Skip to content
MoorAI
06 — defence & response

AIBOM

Also written AI bill of materials, AI-BOM

An inventory of the AI components in a system or on a device — models and their providers, agents and harnesses, MCP servers, plugins, skills, datasets — in the spirit of a software bill of materials, and often exported in an SBOM format such as CycloneDX. It answers what AI is present and where it came from; on its own it does not say what that AI did.

How MoorAI handles it: moorai-aibom inventories providers, models, agents, MCP servers, editor AI extensions and skills on a device, and exports CycloneDX 1.6 or SPDX.

See also runtime AIBOM · shadow AI · AI-BOM for the AI Act

Sources

Related terms

  • Runtime AIBOM Defence & response

    An AIBOM built from what is running and being used, not only from what is installed or declared: which model servers are listening, which MCP servers…

  • Shadow AI Attack concepts

    AI tools, agents, models and MCP servers in use without the security team's knowledge or approval: a developer's own coding agent, a chatbot fed…

Defence & response

The vocabulary of running controls for agents: knowing what AI is present, cutting what it may do down to what it uses, catching misuse, and reconstructing an incident afterwards. Where MoorAI implements a term, a separate line under the definition says how; the definition itself stays vendor-neutral. To check one agent's configuration against these ideas, use the free permission right-sizer.

AIBOM is term 3 of 10 in this part of the glossary.

AI detection and responseOn-device AI-DRAIBOMRuntime AIBOMLeast privilege for AI agentsPermission right-sizingFail-open / fail-closedDecoy credentialContext treePatient zero
Get started free Full glossary → How we test → Community agent on GitHub ↗

This page is one entry from the agentic AI security glossary, which defines 82 terms in the same style. Where a term belongs to a published taxonomy or standard — the HackAgent attack families, the OWASP lists, AMTSO's guidelines, MITRE ATLAS, ISO/IEC 42001, the NIST AI RMF, the EU AI Act, W3C Trace Context, the MCP specification — the authoritative wording is the source document's, not ours, and specifics should be verified there. "Lethal trifecta" is Simon Willison's term. OWASP® is a trademark of the OWASP Foundation; ATT&CK® and ATLAS™ are trademarks of The MITRE Corporation. Naming a framework here is description, not a claim of certification or endorsement.