Prototype · Preview: every server in the official registry, synced every 30 minutes. Sign in with Google to write reviews.Prototype · updated every 30 min
PopNx MCPMCP servers for people who use AI · explained in plain words

DEEPBOM

by JunHwan-Kwonversion 2.5.0i★ 2iComputer or cloud
Registry nameio.github.JunHwan-Kwon/deepbom

How to install

What it does

Browser-local and CLI static evidence for deployed AI model artifacts.

  • Connects Computer or cloud
  • Account or key No key needed
  • Category Web & browsers

Install

Pick the AI app you use, then copy the settings.

Passed 5/5 checks · What you ask goes through the maker’s server (deepbom.org) · ✓ Commands checked Nov 13, 2026

First: which AI do you use?

Pick your app and the steps appear below.

Works with Claude · about 2 min

No key, nothing to install · Set it up once on claude.ai or the desktop app, then use it in chat · free accounts can add 1 · on Team/Enterprise an Owner adds it

  1. Open Claude’s Connectors page

    CustomizeConnectors

    CustomizeConnectors1Add2https://…3Add4
  2. Click “Add” → “Custom” → “Web” and fill in these 2 fields

    Copy each value into the field with the same name in Claude, then click Continue

    Name · NameDEEPBOM
    Remote MCP server URL · Addresshttps://deepbom.org/mcp

    Click Continue past the sign-in settings Claude detected · under Authentication choose what the maker says (Sign in now, Sign in when needed or No sign in), then click Add

  3. Turn it on in a chat

    +ConnectorsDEEPBOM

  4. Try it

    Use DEEPBOM and tell me what you can do for me, then show me one thing

    ✓ If Claude says it is using DEEPBOM or shows a DEEPBOM tool in the answer, you are connected

Menu names checked against Anthropic’s help page on Nov 11, 2026 · your screen may differ slightly by app version

Works with ChatGPT, depending on your plan

Full MCP: ChatGPT Business, Enterprise or Edu on the web · Pro: connects with read/fetch permissions, so tools that change data may not work · Plus: not confirmed in OpenAI’s docs; if you see an add-custom-MCP option on the Plugins page you can try these steps · web only

  1. Open ChatGPT’s add-MCP page on the web

    Plugins+Add custom MCP server

    ChatGPTPlugins1+2https://…3Create4
  2. Fill in the name and address

    Enter a name, paste the address under Connection, tick the risk warning and click Create as a plugin

    Name · NameDEEPBOM
    Connection · Addresshttps://deepbom.org/mcp
  3. Pick DEEPBOM in a chat

    Start a new chat and pick DEEPBOM from your plugins before typing

  4. Try it

    Use DEEPBOM and tell me what you can do for me, then show me one thing

    ✓ If ChatGPT says it is using DEEPBOM or shows a DEEPBOM tool in the answer, you are connected

Menu names checked against OpenAI’s help page on Nov 11, 2026 · your screen may differ slightly by app version

Works with Claude Code · about 2 min

No key, nothing to install

  1. Open Terminal

    Mac: press Command+Space and type Terminal · Windows: open PowerShell

  2. Paste this command and press Enter

    claude mcp add --transport http --scope user deepbom https://deepbom.org/mcp
  3. Type /mcp in Claude Code

    You should see DEEPBOM listed as connected

  4. Try it

    Use DEEPBOM and tell me what you can do for me, then show me one thing

    ✓ If Claude Code says it is using DEEPBOM or shows a DEEPBOM tool in the answer, you are connected

Menu names checked against Anthropic’s help page on Nov 11, 2026 · your screen may differ slightly by app version

Works with Cursor · about 2 min

No key, nothing to install

  1. Click this button to open Cursor

    Open in Cursor

    Cursor asks you to confirm; click Install

  2. Open the AI chat in Cursor in Agent mode

  3. Try it

    Use DEEPBOM and tell me what you can do for me, then show me one thing

    ✓ If Cursor says it is using DEEPBOM or shows a DEEPBOM tool in the answer, you are connected

Menu names checked against Cursor’s help page on Nov 11, 2026 · your screen may differ slightly by app version

Works with VS Code · about 2 min

No key, nothing to install

  1. Click this button to open VS Code

    Open in VS Code

    VS Code asks you to confirm; click Install

  2. Open the AI chat in VS Code in Agent mode

  3. Try it

    Use DEEPBOM and tell me what you can do for me, then show me one thing

    ✓ If VS Code says it is using DEEPBOM or shows a DEEPBOM tool in the answer, you are connected

Menu names checked against VS Code’s help page on Nov 11, 2026 · your screen may differ slightly by app version

Other apps that use MCP, such as Windsurf, Zed or Gemini CLI, each add servers differently. See how in the app list.

