SBOMApp - SBOM Generator & Vulnerability Scanner MCP Server

by mcpsbom Your server? Claim it

not responding

SBOMApp - SBOM Generator & Vulnerability Scanner is listed as active in the registry but did not answer our last check. Last commit 27 Feb 2026.

Generate SBOMs, scan vulnerabilities, and analyze dependencies from local projects or Git repos.

Uptime history 51 days of history · worst day 0%

51 days agonow

0.0%

Uptime 24h

0 of 90 checks

—

Tools

hidden behind auth

963 ms

Response time

average over 24h

Stars

last commit 27 Feb 2026

SBOMApp - SBOM Generator & Vulnerability Scanner does not always answer

Over the last week it answered 0.0% of our checks. We check every 15 minutes, so you hear about the next outage within the hour — not from your users.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 15 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add sbom-mcp --transport http https://mcp.sbomapp.com/mcp

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "sbom-mcp": {
      "url": "https://mcp.sbomapp.com/mcp"
    }
  }
}

~/.codex/config.toml

[mcp_servers.sbom-mcp]
url = "https://mcp.sbomapp.com/mcp"

.cursor/mcp.json

{
  "mcpServers": {
    "sbom-mcp": {
      "url": "https://mcp.sbomapp.com/mcp"
    }
  }
}

.vscode/mcp.json

{
  "mcpServers": {
    "sbom-mcp": {
      "url": "https://mcp.sbomapp.com/mcp"
    }
  }
}

Endpoints

URL	Transport	State	Latency	Checked
https://mcp.sbomapp.com/mcp	streamable-http	answering	963 ms	15 min ago

Alternatives to SBOMApp - SBOM Generator & Vulnerability Scanner

same job, measured the same way

FinishKit

by finishkit

FinishKit MCP: scan GitHub repos for security vulnerabilities, deployment blockers, and quality

46 installs/wk local only

Seal Security

by sealsecurity

Vulnerability management: scan projects, search sealed packages, manage sealing rules and reports.

answering

GhostFree

by shane-js

MCP server that scans your repo's dependencies for security vulnerabilities based on published CVEs.

23 installs/wk local only

Bug Detector

by madhavi-opsera

Analyzes code for bugs, security vulnerabilities, and code smells

local only

QuantumScan PQC Scanner

by gaiabio12-design

PQC scanner for GitHub repos and smart contracts. Detects quantum-vulnerable ECDSA/RSA.

4 tools answering

Github Analytics MCP Server

by thenextgennexus

Get GitHub repository stats, search repos, analyze languages, and compare projects

14 installs/wk local only

Scannd

by scannd

Trigger security scans and read reports/vulnerabilities via the hosted Scannd API. Free: 2 scans/mo.

39 installs/wk local only

Secobserve MCP

by nh4ttruong

MCP server for SecObserve: triage findings, import scan reports and SBOMs, generate VEX.

local only

SBOMApp - SBOM Generator & Vulnerability Scanner — questions

Answers built from our own checks of this server.

Is SBOMApp - SBOM Generator & Vulnerability Scanner working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 0 of 90 checks got a reply (0.0%), average response time 963 ms. The bar chart above shows every period we have measured.

The registry lists SBOMApp - SBOM Generator & Vulnerability Scanner as active — why does it not respond?

The official MCP registry stores what the author submitted; it does not verify that the server still runs. We check the endpoint ourselves, and this one does not answer. Catalogues that copy the registry without checking will show it as working.

How do I connect SBOMApp - SBOM Generator & Vulnerability Scanner?

Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.

Does SBOMApp - SBOM Generator & Vulnerability Scanner need an API key?

No. SBOMApp - SBOM Generator & Vulnerability Scanner completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. This is what we observed, not what the docs claim.

Is SBOMApp - SBOM Generator & Vulnerability Scanner open source?

We cannot say either way: 0 stars on GitHub, but we could not determine the licence, and without one the code is not open source by default.