AI BOM MCP
The AI BOM MCP server provides tools to generate, audit, and map AI Bills of Materials (AI-BOMs) for compliance and governance purposes.
Generate AI-BOMs: Create structured AI-BOM documents in CycloneDX ML-BOM or SPDX 3.0 format covering all 10 required field categories, including model name, version, organisation, licence, architecture, parameter count, and training datasets.
Audit AI-BOM Completeness: Analyse an existing AI-BOM JSON document against the 10 required field categories, returning per-category pass/fail results and a gap list of missing or incomplete fields.
Map to Regulation: Map an AI-BOM against regulatory framework requirements, supporting EU AI Act, NIST AI RMF, US EO 14028, and ISO 42001.
List Required Fields: Retrieve the full list of the 10 required AI-BOM field categories and their associated fields as a compliance reference.
Signed Attestations (Pro/Enterprise only): Generate cryptographically signed (HMAC-SHA256) AI-BOM completeness attestations with a unique ID and public verification URL for independent auditor verification.
Generates AI-BOMs in SPDX 3.0 format, providing a standard way to document AI software bill of materials.
Ai Bom MCP
AI Bill of Materials MCP in CycloneDX + SPDX format
AI Bill of Materials MCP in CycloneDX + SPDX format. Required by EU AI Act Article 11. MIT
🚀 Quick Start
# Install via pip
pip install ai_bom_mcp
# Or install via Smithery
npx -y @smithery/cli@latest install ai-bom-mcp --client claudeRelated MCP server: scan-your-ai-toolkit
✨ Features
MCP protocol compliant
Easy installation
Well-documented API
Production-ready
Active maintenance
📖 Documentation
🛡️ Compliance
This MCP server is built with EU AI Act compliance built-in:
✅ Article 9 — Risk Management System
✅ Article 13 — Transparency & Instructions for Use
✅ Article 15 — Bias Detection & Testing
✅ Article 26 — FRIA Support (where applicable)
✅ Article 50 — AI Content Watermarking (where applicable)
Need help getting compliant? Book a free 15-min diagnostic →
🏢 Enterprise
Need custom development, SLA guarantees, or white-label deployment?
Pro: £79/mo — Full MCP suite + EU AI Act tracking
Enterprise: £499/mo — Custom dev + SLA + Dedicated support
View Pricing → | Contact Sales →
🤝 Part of the MEOK Ecosystem
This server is part of the MEOK AI Labs ecosystem — 26 PyPI packages · ~16,300 monthly installs.
Domain | Purpose |
EU AI Act compliance marketplace | |
AI safety & monitoring | |
Sovereign AI platform | |
Legacy modernization |
📜 License
MIT © CSOAI-ORG
Configuration
Add to your claude_desktop_config.json (Claude Desktop) or your MCP client config:
{
"mcpServers": {
"ai-bom-mcp": {
"command": "uvx",
"args": ["ai-bom-mcp"]
}
}
}Or: pip install ai-bom-mcp then run the ai-bom-mcp command (stdio transport).
Examples
Once configured, ask your assistant, for example:
"Use
generate_ai_bomto …""Use
audit_ai_bom_completenessto …""Use
map_to_regulationto …"
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Servers
- Alicense-quality-maintenanceOpen-source AI governance toolkit — MCP servers & CLIs for scanning, auditing, and managing your AI environmentLast updated1
- Flicense-quality-maintenanceOpen-source AI governance toolkit. MCP servers & CLIs for scanning, auditing, and managing your AI environmentLast updated
- Alicense-qualityBmaintenanceLocal-first AI compliance scanner via Model Context Protocol, scanning codebases for violations of DPDPA 2023, RBI FREE-AI, SEBI AI/ML, and the EU AI Act.Last updated1Apache 2.0
- AlicenseAqualityDmaintenanceScans codebases for AI system usage and generates EU AI Act compliance reports.Last updated441MIT
Related MCP Connectors
Runtime AI governance: decision gates, human approval, hash-chained audit, compliance mapping.
Threat modeling, code/cloud/pipeline scanning, shadow-AI discovery, compliance checks and fixes.
Enterprise AI Control Plane: governance, guardrails, spend tracking, compliance & smart routing.
Appeared in Searches
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/CSOAI-ORG/ai-bom-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server