Installation

pip / pipx (recommended)

pip install agent-bom
# or
pipx install agent-bom

With optional extras

pip install "agent-bom[api]"         # REST API server
pip install "agent-bom[mcp-server]"  # MCP server dependencies
pip install "agent-bom[dashboard]"   # Streamlit dashboard
pip install "agent-bom[all]"         # Everything

Docker

# CLI scanning
docker run --rm ghcr.io/msaad00/agent-bom:latest scan

# With host config access (for MCP client discovery)
docker run --rm \
  -v "$HOME/.config:/root/.config:ro" \
  -v "$HOME/Library/Application Support:/root/Library/Application Support:ro" \
  ghcr.io/msaad00/agent-bom:latest scan

From source

git clone https://github.com/msaad00/agent-bom.git
cd agent-bom
pip install -e ".[dev]"

Verify installation

agent-bom --version
agent-bom scan --help

Requirements

• Python 3.11+
• Optional: Docker (for container image scanning via Grype/Syft)
• Optional: kubectl (for Kubernetes scanning)
• Optional: semgrep (for SAST code scanning)
• No external API keys required for basic operation