Trustify

This MCP server provides comprehensive integration with Trustify instances, a supply chain security platform for vulnerability management and SBOM (Software Bill of Materials) analysis. Built in Rust using the rmcp library with support for both stdio and SSE transports, it offers tools for querying SBOMs and their contained packages, retrieving vulnerability information by CVE ID or PURL (Package URL), analyzing multiple PURLs for security issues, and accessing advisory data with flexible filtering and sorting capabilities. The implementation includes OpenID Connect authentication for secure API access, URL encoding utilities for proper PURL handling, and response optimization to reduce payload sizes, making it valuable for security teams conducting supply chain risk assessments, developers analyzing dependencies for vulnerabilities, and organizations maintaining compliance through automated SBOM and vulnerability tracking workflows.