
Company News
AWS Security Hub Adds Socket for Supply Chain Security
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.
ai-bom-mcp
Advanced tools
AI Bill of Materials (AI-BOM) generator + auditor MCP — CycloneDX ML-BOM, SPDX 3.0 AI profile, EU AI Act Annex IV mapping, NIST AI RMF alignment, US EO 14028 federal procurement. By MEOK AI Labs.
AI Bill of Materials MCP in CycloneDX + SPDX format
AI Bill of Materials MCP in CycloneDX + SPDX format. Required by EU AI Act Article 11. MIT
# Install via pip
pip install ai_bom_mcp
# Or install via Smithery
npx -y @smithery/cli@latest install ai-bom-mcp --client claude
This MCP server is built with EU AI Act compliance built-in:
Need help getting compliant? Book a free 15-min diagnostic →
Need custom development, SLA guarantees, or white-label deployment?
View Pricing → | Contact Sales →
This server is part of the MEOK AI Labs ecosystem — 26 PyPI packages · ~16,300 monthly installs.
| Domain | Purpose |
|---|---|
| councilof.ai | EU AI Act compliance marketplace |
| safetyof.ai | AI safety & monitoring |
| meok.ai | Sovereign AI platform |
| cobolbridge.ai | Legacy modernization |
MIT © CSOAI-ORG
Built with 💜 by MEOK AI Labs · UK Companies House 16939677
Add to your claude_desktop_config.json (Claude Desktop) or your MCP client config:
{
"mcpServers": {
"ai-bom-mcp": {
"command": "uvx",
"args": ["ai-bom-mcp"]
}
}
}
Or: pip install ai-bom-mcp then run the ai-bom-mcp command (stdio transport).
Once configured, ask your assistant, for example:
generate_ai_bom to …"audit_ai_bom_completeness to …"map_to_regulation to …"FAQs
AI Bill of Materials (AI-BOM) generator + auditor MCP — CycloneDX ML-BOM, SPDX 3.0 AI profile, EU AI Act Annex IV mapping, NIST AI RMF alignment, US EO 14028 federal procurement. By MEOK AI Labs.
The pypi package ai-bom-mcp receives a total of 65 weekly downloads. As such, ai-bom-mcp popularity was classified as not popular.
We found that ai-bom-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.

Research
/Security News
Popular npm packages keyv and cacheable compromised.

Security News
A misconfiguration gave three Anthropic models internet access, and one, believing it was in a simulation, shipped a credential-stealing package to PyPI.