agent-bom MCP Server: Install & Setup

Install agent-bom in Claude Code

Claude Code

claude mcp add koda-ai-studio-agent-bom -- uvx agent-bom

mcp.json (Claude Desktop, Cursor, VS Code, Windsurf)

{
  "mcpServers": {
    "koda-ai-studio-agent-bom": {
      "command": "uvx",
      "args": [
        "agent-bom"
      ]
    }
  }
}

Frequently asked questions

What does the agent-bom MCP server do?

Scan AI/MCP dependencies, descriptor injection, risky tool inputs and authentication configuration.

Is the agent-bom MCP server free?

Yes, most likely. Open source and no paid account or API key is mentioned in the listing. Check the provider for current pricing.

Does agent-bom run locally or remotely?

Local. Runs on your machine (stdio). You install it with npx, uvx, Docker or from source.

How do I add agent-bom to Claude Code?

Run: claude mcp add koda-ai-studio-agent-bom -- uvx agent-bom

More security & identity MCP servers

View all

Redact PDF

1994

dambuchs/redact-pdf-mcp

Permanently redact PII (names, emails, phone numbers, addresses, IBANs, card numbers) from PDFs, scans and screenshots, with multilingual OCR.

LocalAccount neededTypeScript

ContrastAPI

UPinar/contrastapi

Security intelligence: CVE/EPSS/KEV lookups, domain recon (DNS, WHOIS, SSL, subdomains), IOC threat intel, OSINT and code scanning for secrets and injection.

RemoteAccount neededPython

Thoughtspot

thoughtspot/mcp-server

MCP Server for ThoughtSpot - provides OAuth authentication and tools for querying data

RemoteAccount needed

Universal Trust Adapter

11k

alicelabs-llc/universal-trust-adapter

68k+ security-audited MCP skills + free agent trust layer: signed ATC cards, tool gating, audits.

LocalFree

AIDEN

0985

aiden-network/aiden-mcp

Look up AI agents on Robinhood Chain: ERC-8004 identity, feedback and USDG-backed trust scores.

Local + RemoteFree

Phantom Secrets

19509

ashlrai/phantom-secrets

Value-blind secret metadata and gated workflows for AI coding agents through Phantom's local proxy.

LocalFree