Overview

Interlynk provides a set of open-source command-line tools for SBOM management, quality scoring, and assembly. These tools integrate with the Interlynk platform and can operate standalone in CI/CD pipelines, local development environments, and automated workflows.

---

Available CLIs

Tool	Purpose	Repository
pylynk	CLI client for the Interlynk platform — upload, download, query SBOMs	interlynk-io/pylynk
lynk-mcp	MCP server for AI assistant integration with Interlynk	interlynk-io/lynk-mcp
sbomqs	SBOM quality scoring and compliance validation	interlynk-io/sbomqs
sbomasm	SBOM assembly — merge, edit, enrich, sign, and view SBOMs	interlynk-io/sbomasm

---

When to Use Each Tool

Scenario	Recommended Tool
Upload SBOMs to Interlynk from CI/CD	pylynk
Download enriched SBOMs from Interlynk	pylynk
Query vulnerabilities or products programmatically	pylynk
Natural language SBOM queries via AI assistants	lynk-mcp
Evaluate SBOM quality before upload	sbomqs
Enforce compliance standards (NTIA, BSI)	sbomqs
Merge multiple SBOMs into one	sbomasm
Enrich SBOMs with license data	sbomasm
Edit SBOM metadata (supplier, author, version)	sbomasm
Sign and verify SBOMs	sbomasm

---

Authentication

All tools that interact with the Interlynk platform require an API token. See API Key Management for token creation and management.

# Set once for pylynk
export INTERLYNK_SECURITY_TOKEN="lynk_service_your_token"

# Set once for lynk-mcp
lynk-mcp configure

Use service tokens for CI/CD and automation. Use user tokens only for local, interactive sessions. See Least Privilege Recommendations.