AI supply chain security scanner with 18 MCP tools. Auto-discovers 20 MCP clients, scans dependencies for CVEs (OSV/NVD/EPSS/CISA KEV), maps blast radius from vulnerabilities to exposed credentials and tools, runs CIS benchmarks, generates CycloneDX/SPDX SBOMs, and enforces compliance across OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF, and EU AI Act.
Run the underlying MCP server directly — without Agent-CoreX routing.
npx -y agent-bomAgent-CoreX intelligently routes which tools from msaad00/agent-bom your AI agent actually needs per request — reducing token usage and cost.
agent-corex.json
{
"mcpServers": {
"agent-bom": {
"command": "npx",
"args": [
"-y",
"agent-bom"
]
}
}
}Connect in 2 minutes. Only pay for the tools your agent actually uses.
Recommended: intelligent tool routing, lower costs
uvx agent-corex mcp add agent-bomAgent-CoreX selects only the tools your agent needs, cutting token usage by up to 60%.
Use msaad00/agent-bom directly without routing
npx -y agent-bomNew to Agent-CoreX? View setup guide →