What does agent-bom do?

Agent-bom focuses on scanning and managing security for AI and MCP infrastructure with open, self-hosted tools. It is catalogued under Security & compliance platforms on PulseGate.

Who is agent-bom for?

agent-bom is an open-source project built for AI infrastructure engineers and security teams.

Yes — agent-bom is open source under the Apache-2.0 license and free to use.

What platforms does agent-bom run on?

agent-bom runs on the command line. It can also be self-hosted.

Is agent-bom still maintained?

The GitHub repository shows 1.6k commits in the last 90 days.

What projects are similar to agent-bom?

Similar projects tracked by PulseGate include ai-agentbom, agent-borg, and agent-audit-kit.

agent-bom is developed by msaad00.

How long has agent-bom been around?

agent-bom first shipped in 2026.

Back to the index

agent-bom

Name: agent-bom
Author: msaad00

PyPIInfrastructure

agent-bom is an open-source security scanner and self-hosted control plane for AI and MCP infrastructure. It helps engineers and security teams detect vulnerabilities, manage supply chain risks, and remediate issues in AI agent deployments.

Open SourceApache-2.0CLISelf-hosted

Visit PyPI

23stars

8forks

5features

2026since

Overview

5 features

In the Security & compliance platforms space, agent-bom takes a focused approach. It focuses on scanning and managing security for AI and MCP infrastructure with open, self-hosted tools. agent-bom is an open-source project aimed at AI infrastructure engineers and security teams. The project is open source (Apache-2.0). It ships for the command line, and it can be self-hosted.

Behind agent-bom is msaad00, and it first shipped in 2026. Development happens publicly on GitHub with 23 stars and 1.6k commits in the last 90 days. Among its 5 catalogued features are security scanning, self-hosted control plane, and AI/MCP infrastructure support. It exposes integrations via an MCP server.

Summary written by a language model from the project’s public pages.

Security scanning
Self-hosted control plane
AI/MCP infrastructure support
Vulnerability detection
Remediation tools

Built with & integrations

Framework

flaskFastAPI

AI providers

openai

Connectors

MCP

Runs on

CLISelf-hosted

Trust & compliance

License

Apache-2.0

Verified signals

HTTPSOpen SourceFree tierGitHub · ★ 23Active maintenance

Indexing history

What PulseGate has recorded for this listing

Indexed29 Jun · 14:15 UTC
Listing verified against its public source
Source: PulseGate · Open

Frequently asked questions about agent-bom

What does agent-bom do?: Agent-bom focuses on scanning and managing security for AI and MCP infrastructure with open, self-hosted tools. It is catalogued under Security & compliance platforms on PulseGate.
Who is agent-bom for?: agent-bom is an open-source project built for AI infrastructure engineers and security teams.
Is agent-bom free?: Yes — agent-bom is open source under the Apache-2.0 license and free to use.
What platforms does agent-bom run on?: agent-bom runs on the command line. It can also be self-hosted.
Is agent-bom still maintained?: The GitHub repository shows 1.6k commits in the last 90 days.
What projects are similar to agent-bom?: Similar projects tracked by PulseGate include ai-agentbom, agent-borg, and agent-audit-kit.ai-agentbom agent-borg agent-audit-kit
Who makes agent-bom?: agent-bom is developed by msaad00.
How long has agent-bom been around?: agent-bom first shipped in 2026.

At a glance

Platforms: Cli
Languages: English
Open source: Yes · ★ 23
License: Apache-2.0
Built for: AI infrastructure engineers and security teams
Model: Open source
Solves: Scanning and managing security for AI and MCP infrastructure with open, self-hosted tools.

Registered as

GitHub: msaad00/agent-bom
PyPI: agent-bom

Developer

msaad00

Small team

GitHub

Open source

View on GitHub

Stars: 23
Forks: 8
Open issues: 30
Last commit: 29 Jun 2026
Commits 90d: 1,560
Contributors: 5
Authorship: Small team
Default branch: main
Latest release: v0.89.2 · 22 Jun 2026

Index record

Identity confidence: Low · 64
Indexed: 29 Jun 2026
Lifecycle: Alive
Last seen: 29 Jun 2026

Identity audit (12)

Slug: agent-bom-pypi-org
Lifecycle last checked: 8 Aug 2026
Verification state: Indexed for public listing
Listing state: Listed: yes
Index status: Included in index
Latest evidence snapshot: 29 Jun 2026
Timeline basis: Indexed-at chronology. This listing's first-seen date was written by the catalog backfill, not observed here, so it is not treated as a sighting.
Name from: Written by a language model from the project's public pages.
Category from: Assigned by a language model.
Summary from: Written by a language model from public pages.
Languages from: Detected by a language model from page content.
Canonical URL: https://pypi.org/project/agent-bom

Ship this? Send a correction — no account, and you get a link to follow it.

Similar projects

Closest matches by what these projects do