io.github.CSOAI-ORG/sbom-cyclonedx-mcp
SBOM CycloneDX + SPDX Generator/Validator
Is the io.github.CSOAI-ORG/sbom-cyclonedx-mcp MCP server down? No. Installed with mcp<2, it started and listed its tools on 2026-11-03.
Software Bill of Materials generation + validation in CycloneDX 1.6 and SPDX 2.3 formats. Requir...
needs mcp<2 probed 2026-11-14 · unchanged since 2026-11-03
A plain install of the package stops at the import below. These tool definitions are from a second install with mcp<2, started in a container with the network off, on 2026-11-03.
MCP error -32000: Connection closed
in <module>
raise ModuleNotFoundError(_MESSAGE, name=__name__)
ModuleNotFoundError: No module named 'mcp.server.fastmcp- Run it
- uvx --with 'mcp<2' sbom-cyclonedx-mcp@1.0.5 (stdio, probed in a container with the network off)
- Host
- pypi.org
- Reports itself as
- SBOM CycloneDX + SPDX Generator/Validator 1.30.0
- Capabilities
- experimental, prompts, resources, tools
- Repository
- https://github.com/CSOAI-ORG/sbom-cyclonedx-mcp
- Registry
- active, updated 2026-08-19 · registry entry
- Changes
- 2 recorded, reachable in 0 of them. A row is added when the result, the tool count or the cost changes.
Most expensive tools
Estimates with the o200k_base tokenizer.
| Tool | o200k estimate | Share of this server |
|---|---|---|
| generate_sbom_cyclonedx | 133 | 21 % |
| regulation_map | 129 | 20 % |
| vex_attach | 126 | 20 % |
| generate_sbom_spdx | 124 | 19 % |
| validate_sbom | 124 | 19 % |
Compare this server with others.
More servers
Other registry entries on pypi.org, the ones next to this name; all of them.
- io.github.CSOAI-ORG/restaurant-ai-mcp · crashed on start
- io.github.CSOAI-ORG/resume-parser-ai-mcp · needs mcp<2
- io.github.CSOAI-ORG/risk-assessment-ai-mcp · needs mcp<2
- io.github.CSOAI-ORG/robotics-control-mcp · needs mcp<2
- io.github.CSOAI-ORG/scam-detector-mcp · needs mcp<2
- io.github.CSOAI-ORG/schema-validator-ai-mcp · needs mcp<2
- io.github.CSOAI-ORG/security-scanner-ai-mcp · needs mcp<2
- io.github.CSOAI-ORG/self-healing-infrastructure-mcp · needs mcp<2
Servers that mention cyclonedx.
- CycloneDX component count, body discarded io.github.sadri-dridi/cyclonedx-ok · alive
- KernelScan io.kernelscan/kernelscan · alive
- ai-bom-mcp io.github.CSOAI-ORG/ai-bom-mcp · needs mcp<2
- eb-stack io.github.stackhands/eb-stack · not probed
History
We add a row when the result changes. A server with no change keeps its last row.
| Probed | Result | Init | Tools | Claude | o200k |
|---|---|---|---|---|---|
| 2026-11-03 08:37 | needs mcp<2 | 1.1 s | 5 | 1.2k | 636 |
| 2026-10-20 06:40 | crashed on start |
Badge for the README
The result of the latest probe, the tool count and the token cost. The feed has an entry for every probe that changed them.
A mail when this server changes
Stops answering, comes back, tool set or cost changes. One confirmation mail first, a stop link in every mail.
For the publisher
- The package imports FastMCP from mcp.server.fastmcp. mcp 2.0, the Python SDK of 28 July 2026, renamed FastMCP to MCPServer, and the package asks for mcp with no upper bound, so a plain install (uvx, pip) gets mcp 2.x and the server stops at the import. Installed with mcp<2, it starts and lists its tools. The fix for the publisher: pin mcp<2 in the dependencies, for example mcp>=1.2,<2, and publish a new version, or move to MCPServer as the SDK's migration guide says. Until then, run it with uvx --with 'mcp<2'.
The cause and the fix, with the code before and after: ModuleNotFoundError: No module named 'mcp.server.fastmcp'