what they claim to do but differ sharply once you actually set them up. Bomly's toolset — uses, Question — is a fair guide to whether it matches your workflow. It is maintained by bomly-dev; worth a glance at recent repository activity before you build anything load-bearing on it.

We check each listing at SyncDev against the project's documentation before it goes live — if something here drifts out of date, it is a bug worth reporting.

Available tools

ToolWhat it does
usesactions/checkout@v5
QuestionCommand

How to install the Bomly MCP server

{
  "mcpServers": {
    "bomly-cli": {
      "command": "npx",
      "args": ["-y", "bomly-mcp"]
    }
  }
}

Add to claude_desktop_config.json, then restart Claude Desktop.

Example prompts to try

  • Use Bomly to uses.
  • Use Bomly to Question.

Frequently asked questions

It connects Bomly to MCP-compatible AI assistants such as Claude and Cursor, exposing 2 tools (uses, Question) that the assistant can call on your behalf. Instead of copying data back and forth by hand, the assistant works with Bomly directly.