saasvista/aibom-scanner

See what AI is in a codebase and what it can reach: SDKs, models, MCP servers and agent tools.

---

Two questions get hard to answer once a repo has agents in it: what AI is in here, and what can it touch?

aibom-scanner reads a codebase and writes an AI Bill of Materials (AIBOM). It lists every AI SDK and model the code calls, every MCP server it wires up, and every tool an agent can call. Then it shows where those add up to a risk and which NIST, ISO, EU AI Act and OWASP items each finding points at.

It is a static scan. It makes no network calls, uses no language model, and has zero dependencies. It stores no values from MCP configs (key names only) and masks key-shaped strings in the code lines it quotes.

How It Works

Your codebase
     |
     v
File walker (git ls-files, os.walk)
     |
     v
Detectors: AI SDKs and models (70 patterns), MCP servers, agent tools, secrets
     |
     v
Risk engine: 34 rules in 8 categories, plus 3 evidence-built findings
     |
     v
Control mapper: 49 controls in 3 frameworks, 20 OWASP items
     |
     v
Table / JSON / SARIF

Quick Start

pip install aibom-scanner

aibom-scanner scan --path /path/to/your/repo

Here is part of the output for a small support agent: one Python file that gives an agent web search, Gmail and a shell, plus an .mcp.json with three servers. Long lines are cut.

Risk Findings (10)
  ...
  [HIGH    ] Agentic AI framework without human oversight controls
  [HIGH    ] Codebase combines untrusted input, sensitive data access and an action capability
  [MEDIUM  ] MCP server launched without a pinned version
  [MEDIUM  ] Agent tool can execute code

MCP Servers (3)