codeinspectus_generate_sbom

MCP tool from Codeinspectus by Synvoya

CycloneDX/SPDX SBOM using Trivy plus native Pub inventory/fallback (written to the managed dir by default, or a path you choose).

How to use it

Project documentation lists codeinspectus_generate_sbom for the Codeinspectus MCP server. Add the server to your MCP client (Claude Desktop, Cursor, Windsurf and others), then check which tools your installed version makes available. Tool availability can depend on configuration and credentials. A server handshake does not verify this tool’s behavior. See the full listing for setup details.

Install Codeinspectus

$npx codeinspectus repair-engines

FULL CODEINSPECTUS LISTING

Other tools in Codeinspectus (5)

codeinspectus_compliance_report

Per-framework code-level control coverage (not certification).

codeinspectus_explain_finding

Deep explanation + full remediation for one finding.

codeinspectus_list_rules

Active detectors, native-pack inventory/rule ownership, engine versions, detection-DB + Trivy/Pub DB provenance and freshness, and structured machine setup/repair state.

codeinspectus_rescan

Re-scan after fixes; diffs vs a prior scan → resolved / remaining / introduced, with fresh technology and pack coverage.

codeinspectus_scan

Full local scan of a path (engines + AI checks). Returns CWE-keyed findings, detected technologies, exact native-pack and Pub dependency coverage, remediations, framework tags, and three-state repository evidence for supported runtime controls.