See every app that uses MCP →

Address for apps that connect over the web

Addresshttps://deepbom.org/mcp

JSON settings are under “For developers” below

Stuck? Ask people who use DEEPBOM💬 Discussion →
For developers: Terminal commands and JSON settings

Over the web

Claude Code

claude mcp add --transport http --scope user deepbom https://deepbom.org/mcp

Cursor (~/.cursor/mcp.json)

{
  "mcpServers": {
    "deepbom": {
      "url": "https://deepbom.org/mcp"
    }
  }
}

VS Code (mcp.json)

{
  "servers": {
    "deepbom": {
      "type": "http",
      "url": "https://deepbom.org/mcp"
    }
  }
}

Installed on your computer

Claude Code

claude mcp add --scope user deepbom -- npx -y deepbom mcp

Claude Desktop (claude_desktop_config.json)

{
  "mcpServers": {
    "deepbom": {
      "command": "npx",
      "args": [
        "-y",
        "deepbom",
        "mcp"
      ]
    }
  }
}

Cursor (~/.cursor/mcp.json)

{
  "mcpServers": {
    "deepbom": {
      "command": "npx",
      "args": [
        "-y",
        "deepbom",
        "mcp"
      ]
    }
  }
}

VS Code (mcp.json)

{
  "servers": {
    "deepbom": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "deepbom",
        "mcp"
      ]
    }
  }
}

These settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.

At a glance

Downloads per weeki
116/wk
Licencei
Apache-2.0
Connection
Computer or cloud
Transport
stdio, streamable-http
Latest versioni
2.5.0
Published to registryi
Oct 20, 2026
Code last changedi
Oct 23, 2026
Maker
JunHwan-Kwon
Packages
npm: deepbom
Registry status
Active

Which apps can use it

Based on how this server connects and on each app’s own docs, checked Nov 10, 2026.

Connect over the internet in

ClaudeChatGPTGooseLM StudioMsty StudioCherry StudioCursorVS Code + GitHub CopilotVisual StudioWindsurf (Devin Desktop)ZedKiroClineContinueJetBrains AI AssistantClaude CodeCodex CLIGemini CLIOpenCodenodecodeWarpLibreChatOpen WebUIRaycast

Run on your computer in

ClaudeGooseLM StudioMsty StudioCherry StudioCursorVS Code + GitHub CopilotVisual StudioWindsurf (Devin Desktop)ZedKiroClineContinueJetBrains AI AssistantClaude CodeCodex CLIGemini CLIOpenCodenodecodeWarpLibreChatRaycast

All apps, with pros and cons →

Related guides

What it can do

Tool names and descriptions exactly as the server reported them on Nov 13, 2026. The maker wrote them, not us; we show them as plain text.

  • deepbom_analyze_file

    Use when the user asks to inspect, summarize, or visualize an attached TFLite, ONNX, GGUF, SafeTensors, Core ML, or ExecuTorch deployment artifact. Opens a browser-local analyzer, returns a hash-bound format-neutral Model IR table and static evidence summary, and provides determi

  • deepbom_capabilities

    Use before analysis when format support, privacy boundaries, or the difference between the ChatGPT and local DEEPBOM paths is unclear. Returns capability metadata only and does not inspect a file.

  • deepbom_publish_analysis

    Receives one bounded browser-produced DEEPBOM result, validates its structure, and returns it to the conversation. This tool accepts analysis results, never model bytes.

  • deepbom_publish_error

    Receives one bounded browser-produced DEEPBOM error and returns a recovery action to the conversation. This tool accepts diagnostic text, never model bytes.

  • deepbom_query_file

    Use for follow-up questions about an already identified attachment: inspect a layer by subject_ref, search or page through all operations, inspect findings, rank improvement investigations, inspect encoded activation fusion, compare source-pinned static delegate eligibility, or e

  • deepbom_publish_query

    Component-only: validates and returns a bounded Evidence IR query projection for the same attachment. No model bytes, state persistence, or runtime execution. Result digests establish consistency, not independent server attestation.

