---
title: "CycloneDX SBOM Validator (EU CRA Annex I)"
method: POST
path: "/v1/tools/validate_cyclonedx_sbom"
tags: ["TODO_TAGS_REVIEW"]
---

# CycloneDX SBOM Validator (EU CRA Annex I)

`POST /v1/tools/validate_cyclonedx_sbom`

## Request

- Base URL: `https://ainumbers.co`
- URL: `https://ainumbers.co/v1/tools/validate_cyclonedx_sbom`
- Auth: none declared

Validates a CycloneDX SBOM against the EU CRA Annex I machine-readable SBOM requirement: bomFormat=CycloneDX, specVersion in [1.4,1.5,1.6], all components carry purl+name+version, top-level dependencies array present. Emits sbom_valid verdict and per-component gap list. Root stage of sbom-provenance-attestation chain.

**Tool URL:** https://ainumbers.co/chaingraph/art-135-cyclonedx-sbom-validator.html
**AP2/Policy Mandate export:** yes

## Request body

- object
  - `sbom` unknown

## Response `200`

Successful tool execution result

- object
  - `component_count` integer
  - `components_missing_purl` unknown[]
    - unknown
  - `format` string
  - `has_dependencies` boolean
  - `sbom_valid` boolean
  - `spec_version` string

---

[API](https://skmtc.dev/ainumbers/apis/ainumbers-co-fintech-intelligence-suite.md) · [All operations](https://skmtc.dev/ainumbers/apis/ainumbers-co-fintech-intelligence-suite/llms.txt) · [OpenAPI document](https://skmtc.dev/ainumbers/apis/ainumbers-co-fintech-intelligence-suite/revisions/b462e4f5bb28?raw)