agent-bom
★ 20
vs
thunderbit-mcp-server
★ 13
agent-bom vs thunderbit-mcp-server
agent-bom: agent-bom is an end-to-end open security scanner for the AI supply chain. It performs CVE discovery, blast-radius analysis, and provides remediation guidance. It supports multiple entry points including agent scanning, container image scanning, IaC scanning, and a self-hosted enterprise deployment.; thunderbit-mcp-server: Thunderbit MCP Server is an open-source toolkit for the Thunderbit Open API that ships three packages: a CLI for scripted extraction, an MCP server exposing seven scraping and distillation tools, and a Claude Code plugin. It converts any web page to clean LLM-ready Markdown, extracts structured data via JSON Schema, and supports batch processing — all backed by a free API key.
01
TL;DR
Choose agent-bom if…CI/CD gating for AI supply chain security
Choose thunderbit-mcp-server if…Feeding clean web content into LLM pipelines for RAG or summarization
02
Side-by-Side Comparison
03
Features
agent-bom01End-to-end blast radius analysis from CVE to credential exposure
02Multi-entrypoint scanning: agents, images, IaC, packages, cloud
03Compliance export (FedRAMP, SOC2, NIST AI RMF, etc.) with tamper-evident evidence bundles
04Self-hosted enterprise deployment with Helm, Postgres, ClickHouse, and Snowflake backends
05Runtime MCP proxy and gateway for traffic enforcement and audit
thunderbit-mcp-server01Converts any web page to clean LLM-ready Markdown via distill command
02Extracts structured data from pages using JSON Schema definitions
03Batch processing support for high-volume scraping tasks
047 MCP tools for Claude Desktop, Cursor, Cline, and Claude Code
05Free API key available at app.thunderbit.com
04
Use Cases
agent-bom↳CI/CD gating for AI supply chain security
↳Security team audit of AI agents and MCP servers
↳Self-hosted enterprise security scanning with fleet management
thunderbit-mcp-server↳Feeding clean web content into LLM pipelines for RAG or summarization
↳Extracting structured product, pricing, or contact data from websites at scale
↳Integrating real-time web data into Claude Code or Cursor workflows
05
Best For
agent-bomTrendingSecurity & SafetyLLM Infra
thunderbit-mcp-server—
FAQ
FAQ
What is the difference between agent-bom and thunderbit-mcp-server?
Both agent-bom and thunderbit-mcp-server are in the Security & Safety category. agent-bom has 20 stars, while thunderbit-mcp-server has 13 stars.
Which is better, agent-bom or thunderbit-mcp-server?
The best choice depends on your use case. Choose agent-bom if CI/CD gating for AI supply chain security, and thunderbit-mcp-server if Feeding clean web content into LLM pipelines for RAG or summarization.
Is agent-bom free or open source?
Yes, agent-bom is open source on GitHub (Apache-2.0).
Is thunderbit-mcp-server free or open source?
Yes, thunderbit-mcp-server is open source on GitHub (MIT).
→