  • deepbom_workflow_guide

    Use to discover how to answer a model-analysis question across ChatGPT, the interactive deepbom.org workspace and the local CLI. Returns real query sections, visualization/export actions, explicit web continuation links, required inputs, CLI argument templates and evidence limits

Basic checksi

We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 14, 2026

  • ✓ Pass

    Maker matches the repo

    The registry name was verified with the GitHub account JunHwan-Kwon, which owns the repo

  • ✓ Pass

    Still maintained

    Code last changed 22 days ago

  • ✓ Pass

    Has a licence

    Uses Apache-2.0

  • ✓ Pass

    Endpoint responds

    Responded in 50 ms (HTTP 200)

  • – Not applicable

    Sign-in with OAuth

    No sign-in needed

  • ✓ Pass

    No hidden instructions in tool descriptions

    Read 7 tool descriptions and found no hidden instructions to the AI

Discussion

Ask, share a tip or report that it does not work. Sorted by what people marked helpful.

No posts yet. Be the first to ask or share.

Posts here are written by users, not the PopNx team.

Sign in with Google to post

User reviews

No reviews yet

Sign in with Google to write a review

Compared with others in Web & browsersi

  • More stars than 84% of the other 1510 servers in this category
  • Published to the registry more recently than 55% of the other 1510 servers in this category
  • Basic checks equal to or better than 100% of the other 1510 servers in this category

Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.

Common questions

Is DEEPBOM safe?

It passed 5 of 5 applicable basic checks. We have not read the code. Before adding a key or token, see what access the server asks for and use a key with only the permissions you need.

What keys or codes does it need?

The registry does not list a required key, though some servers ask you to sign in on first use.

Does it run on my computer or in the cloud?

Either way works: install it on your computer or connect to the cloud version.

Is it still maintained?

The GitHub repo last changed 22 days ago, and the latest version (2.5.0) reached the registry 25 days ago.

Which apps can use it?

Apps that support MCP, such as Claude Desktop, Claude Code, Cursor and VS Code. It connects by URL, so apps that accept remote MCP servers work too, such as ChatGPT on the web (full MCP on Business and above; Pro read-only).

What can I use instead?

In the same category: Browser Use, Scrapling MCP Server, Chrome DevTools MCP

Others in the same category

Servers in the same category from other makers, sorted by stars.

Reading a card:↓ Downloads per weeki★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi

Browser Use

Lets AI do web tasks for you, such as filling forms, searching and extracting data, in the maker’s cloud browsers or on your computer.

by browser-useWidely used↓ 1.7M/wk★ 120.9KUpdated 24 days ago

Computer or cloud✓ service owner · browser-use.com

Scrapling MCP Server

Web scraping with stealth HTTP, real browsers, and Cloudflare bypass. CSS selectors supported.

by D4VinciWidely used↓ 396.9K/wk★ 102.5KUpdated 9 days ago

Runs on your computer

Chrome DevTools MCP

Lets AI use Chrome’s developer tools to inspect pages, find what makes them slow and spot errors. Made by the Chrome DevTools team.

by ChromeDevToolsWidely used↓ 1.9M/wk★ 55.4KUpdated 3 days ago

Runs on your computer

README from the maker

Open the README

Copied from the maker’s repo as written. PopNx MCP has not reviewed or endorsed it. HTML, images and scripts are removed. Links lead off this site.

DEEPBOM

DEEPBOM is a local static analyzer for deployed AI model artifacts. It audits serialized graph, tensor, quantization, memory, compatibility, and ML-BOM evidence without uploading model bytes.

It is a multi-format artifact-evidence producer, an external-interface contract verifier, and a bounded BOM-to-artifact reconciliation tool. It is not an official reference implementation, a complete BOM validator, or a regulatory compliance verifier.

The public source distribution covers TFLite, ONNX, GGUF, SafeTensors, Core ML, and bounded ExecuTorch artifacts. Findings distinguish observed and derived artifact facts from predicted compatibility, imported runtime evidence, and values that cannot be assessed statically.

Evidence IR

DEEPBOM Evidence IR is the common representation family: Artifact IR, Model IR, optional Weight IR, Activation IR, Training IR, Snapshot IR and Provenance IR. The draft specification includes a generated schema catalog, compatibility checks and public maintenance rules.

