A
licenseA
qualityA
maintenanceAI Bill of Materials compliance tracking and SBOM generation for AI/ML systems
Last updated
4
MIT
Best SPDX MCP Servers
SPDX (Software Package Data Exchange) is an open standard for communicating software bill of material information, including components, licenses, copyrights, and security references.
Why this server?
Generates AI-BOMs in SPDX 3.0 format, providing a standard way to document AI software bill of materials.
Why this server?
Generates standardized Software Bill of Materials (SBOM) reports in the SPDX format for security compliance and transparency.
AlicenseAqualityBmaintenanceAI supply chain security scanner for MCP servers and AI agents. 18 tools for CVE scanning, blast radius mapping, CIS benchmarks, SBOM generation, and compliance enforcement across OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF, and EU AI Act.Last updated7328Apache 2.0Why this server?
Uses SPDX license identifiers to filter and validate the licensing of hardware IP cores imported from external repositories.
AlicenseAqualityDmaintenanceProvides AI assistants with a complete FPGA toolchain for HDL linting, simulation, synthesis, and place-and-route across various hardware targets. It features a GitHub-backed IP core registry that enables users to search for and import MIT-licensed cores directly through their chat interface.Last updated151MITWhy this server?
Generates Machine Learning Bill of Materials (MLBOM) in SPDX format for documenting AI agent dependencies and supply chain compliance.
Why this server?
Provides tools for parsing SPDX license expressions, checking license compatibility, and generating SPDX documents for open source compliance.
License Checker AI MCPofficial
Alicense-qualityAmaintenanceLicense Checker AI - MCP server providing AI-powered tools and automation by MEOK AI LabsLast updated14MITWhy this server?
Generates Software Bill of Materials (SBOM) reports in SPDX format for documenting software components and dependencies.
Why this server?
Provides tools for looking up open-source licenses by SPDX ID, searching the SPDX license list, and fetching full license texts.
Alicense-qualityCmaintenanceEnables lookup, search, and retrieval of open-source license information using the SPDX license list, with tools for finding licenses by ID or keyword and fetching full license text.Last updated7MITWhy this server?
Uses SPDX identifiers to perform license risk assessments, categorizing npm packages into risk levels from low to critical.
Alicense-qualityCmaintenanceAn MCP server for searching, inspecting, and evaluating NPM packages through health scoring and license risk assessments. It provides comprehensive package analysis including maintenance status, popularity trends, and security vulnerability reports to help users make informed dependency decisions.Last updated3MITWhy this server?
Provides tools for querying the SPDX License List, including listing licenses with filters (OSI-approved, FSF Free/Libre, deprecated), retrieving license metadata and full text, and performing substring search across license IDs and names.
Alicense-qualityCmaintenanceEnables querying SPDX license list, metadata, and full license texts through natural language or direct tool calls.Last updated2MIT
