{"spdxVersion":"SPDX-2.3","dataLicense":"CC0-1.0","SPDXID":"SPDXRef-DOCUMENT","name":"com.github.modelcontextprotocol/python-sdk","documentNamespace":"https://spdx.org/spdxdocs/protobom/acca426f-d92d-437e-bcdd-1c74307f3326","comment":"Exact versions could not be resolved for some packages. For more information: https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-the-dependency-graph#dependencies-included.","creationInfo":{"creators":["Tool: protobom-v0.0.0-20251216165153-1f3f3060931e+dirty","Tool: GitHub.com-Dependency-Graph"],"created":"2025-12-25T23:04:46Z"},"packages":[{"name":"actions/checkout","SPDXID":"SPDXRef-githubactions-actions-checkout-5..-75c946","versionInfo":"5.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/checkout@5.%2A.%2A"}]},{"name":"astral-sh/setup-uv","SPDXID":"SPDXRef-githubactions-astral-sh-setup-uv-7..-75c946","versionInfo":"7.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/astral-sh/setup-uv@7.%2A.%2A"}]},{"name":"pre-commit/action","SPDXID":"SPDXRef-githubactions-pre-commit-action-3.0.1-75c946","versionInfo":"3.0.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/pre-commit/action@3.0.1"}]},{"name":"python-dotenv","SPDXID":"SPDXRef-pypi-python-dotenv-75c946","versionInfo":"\u003e= 1.0.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/python-dotenv"}]},{"name":"uvicorn","SPDXID":"SPDXRef-pypi-uvicorn-75c946","versionInfo":"\u003e= 0.32.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/uvicorn"}]},{"name":"mcp","SPDXID":"SPDXRef-pypi-mcp-75c946","versionInfo":"\u003e= 1.0.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/mcp"}]},{"name":"requests","SPDXID":"SPDXRef-pypi-requests-75c946","versionInfo":"\u003e= 2.31.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/requests"}]},{"name":"pyjwt","SPDXID":"SPDXRef-pypi-pyjwt-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/pyjwt"}]},{"name":"typing-extensions","SPDXID":"SPDXRef-pypi-typing-extensions-75c946","versionInfo":"\u003e= 4.9.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/typing-extensions"}]},{"name":"python-multipart","SPDXID":"SPDXRef-pypi-python-multipart-75c946","versionInfo":"\u003e= 0.0.9","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/python-multipart"}]},{"name":"httpx-sse","SPDXID":"SPDXRef-pypi-httpx-sse-75c946","versionInfo":"\u003e= 0.4","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/httpx-sse"}]},{"name":"pywin32","SPDXID":"SPDXRef-pypi-pywin32-75c946","versionInfo":"\u003e= 310","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/pywin32"}]},{"name":"typing-inspection","SPDXID":"SPDXRef-pypi-typing-inspection-75c946","versionInfo":"\u003e= 0.4.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/typing-inspection"}]},{"name":"starlette","SPDXID":"SPDXRef-pypi-starlette-75c946","versionInfo":"\u003e= 0.27","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/starlette"}]},{"name":"jsonschema","SPDXID":"SPDXRef-pypi-jsonschema-75c946","versionInfo":"\u003e= 4.20.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/jsonschema"}]},{"name":"sse-starlette","SPDXID":"SPDXRef-pypi-sse-starlette-75c946","versionInfo":"\u003e= 1.6.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/sse-starlette"}]},{"name":"httpx","SPDXID":"SPDXRef-pypi-httpx-75c946","versionInfo":"\u003e= 0.27.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/httpx"}]},{"name":"pydantic-settings","SPDXID":"SPDXRef-pypi-pydantic-settings-75c946","versionInfo":"\u003e= 2.5.2","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/pydantic-settings"}]},{"name":"uvicorn","SPDXID":"SPDXRef-pypi-uvicorn-75c946","versionInfo":"\u003e= 0.31.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/uvicorn"}]},{"name":"anyio","SPDXID":"SPDXRef-pypi-anyio-75c946","versionInfo":"\u003e= 4.5","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/anyio"}]},{"name":"pydantic","SPDXID":"SPDXRef-pypi-pydantic-75c946","versionInfo":"\u003e= 2.11.0,\u003c 3.0.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/pydantic"}]},{"name":"mcp","SPDXID":"SPDXRef-pypi-mcp-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/mcp"}]},{"name":"httpx","SPDXID":"SPDXRef-pypi-httpx-75c946","versionInfo":"\u003e= 0.27","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/httpx"}]},{"name":"click","SPDXID":"SPDXRef-pypi-click-75c946","versionInfo":"\u003e= 8.2.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/click"}]},{"name":"pydantic","SPDXID":"SPDXRef-pypi-pydantic-75c946","versionInfo":"\u003e= 2.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/pydantic"}]},{"name":"uvicorn","SPDXID":"SPDXRef-pypi-uvicorn-75c946","versionInfo":"\u003e= 0.23.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/uvicorn"}]},{"name":"actions/checkout","SPDXID":"SPDXRef-githubactions-actions-checkout-4..-75c946","versionInfo":"4.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/checkout@4.%2A.%2A"}]},{"name":"actions/github-script","SPDXID":"SPDXRef-githubactions-actions-github-script-7..-75c946","versionInfo":"7.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/github-script@7.%2A.%2A"}]},{"name":"actions/cache","SPDXID":"SPDXRef-githubactions-actions-cache-4..-75c946","versionInfo":"4.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/cache@4.%2A.%2A"}]},{"name":"astral-sh/setup-uv","SPDXID":"SPDXRef-githubactions-astral-sh-setup-uv-3..-75c946","versionInfo":"3.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/astral-sh/setup-uv@3.%2A.