3 tagged cyclonedx, measured the same way as everything else here.
MCP server Claude CodeCodexCursor +2
Software Bill of Materials generation + validation in CycloneDX 1.6 and SPDX 2.3 formats. Required by EO 14028 + NIS2 + CRA. Runs locally from the sbom-cyclonedx-mcp Python package.
MCP server Claude CodeCodexCursor +2
Generate SBOMs, scan vulnerabilities, and analyze dependencies from local projects or Git repos. Remote server at mcp.sbomapp.com.
MCP server Claude CodeCodexCursor +2
Read-mostly MCP server for Dependency-Track with version lifecycle, single-call triage, duplicate-filtering ergonomics, strict input validation, broadcast triage, cross-project vulnerability search, and transient-failure retry. Runs locally from the dtrack-mcp Python package.