Generate SPDX SBOM for container images using Trivy scanner to identify software components and dependencies in SPDX JSON format.
-
524,517 tools. Updated 2026-09-06 16:21
"SPDX" matching MCP tools:
- Fetch the SPDX licence identifier for an open source package version to verify licence compatibility before adding a dependency. Supports PyPI, npm, Maven, Go, Cargo, NuGet, and RubyGems.-
- Audit a CycloneDX or SPDX SBOM against an SPDX license policy, returning a PASS/WARN/BLOCK verdict and listing blocked or warned packages.-
- Audit licence compatibility across your dependency list. Submit package names or SPDX IDs to receive a COMPATIBLE/CONFLICT verdict with conflicting pairs and recommended action.-
- Get plain English analysis of any-
- Scan a Software Bill of Materials (SBOM) for known security vulnerabilities. Get a per-package report of CVEs with severity and fixed versions.-
Matching MCP Servers
- AlicenseNot gradedqualityCmaintenanceEnables querying SPDX license list, metadata, and full license texts through natural language or direct tool calls.7MIT
- AlicenseNot gradedqualityAmaintenanceEnables searching, comparing, and validating SPDX licenses and exceptions, plus SPDX expression validation and SBOM analysis through a Streamable HTTP endpoint.MIT
Matching MCP Connectors
SPDX open-source license list with full text
Real-time SPX 0DTE options dealer market-structure for agents: GEX, walls, gamma flip, vol regime.
- Register an SBOM once and continuously check for new CVEs affecting your dependencies. Supports CycloneDX and SPDX formats, returning new findings on each check.-Destructive
- List CVEs in a container image via Docker Scout, with filters for fixed versions, severity, and base images. Supports SARIF, SPDX, GitLab, and SBOM formats.MIT
- Generate a Software Bill of Materials (SBOM) for a container image, returning the package inventory in SPDX, CycloneDX, JSON, or plain-text list format to identify all components and their versions.MIT
- Retrieve basic GitHub repository metadata and statistics including stars, forks, language, and open issues to assess repository health and activity.MIT
- Scan a project directory with Syft to generate a Software Bill of Materials (SBOM). Get an inventory of all software components and dependencies for compliance and vulnerability scanning.MIT No Attribution
- Retrieve the list of languages supported by Spix playbooks for voice calls, email, and contact management, enabling selection of appropriate language settings.MIT
- List, search, filter, and edit tags in a markdown vault library (Recipes/Components), with faceted browsing and license-tier filtering.MIT
- Retrieve a list of all webhook endpoints configured in Spix. Use this to view active URLs for incoming call, email, and contact management events.MIT
- Add or remove tags from a contact to categorize and manage your contact list for AI-driven voice calls and messaging.MIT
- Confirm the current authenticated identity for the active session.MIT
- Retrieve the list of TTS emotions to personalize voice calls and messages for AI agents.MIT
- Resume a paused playbook by providing its ID. Use this tool to restart execution of a halted workflow.MIT
- Retrieve an AI-generated summary of a call session to review conversation highlights without listening to the full recording.MIT
- End an active phone call by supplying its session ID, terminating the call instantly.MIT
- List all registered API keys for the Spix server to manage authentication credentials for AI agent integrations.MIT