%2A"}]},{"name":"pypa/gh-action-pypi-publish","SPDXID":"SPDXRef-githubactions-pypa-gh-action-pypi-publish-releasev1-75c946","versionInfo":"release/v1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/pypa/gh-action-pypi-publish@release%2Fv1"}]},{"name":"actions/upload-artifact","SPDXID":"SPDXRef-githubactions-actions-upload-artifact-4..-75c946","versionInfo":"4.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/upload-artifact@4.%2A.%2A"}]},{"name":"actions/download-artifact","SPDXID":"SPDXRef-githubactions-actions-download-artifact-4..-75c946","versionInfo":"4.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/download-artifact@4.%2A.%2A"}]},{"name":"com.github.modelcontextprotocol/python-sdk","SPDXID":"SPDXRef-github-modelcontextprotocol-python-sdk-main-8ea2c3","versionInfo":"main","downloadLocation":"git+https://github.com/modelcontextprotocol/python-sdk","filesAnalyzed":false,"licenseDeclared":"MIT","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:github/modelcontextprotocol/python-sdk@main"}]}],"relationships":[{"spdxElementId":"SPDXRef-github-modelcontextprotocol-python-sdk-main-8ea2c3","relatedSpdxElement":"SPDXRef-githubactions-astral-sh-setup-uv-7..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-modelcontextprotocol-python-sdk-main-8ea2c3","relatedSpdxElement":"SPDXRef-pypi-python-multipart-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-modelcontextprotocol-python-sdk-main-8ea2c3","relatedSpdxElement":"SPDXRef-githubactions-actions-cache-4..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-modelcontextprotocol-python-sdk-main-8ea2c3","relatedSpdxElement":"SPDXRef-githubactions-actions-upload-artifact-4..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-modelcontextprotocol-python-sdk-main-8ea2c3","relatedSpdxElement":"SPDXRef-githubactions-actions-checkout-5..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-modelcontextprotocol-python-sdk-main-8ea2c3","relatedSpdxElement":"SPDXRef-githubactions-pre-commit-action-3.0.1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-modelcontextprotocol-python-sdk-main-8ea2c3","relatedSpdxElement":"SPDXRef-pypi-mcp-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-modelcontextprotocol-python-sdk-main-8ea2c3","relatedSpdxElement":"SPDXRef-pypi-pyjwt-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-modelcontextprotocol-python-sdk-main-8ea2c3","relatedSpdxElement":"SPDXRef-pypi-typing-inspection-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-modelcontextprotocol-python-sdk-main-8ea2c3","relatedSpdxElement":"SPDXRef-pypi-starlette-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-modelcontextprotocol-python-sdk-main-8ea2c3","relatedSpdxElement":"SPDXRef-pypi-jsonschema-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-modelcontextprotocol-python-sdk-main-8ea2c3","relatedSpdxElement":"SPDXRef-pypi-httpx-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-modelcontextprotocol-python-sdk-main-8ea2c3","relatedSpdxElement":"SPDXRef-pypi-anyio-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-modelcontextprotocol-python-sdk-main-8ea2c3","relatedSpdxElement":"SPDXRef-pypi-pydantic-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-modelcontextprotocol-python-sdk-main-8ea2c3","relatedSpdxElement":"SPDXRef-pypi-click-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-modelcontextprotocol-python-sdk-main-8ea2c3","relatedSpdxElement":"SPDXRef-githubactions-actions-checkout-4..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-modelcontextprotocol-python-sdk-main-8ea2c3","relatedSpdxElement":"SPDXRef-githubactions-actions-github-script-7..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-modelcontextprotocol-python-sdk-main-8ea2c3","relatedSpdxElement":"SPDXRef-githubactions-astral-sh-setup-uv-3..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-modelcontextprotocol-python-sdk-main-8ea2c3","relatedSpdxElement":"SPDXRef-githubactions-pypa-gh-action-pypi-publish-releasev1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-modelcontextprotocol-python-sdk-main-8ea2c3","relatedSpdxElement":"SPDXRef-githubactions-actions-download-artifact-4..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-modelcontextprotocol-python-sdk-main-8ea2c3","relatedSpdxElement":"SPDXRef-pypi-python-dotenv-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-modelcontextprotocol-python-sdk-main-8ea2c3","relatedSpdxElement":"SPDXRef-pypi-uvicorn-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-modelcontextprotocol-python-sdk-main-8ea2c3","relatedSpdxElement":"SPDXRef-pypi-requests-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-modelcontextprotocol-python-sdk-main-8ea2c3","relatedSpdxElement":"SPDXRef-pypi-typing-extensions-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-modelcontextprotocol-python-sdk-main-8ea2c3","relatedSpdxElement":"SPDXRef-pypi-httpx-sse-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-modelcontextprotocol-python-sdk-main-8ea2c3","relatedSpdxElement":"SPDXRef-pypi-pywin32-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-modelcontextprotocol-python-sdk-main-8ea2c3","relatedSpdxElement":"SPDXRef-pypi-sse-starlette-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-modelcontextprotocol-python-sdk-main-8ea2c3","relatedSpdxElement":"SPDXRef-pypi-pydantic-settings-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-DOCUMENT","relatedSpdxElement":"SPDXRef-github-modelcontextprotocol-python-sdk-main-8ea2c3","relationshipType":"DESCRIBES"}]}