Search input → IR → output mappings or inspect the same versioned catalog on GitHub. It is a DEEPBOM-maintained specification, not an endorsed external standard. The artifact metadata route retains deepbom.provenance_ir.v1 and its provenance_ir selector. The additive Snapshot workflow uses typed deepbom.provenance_ir.v2 references for native states, dataset releases and configurations. Existing document hashes are preserved; retired names remain unsupported. See the migration rules.

For model-change reviews, use the synthetic two-population example and browser evidence review. Web, CLI, Node/Python SDK and local MCP use the same checks. External measurements remain external evidence; criteria satisfaction does not establish clinical suitability.

Quick start

For export pipelines, experiment tracking and release checks, see the new Node/TypeScript and Python SDK contract and three executable integration examples. The supported SDK begins with DEEPBOM 2.1.0; earlier npm 2.0.0 packages do not include this entry point. Install it with npm install deepbom@2.5.0.

Run the published CLI without cloning the repository (Node.js 20 or newer):

npx deepbom audit "https://raw.githubusercontent.com/JunHwan-Kwon/deepbom/main/web/samples/gpu_partition_probe.onnx#sha256=82a2feef00eb6ab03d82f2b30cd17f4d826e2d8307cb059eccd6a0f3120059b2"

The pinned expected values and independent verifier are in examples/expected-output. Source builds require Rust and, for the Python channel, Python 3.9 or newer; maintainer setup is documented separately below.

Assistant integration

Install the repository-local Agent Skill after previewing the managed files:

npx -y deepbom@2.5.0 integrate codex

npx -y deepbom@2.5.0 integrate codex --apply npx -y deepbom@2.5.0 integrate claude-code npx -y deepbom@2.5.0 integrate claude-code --apply

The Skill lets a local agent select a contract-compatible analyzer for a supported deployment-artifact question. It does not create or call a hosted analysis server. See the agent setup guide, the machine-readable capability contract, and the independent engine/Agent/evidence version policy.

The installed Skill first checks DEEPBOM_BIN, its package-bundled analyzer, and a deepbom already on PATH. It accepts a runtime only after the declared deepbom.agent_contract.v2 and evidence contract match and its self-test binds the exact observed engine version. The verifier does not contact npm unless --allow-download is explicitly supplied. This keeps a blocked registry lookup from being mistaken for a failed artifact analysis.

For persistent tool-call access, run the same local analyzer as an MCP server over stdio:

npx -y deepbom@2.5.0 mcp

It exposes deepbom_capabilities, deepbom_audit, deepbom_diff, and deepbom_explain_rule without uploading artifact bytes or using a hosted analysis endpoint. Audit calls default to a bounded human summary; detailed formats and large-model scan depth are explicit. Local paths are restricted to the launch directory unless DEEPBOM_MCP_ALLOWED_ROOTS is configured. Agent-facing usage guidance is in the DEEPBOM skill. Claude Desktop users can instead install the version-matched deepbom-2.5.0.mcpb asset from the corresponding GitHub Release. The bundle contains the same CLI and WASM bytes as the npm channel and asks the user to select the only local directory it may read.

For a single attachment in ChatGPT, connect the separately bounded Streamable HTTP endpoint at https://deepbom.org/mcp. Its browser component performs the analysis in the ChatGPT sandbox and returns a bounded, hash-bound result; the DEEPBOM service does not fetch or retain model bytes. This path is ready for developer-mode review, while public ChatGPT discovery remains subject to OpenAI review. See the ChatGPT integration guide. Use the local CLI or stdio MCP for confidential or large artifacts, package and sidecar closure, complete exports, and repeated automation.

For private testing on a Claude host that supports remote MCP Apps, add the separate https://deepbom.org/mcp/claude connector. It opens an explicit file picker inside the MCP App; it does not automatically read Claude attachments. The selected bytes remain in the browser sandbox while a bounded result is returned to the conversation. Public Claude discovery remains subject to Anthropic review. See the Claude integration guide and use the local MCPB or CLI when derived model facts must also remain local.

The repository root is also a portable Agent Plugins package: plugin.json identifies the Skill and mcp.json declares the bounded ChatGPT attachment endpoint. The compatibility manifest under .codex-plugin/ carries the same identity for clients that have not moved to the portable format. These files prepare installation and review; they do not imply a public directory listing or platform approval.

Account-owned ChatGPT, Claude, Codex, and search-indexing steps are kept in the agent distribution operations checklist.

For code-first model development, start with the Python candidate loop. It uses the shipped native APIs and distinguishes trainable-model workflows from the browser Structure IDE's source-bound graph proposals.

