An astronaut overseeing a futuristic data hub
Download PDFMarkdown Version

Connect SBOM Dependency Risk Scorer to ChatGPT and Claude

Set it up once and it works in ChatGPT, Claude, Cursor, and any other client you love. It all runs safely in the background, so you can relax and focus on what really matters. Quantify your software supply chain risk in seconds.

Ask AI about this Connector

Developed, maintained, and hosted by Vinkius.

MCP VERIFIED · PRODUCTION READY · VINKIUS GUARANTEED

Waiting for input…

Works with modern AI clients that support MCP, including ChatGPT, Claude, Cursor, and more.

ChatGPTClaudeCursorPerplexityGeminiMicrosoft CopilotRaycastMeta AI

Your AI does the work. We keep it safe and sound.

No other AI tool gives you this. Your workflow runs in the client you already love, your account stays protected, and you decide what the agent can and cannot do. It is the whole reason to make the switch.

Each Connector lives inside our infrastructure, the same place where your workflow runs. The three things below are already part of it, working quietly in the background so you never have to think about them. Nothing to add, nothing to set up, nothing to worry about.

A futuristic MCP client docking bay
V8 Isolate01

Each Connector runs inside its own sealed environment.

Each Connector runs inside its own sealed V8 runtime — no access to your files, your system, or other servers. A Connector never sees past its own request.

Kill Switch02

One switch stops every agent. Instantly.

One action deactivates every Connector, revokes every token, and ends every session at once. AI Governance keeps the record.

FinOps per User03

Spending limits that pause instead of surprise.

Every user keeps their own connections and credentials, isolated from everyone else. Anything that would cross your spending limit is held for your approval, not billed.

Three controls, built into the layer your AI connects through.

Curated set · 4 capabilities

We ship only the actions that matter.

Capability set01 / 01

01-04

4 capabilities in this set.

Part of 4 available through SBOM Dependency Risk Scorer.

  1. 01

    Analyze dependency structure

    This capability maps out the dependency tree within your SBOM. It helps your agent understand the depth and nesting of your software components.

  2. 02

    Evaluate package stalness

    This capability checks how outdated your packages are. It compares release dates to find components that are no longer being maintained.

  3. 03

    Tally vulnerability exposure

    This capability counts the known CVEs in your SBOM. It gives your agent a direct count of security vulnerabilities present in your dependencies.

  4. 04

    Calculate composite risk score

    This capability generates a final, single risk rating. It combines structural, staleness, and vulnerability data into one actionable number.

Real work

What teams actually run

01

Supply Chain Auditing

Upload an SBOM to quickly see if your third-party libraries introduce new risks.

02

Maintenance Monitoring

Check if your project is relying on abandoned or stale packages.

03

Security Compliance

Generate risk scores to satisfy internal security requirements for new software.

04

Complexity Management

Analyze the dependency tree to ensure your software architecture isn't becoming too nested.

One connector, every AI

SBOM Dependency Risk Scorer works with the most popular AI clients.

These are the most popular clients, each with a step-by-step guide: one link, set up once, with governance and visibility built in. And because everything runs on the MCP standard, the same connection also works in any other compatible client — nothing to rebuild.

ClaudeClaudeChatGPTChatGPTGeminiGeminiPerplexityPerplexityGrokGrokMicrosoft CopilotMicrosoft CopilotCursorCursorVS CodeVS CodeWindsurfWindsurfJetBrainsJetBrainsClineClineLangChainLangChainVercel AI SDKVercel AI SDKLovableLovableZ.aiZ.aiRaycastRaycastQwen CodeQwen CodeKimi CodeKimi CodeLe ChatLe Chat

Building your own app? The connector is yours to use.

You don't need a client to put SBOM Dependency Risk Scorer to work: the same hosted connection plugs into your own applications and agent code, with the same governance on every request. Build with it, chat with it — one connection for both.

Observed, not estimated

713ms average. Fast in production.

SBOM Dependency Risk Scorer is checked daily against the live service.

Daily averagePeak 890ms
Oct 3Today
Fastest day
570ms
Slowest day
890ms
14-day trend
Stable-2%

Connect your client

One URL. Every client.

Activate the Connector, copy your link, and paste it into the client you already use. 4 capabilities arrive ready to run.

Preview access · not provider authentication

The vk_preview_* token belongs to Vinkius preview infrastructure. It lets Claude discover and display the capabilities of SBOM Dependency Risk Scorer, so you can see the experience inside your AI.

It does not authenticate your account with SBOM Dependency Risk Scorer. Actions requiring credentials or live account data may not run until you activate the Connector and authorize the service.

SBOM Dependency Risk Scorer Connector

You're all set. Choose your MCP client and follow the setup instructions.

Connector linkhttps://edge.vinkius.com/vk_preview_KlPJrIwRzxzKDRHQ287k2q0iQyXI2BLIopz2ESTV/mcp

Claude Desktop

Follow the steps below to connect in seconds.

  1. 1In Claude Desktop, open Settings → Connectors.
  2. 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
  3. 3Click Add and start a new chat — SBOM Dependency Risk Scorer capabilities are ready to use.
Configuration · claude_desktop_config.jsonCopy
{
  "mcpServers": {
    "sbom-dependency-risk-scorer-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_KlPJrIwRzxzKDRHQ287k2q0iQyXI2BLIopz2ESTV/mcp"
    }
  }
}
  • Claude
  • ChatGPT
  • Cursor
  • VS Code
  • Windsurf
  • Claude Code
  • JetBrains
  • Cline

Step-by-step instructions for each client are in the guide. How to connect

Guided setup for Claude? Set up SBOM Dependency Risk Scorer in Claude and other AIs

See all the AI clients this connector works with ↑

Who it's for

Built for the work SBOM Dependency Risk Scorer owners hand off.

Security professionals and DevOps engineers use this to automate the auditing of software components.

  • 01

    Security Engineer

    Hands off SBOM files to the agent to identify high-priority CVEs.

  • 02

    DevOps Engineer

    Uses the capability to monitor dependency staleness during build pipelines.

  • 03

    Software Architect

    Checks dependency depth to prevent overly complex software structures.

FAQ

Questions SBOM Dependency Risk Scorer owners ask.

  • 01

    What file formats does this MCP support?

    This MCP processes SPDX and CycloneDX SBOM files.

  • 02

    Which AI clients can I use with this?

    You can use this MCP with any compatible client like Claude, Cursor, or Windsurf.

  • 03

    How is the risk score calculated?

    The score is a composite value based on dependency depth, package staleness, and the number of known vulnerabilities.

  • 04

    Do I need to host the MCP myself?

    No, Vinkius hosts and manages the MCP for you. You just connect your client and start working.

  • 05

    Can it find specific CVEs?

    The capability tallies known vulnerability exposure to count the CVEs present in your SBOM.

  • 06

    What types of SBOM formats are supported?

    The engine supports both SPDX and CycloneDX formats for analyzing dependency structures.

  • 07

    How is the final risk score calculated?

    The calculate_composite_risk_score capability aggregates metrics from structural complexity, package staleness, and vulnerability counts to produce a normalized risk level.

  • 08

    Can I use this to find outdated packages?

    Yes, by using the evaluate_package_stalness capability with a reference date, you can identify components that have not been updated recently.

Explore

More in Security

Suggestions

Connect SBOM Dependency Risk Scorer to Claude, Cursor, ChatGPT & more