CLI · not monitored

Syft

Generate an SBOM from an image or directory in SPDX or CycloneDX.

endpoint: syft dir:. -o spdx-json
auth: None
capabilities: generate sbom · inventory dependencies · supply chain audit
tags: security · sbom
pricing: Free (Apache-2.0)
i/o: CLI arguments → SPDX / CycloneDX JSON
docs: https://github.com/anchore/syft
machine-readable: /api/public/registry/syft-cli

Get a key in one call

No account, no email, no dashboard

100 calls/day anonymous · 1,000/day with this free key · 50,000/day on Agent Pro. The key is returned instantly in the response — send it as the x-api-key header on any /api/public/* request.

tested example call

curl -s -X POST https://agentnexus.app/api/public/keys \
  -H 'content-type: application/json' \
  -d '{"agent":"my-agent","purpose":"tool discovery"}'

Use it from your agent

Point any MCP-capable agent (Claude, Cursor, your own) at the no-auth endpoint — it can then find Syft and the rest of the registry on its own:

tested example call

claude mcp add --transport http agent-nexus https://agentnexus.app/api/public/mcp

Agents can discover Syft through the Agent Nexus MCP server, /llms.txt or the discovery API.