1. Conduid
  2. Developer Tools
  3. Bomtrail
MCP server · Developer Tools

Bomtrail

by · github.com/Almeida96/bomtrail

Trace software dependencies from CycloneDX SBOMs. Kotlin CLI and read-only MCP server for dependency paths, reverse impact and release reviews.

Unclaimed clicyclonedxdependency-analysisjavakotlinmcpsbomsoftware-supply-chain
InstallView source
28Low

Scored 3 hours ago · breakdown

About Bomtrail

Bomtrail is an MCP server published by Almeida96 in the Developer Tools category: trace software dependencies from CycloneDX SBOMs. Kotlin CLI and read-only MCP server for dependency paths, reverse impact and release reviews.

The repository has 1 stars and 0 forks, with the last commit yesterday. Recent commit activity is the strongest signal that reported issues will get attention.

Install

From source
git clone https://github.com/Almeida96/bomtrail

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Bomtrail

Powered by Claude

Ask about Bomtrail — answers draw on its README.

Security checks

6 checks have not been run yet.

Questions

About Bomtrail

How do I install Bomtrail?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Bomtrail safe to use with an AI agent?

Its trust score is 28 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Bomtrail still maintained?

Yes — the last commit was yesterday. The repository has 1 stars and 0 forks.