Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.
Setup
Choose your client, copy the config, then fill in any required environment variables.
claude mcp add agent-bom --env NVD_API_KEY='<NVD_API_KEY>' -- uvx agent-bom~/.codex/config.toml
[mcp_servers.agent-bom]
command = "uvx"
args = ["agent-bom"]
env = { NVD_API_KEY = "<NVD_API_KEY>" }
# codex mcp add agent-bom --env NVD_API_KEY='<NVD_API_KEY>' -- uvx agent-bom~/.cursor/mcp.json
{
"mcpServers": {
"agent-bom": {
"command": "uvx",
"args": [
"agent-bom"
],
"env": {
"NVD_API_KEY": "<NVD_API_KEY>"
}
}
}
}.vscode/mcp.json
{
"servers": {
"agent-bom": {
"type": "stdio",
"command": "uvx",
"args": [
"agent-bom"
],
"env": {
"NVD_API_KEY": "<NVD_API_KEY>"
}
}
}
}~/.gemini/settings.json
{
"mcpServers": {
"agent-bom": {
"command": "uvx",
"args": [
"agent-bom"
],
"env": {
"NVD_API_KEY": "<NVD_API_KEY>"
}
}
}
}claude_desktop_config.json
{
"mcpServers": {
"agent-bom": {
"command": "uvx",
"args": [
"agent-bom"
],
"env": {
"NVD_API_KEY": "<NVD_API_KEY>"
}
}
}
}.trae/mcp.json
{
"mcpServers": {
"agent-bom": {
"command": "uvx",
"args": [
"agent-bom"
],
"env": {
"NVD_API_KEY": "<NVD_API_KEY>"
}
}
}
}Environment variables
NVD_API_KEY
Replace the placeholders with your own credentials and keep them out of version control.