Skip to content
InfratoApp
InfratoApp / Resources / MCP servers / bomly-cli

bomly-cli

bomly-cli is an MCP server, listed under security. Its repository has 14 GitHub stars and is licensed under Apache-2.0; we last read it on 2026-10-22.

bomly-cli is a free, open-source command-line interface for dependency intelligence, SBOM generation, vulnerability auditing, and CI policy enforcement.

Install

Read from bomly-cli’s own README, close to verbatim -- not written by us, and not guessed.

bomly scan

What it reaches, and what it needs

Reaches
○ not recognised
Credential
○ none found

Maintenance

Stars
14
State
listed
Licence
Apache-2.0
From the repository

Free, open-source CLI for dependency intelligence, SBOMs, vulnerability auditing, and CI policy gates.

bomly-cli compared with similar servers

bomly-cli compared with the closest alternatives, by services reached, credentials, stars, last update and licence
ServerReachesNeedsStarsLast updateLicence
bomly-cli (this page)—None listed142026-10-21Apache-2.0
ida-pro-mcp—None listed13,0802026-09-26MIT
mcp-shodanshodanSHODAN_API_KEY1782026-10-19MIT
mcp-server-idapro—None listed1032025-03-26MIT
search-solodit-mcp—None listed422025-06-30—
opencti-mcpopenctiOPENCTI_TOKEN402026-08-03MIT

Ranked by services in common with bomly-cli, then by stars. Figures are from each repository when we last read it.

Common questions about bomly-cli

What does bomly-cli do?
bomly-cli is a free, open-source command-line interface for dependency intelligence, SBOM generation, vulnerability auditing, and CI policy enforcement.
How do I install bomly-cli?
Its own README gives this command: bomly scan. Run it where your MCP client can launch the server, and check the README for any settings it asks for.
Is bomly-cli official and is it maintained?
We found nothing naming it as a vendor’s official server. Its repository has 14 GitHub stars and its state in our directory is listed. Its last commit we recorded was on 2026-10-21.
What licence does bomly-cli use?
The repository declares the Apache-2.0 licence.

More MCP servers for security

All security entries →

Learn this on Infrato