Verified 2.4.0 release channels expose the same analysis implementation. npm and the Linux x86-64 release wheel below are published; other native platforms and registry channels require their own release verification.

npx deepbom@2.5.0 audit model.onnx --format cyclonedx

npx deepbom@2.5.0 audit model.onnx --format sarif --output deepbom.sarif --gate defects deepbom capabilities --compact deepbom self-test deepbom audit model.onnx --list-sections --compact deepbom audit model.onnx --section quantization,memory --compact deepbom explain-rule onnx.conv.output-shape python -m pip install 'deepbom @ https://github.com/JunHwan-Kwon/deepbom/releases/download/channels-v2.4.0/deepbom-2.4.0-py3-none-linux_x86_64.whl' deepbom audit model.gguf --compact deepbom verify model.tflite --contract production-interface.json deepbom verify model.onnx --bom supplied.cdx.json --render markdown deepbom contract capture model.onnx -o baseline.interface-contract.json deepbom diff baseline.gguf candidate.gguf --tensors --render markdown deepbom capabilities --format agent-text deepbom explore model.tflite deepbom placement model.tflite --profiles xnnpack_cpu,tflite_coreml_delegate,litert_qualcomm_qnn deepbom graph model.onnx --format json --output artifact-graph.json deepbom audit model.onnx --section model_ir --compact deepbom visualize model.onnx --view all --orientation portrait -o model-views.zip deepbom model-summary model.onnx --format table deepbom model-summary model.gguf --level storage --format markdown deepbom audit model.onnx --conversion-receipt conversion-receipt.json --format cyclonedx

The default is a terminal-sized evidence summary. --json and --compact expose complete format evidence; --format envelope provides the canonical cross-format contract; CycloneDX 1.7 and OASIS SARIF 2.1.0 are standard projections. --policy-output records a hash-bound gate result when --fail-on is selected. --review-policy adds identity-scoped, expiring exceptions and keeps execution, coverage, and finding-policy states independent. See docs/CLI_AUTOMATION.md. The complete option inventory is generated from the executable in docs/CLI_REFERENCE.md.

CycloneDX 1.7 consumers should read the analyzed model from metadata.component and additional inventory members from components[]. DEEPBOM does not duplicate the BOM root into the additional-components array.

The graph JSON output includes the evidence-preserving deepbom.artifact_ir.v2 ledger and a deterministic deepbom.graph_ir.v1 visualization compatibility projection. Serialized graph, storage topology, architecture grouping, scoped quantization, static placement, and imported runtime evidence remain separate. Method 2.2.0 also preserves an optional, output-bound conversion receipt without promoting declared converter execution to observed evidence. It materializes exactly decoded TFLite subgraphs, ONNX nested graphs/local functions, and ExecuTorch primary plans without flattening conditional scopes. Runtime-node fusion is reconciled only from artifact-bound subject references or primary native op indices; names are never guessed. graph_ir.v1 remains primary-scope-only for legacy consumers. The v2 JSON Schema is published at docs/schemas/deepbom-artifact-ir-v2.schema.json and at https://deepbom.org/schemas/deepbom-artifact-ir-v2.schema.json. The conversion receipt schema is published at docs/schemas/deepbom-conversion-receipt-v1.schema.json.

The additive preview deepbom.model_ir.v1 projects those frozen artifact facts into a format-neutral program, logical-value, storage, binding, quantization, architecture, and static/runtime evidence vocabulary. It preserves source, dependency, deterministic display, and observed runtime order as different fields. visualize consumes only this IR and creates deterministic monochrome ISO A4 SVG pages, 300-DPI black-and-white PNG derivatives, caption sidecars, and a Word insertion manifest. These are traceable engineering documents, not standard-conformance or regulatory-approval determinations. See docs/MODEL_IR_V1.md.

model-summary is the shared Keras-summary-like projection for every supported adapter. It emits operation rows when a serialized program exists, storage rows for graphless weight containers, and an explicit identity-only result for safe envelopes. It never relabels serialized constants as trainable parameters or a deterministic display order as observed runtime. JSON consumers can use deepbom.model_summary.v1, published in docs/schemas/deepbom-model-summary-v1.schema.json.

Public product output uses CycloneDX 1.7.

verify compares the serialized external tensor ABI with a supplied, artifact-bound production declaration. diff

Only the beginning is shown; read the rest in the repo