Be the first to get access to new connectors. Get early access →
ConnectorBay Early access
Discover
Manifest Cyber (BYOK) icon

Manifest Cyber (BYOK)

Read your Manifest Cyber SBOM inventory: assets, components, SBOM records, suppliers and vulnerability risk, with your own API token

Unify Dynamics LLC

Tools12read-only
Sign-inBYOKbring your own key
Key keptNeverused for one call only
PriceFreeoptional Pro limits
ProviderManifest Cyberunofficial, not affiliated
Works withMCP · RESTany agent

Try asking

Real questions, and the tools your agent calls to answer them.

How many assets, components and vulnerabilities does Manifest track for us?
Tools called
get_stats
Which assets in Manifest have critical vulnerabilities?
Tools called
list_assets
Which assets are most impacted by vulnerabilities in Manifest?
Tools called
list_most_impacted_assets
Which components of this asset does Manifest know about?
Tools called
list_components
Which SBOMs have been uploaded to Manifest recently?
Tools called
list_sboms
Which suppliers carry the most risk in Manifest?
Tools called
list_suppliers

About

Manifest Cyber (BYOK) lets an AI assistant read your own Manifest Cyber data through the Manifest Cyber API with a key you supply (Manifest API token (with read scopes for what you query)). Read-only: 12 tools (get_stats, list_assets, list_most_impacted_assets, list_components, list_sboms, list_suppliers, get_supplier_stats, get_supplier_overview, list_supplier_vulnerabilities, search_inventory, list_vulnerabilities, list_vulnerability_feed). The BYOK key travels with each request, is used for that one call only and is never stored, logged or cached; it is only ever sent to api.manifestcyber.com. Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by Manifest Cyber. Manifest Cyber and its logos are trademarks of their owners and are used only to say which service the connector works with.

Sources: Live from the Manifest Cyber API (api.manifestcyber.com) with a BYOK key; documentation: https://api-docs.manifestcyber.com/. Endpoints checked against that documentation on 2026-10-16.

Privacy

The publisher, Unify Dynamics LLC, states that tool inputs are processed in memory and not retained.

Data not collectedNo account, no profile, no stored prompts or results.

What it can do

12 tools, grouped by job. Every one is read-only or compute-only.

OpenAPI
Read your data12 tools
  • Get statsShow the organization's totals: assets, components, SBOMs and vulnerabilities.
  • List assetsList assets (applications, containers, libraries) with version, type, SBOM format and vulnerability counts by severity.
  • List most impacted assetsList the assets with the most vulnerabilities, with severity counts.
  • List componentsList software components (package URL, version, ecosystem, licenses) across the organization, optionally for one asset or package URL.
  • List sbomsList SBOM records (metadata, not contents) with asset, version, format, source and processing dates.
  • List suppliersList third-party suppliers with asset count, worst risk band and summed vulnerability counts (including known-exploited).
  • Get supplier statsShow organization-wide supplier totals: suppliers, high-risk suppliers, third-party assets and vulnerabilities.
  • Get supplier overviewShow one supplier's risk band, asset count, vulnerability counts and number of high-risk assets.
  • List supplier vulnerabilitiesList vulnerabilities across a supplier's assets, deduplicated by CVE, ranked by recommended action then CVSS, with EPSS and known-exploited flag.
  • Search inventorySearch assets, components and vulnerabilities by text, for example a CVE id or package name.
  • List vulnerabilitiesLook up CVEs in Manifest's vulnerability catalog (not limited to your assets) with CVSS and EPSS scores.
  • List vulnerability feedList the latest 10 published vulnerabilities with severity and how many of your assets they affect.

Information

PublisherUnify Dynamics LLC
CategoryDeveloper tools
LanguagesEnglish
Built forWorldwide
CompatibilityAny MCP client · any agent · REST
Version0.1.0
MCP endpointhttps://byok-manifestcyber.connectorbay.com/mcp
REST APIopenapi.json
SupportGet help · Status
CountryWorldwide
FunctionOther
LayerDeep connectors

More like this

More in Other

Harvest Reports (BYOK)

Read Harvest report totals: hours by client, project, task and team member, expense totals, uninvoiced amounts and project budgets with your own token and account id

Live · MCP + REST10 tools

Toggl Track Reports (BYOK)

Read Toggl Track report totals: tracked and billable seconds per project, project summaries, trends and workspace filter lists with your own API token

Live · MCP + REST7 tools

Binance US (BYOK)

Read public Binance.US spot market data (prices, order book, trades, candlesticks, 24 hour statistics, symbol rules) with your own API key

Live · MCP + REST11 tools

Bird Email Stats (BYOK)

Read Bird (MessageBird) email delivery, bounce, complaint and engagement stats by day, provider, domain, IP and template, plus sending health

Live · MCP + REST10 tools

Bird SMS Stats (BYOK)

Read Bird (MessageBird) outbound and inbound SMS delivery statistics by day, hour, carrier, country, error code, sender, status, tag and category with your own workspace API key

Live · MCP + REST12 tools

Plivo 10DLC (BYOK)

Read your Plivo 10DLC brand and campaign registrations, vetting scores, campaign number linking status and toll-free verification requests with your own Auth ID and token (read-only)

Live · MCP + REST9 tools

Get Manifest Cyber (BYOK)

Free · BYOK · Read-only

BYOK: bring your own keyThis connector uses your own Manifest Cyber Manifest API token (with read scopes for what you query). Create one at https://docs.manifestcyber.com/docs/creating-api-keys.md, with the fewest permissions it needs (read-only if the provider offers it). Your assistant sends it in the X-Upstream-Key header with every request. It is used for that one call only: never stored, logged or cached, and only ever sent to Manifest Cyber. Revoke it at the provider whenever you like. Unofficial connector: not affiliated with Manifest Cyber.