Browse
→ Code & Dev
→ Dependency-Track MCP Server
Dependency-Track MCP Server
JavaScript stdio MCP server for OWASP Dependency-Track. It exposes project listing and lookup, latest project resolution, project finding retrieval, analysis triggering, CycloneDX BOM upload, and async event-token status tools backed by the official Dependency-Track REST API. Public GitHub repository created September 16, 2026.
MCP unverified
Integration
| Transport | stdio |
| Auth | api-key |
| Endpoint | npx -y dependency-track-mcp-server |
| Install | npm install -g dependency-track-mcp-server |
Use Cases
| 01 | Let an assistant inspect Dependency-Track projects and findings from an MCP client during dependency-risk triage |
| 02 | Upload CycloneDX BOMs and poll event-token status without manually calling Dependency-Track REST endpoints |
| 03 | Trigger project analysis and retrieve vulnerability findings as part of software supply-chain review workflows |
Tags
dependency-track owasp sbom cyclonedx vulnerabilities supply-chain javascript stdio
Machine-readable: /api/servers.json
· JSON-LD schema embedded in <head>