MCP server to perform a Trivy scan and produce an SBOM in CycloneDX format.
MCP server to perform a Trivy scan and produce an SBOM in CycloneDX format.
Install the following. - uv - trivy - Node.js
Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.
{
"mcpServers": {
"mcp-sbom": {
"command": "uv",
"args": [
"--directory",
"/path/to/mcp-sbom",
"run",
"mcp-sbom"
]
}
}
}Maintainer configuration example. Replace example paths and credential placeholders before connecting.
Queries the NIST National Vulnerability Database (NVD) via its API.
Scans projects for security vulnerabilities and automatically updates vulnerable dependencies using Trivy.
Free deterministic security scan of public git repos: OSV.dev vulnerable deps, secrets, config lint.
MCP server for Keycloak
Search CVE vulnerability records from the NIST NVD database. No key required.
# Descope MCP Server [](https://smithery.ai/server/@descope-sample