Desktop / CLI
Local artifact inspection and local exports. Desktop makes no analysis uploads. Install software in advance and use the CLI's offline option when needed.
Downloads & connections
Inspect model artifacts in your browser, on your computer, or with your AI assistant. Start with the path that fits your files and workflow.
Analyzer 1.103.0
Desktop 0.1.1 preview
01 / Browser
Choose a supported model file or run a verified example in the workspace. Review structure, findings, and visualizations, then export the evidence you need.
Supported families include TFLite, ONNX, GGUF, SafeTensors, Core ML, and ExecuTorch. Coverage depends on the artifact and the selected analysis path.
Open web workspace02 / Desktop 0.1.1
Includes the analysis engine and runtime. No separate Node.js, Python, AI subscription, or DEEPBOM account is needed. Inspect single files, compare models, and save SVG, PNG, CycloneDX, SPDX, evidence JSON, and model-view ZIPs.
Download the installer for your processor, run it, and launch DEEPBOM Desktop from the Start menu.
Choose x64 for Intel/AMD PCs or ARM64 for Windows on ARM. These preview installers are not Authenticode-signed; Windows may warn about or block them.
Open the matching DMG and drag DEEPBOM Desktop into Applications.
Choose Apple Silicon for M-series Macs. ZIP bundles are also on the release page. These previews are not Developer ID-signed or notarized; macOS may warn about or block them.
In the directory containing your downloaded DEB:
sudo apt install ./DEEPBOM-Desktop-0.1.1-linux-amd64.deb
deepbom-desktopUse the arm64 filename on ARM Linux. AppImages need executable permission and FUSE; DEB is the recommended Ubuntu path.
Register this signed repository once. First fetch the key and compare its fingerprint:
curl -fsSLo /tmp/deepbom-desktop.gpg https://junhwan-kwon.github.io/deepbom-desktop/apt/deepbom-desktop.gpg
gpg --show-keys --with-fingerprint /tmp/deepbom-desktop.gpgExpected fingerprint: 8121E72E7DAE33AC3E7CB90B6BB67D407758CC13. After it matches, install the key and repository:
sudo install -m 0644 /tmp/deepbom-desktop.gpg /usr/share/keyrings/deepbom-desktop.gpg
echo 'deb [signed-by=/usr/share/keyrings/deepbom-desktop.gpg] https://junhwan-kwon.github.io/deepbom-desktop/apt stable main' | sudo tee /etc/apt/sources.list.d/deepbom-desktop.list
sudo apt update
sudo apt install deepbom-desktopUpdate with sudo apt update and sudo apt upgrade deepbom-desktop. The repository's stable suite currently distributes the labeled desktop preview; it is not an Ubuntu archive listing.
Download the Linux x64 Snap, then install the local file:
sudo snap install --dangerous ./DEEPBOM-Desktop-0.1.1-linux-amd64.snap
snap run deepbom-desktop--dangerous permits a file without Snap Store assertions; strict Snap confinement remains enabled. Use a normal folder in your home directory. External drives require sudo snap connect deepbom-desktop:removable-media.
Not listed in the Snap Store. A bare sudo snap install deepbom-desktop is not available yet.
03 / Analyzer 1.103.0
Use the CLI for repeatable audits, complete evidence exports, and supported package or sidecar workflows. Choose one installation method.
Requires Node.js 20 or newer. The first run downloads the pinned package.
npx -y deepbom@1.103.0 audit "./model.onnx" --summary --offlineReplace ./model.onnx with your file. --offline controls the analyzer's remote-source access; npx may still download the software.
npm install -g deepbom@1.103.0
deepbom self-test --compact
deepbom audit "./model.onnx" --summary --offlineInstall in a virtual environment. Platform wheels include the engine; Node.js and Rust are not required.
python -m pip install deepbom==1.103.0
deepbom self-test --compact
deepbom audit "./model.onnx" --summary --offlineThe launcher downloads and verifies the matching engine on first use, then uses its local cache.
cargo install deepbom --version 1.103.0 --locked
deepbom self-test --compact
deepbom audit "./model.onnx" --summary --offlineThe channel release contains command-line engines for Windows, macOS, and Linux on x64 and ARM64. Download the matching deepbom-core-… binary and tflite_wasm_audit_bg-1.103.0.wasm, and verify both downloads against SHA256SUMS. Create a pkg folder next to the executable, then move the WASM file into it and rename it to tflite_wasm_audit_bg.wasm. On macOS/Linux, make the binary executable with chmod +x.
These are terminal programs. For a graphical application with a file picker, choose Desktop.
04 / AI connections
Install or connect DEEPBOM in the host you use. Host accounts and tool permissions are managed by that provider. A local parser can still return findings to an online AI conversation.
The extension bundles the local analyzer. Model bytes stay local; the tool result goes to Claude. This is an installable extension, not a claim of Anthropic directory approval.
Claude setup & data flowRun the command for your host in the model workspace. The first command previews the managed files; the second installs them.
npx -y deepbom@1.103.0 integrate codex
npx -y deepbom@1.103.0 integrate codex --applynpx -y deepbom@1.103.0 integrate claude-code
npx -y deepbom@1.103.0 integrate claude-code --applyStart a new session and ask for a static model audit. The host needs access to the file and permission to run the analyzer.
Local agent guideagy must be on PATH.node "/path/to/extracted/deepbom/install.mjs" --workspace "/path/to/models"Replace both paths. Restart agy, check /mcp, then ask /deepbom:deepbom-inspect to inspect a file. The archive includes analyzer 1.103.0. Approvals remain under your control.
Independently distributed, not a Google-reviewed store listing. Windows/macOS commands are documented but have not been host-tested. This package targets Antigravity CLI.
Plugin instructions & validationWith Node.js 20+ installed, add this server to your workspace's .vscode/mcp.json. Merge it with existing servers. It restricts DEEPBOM's model access to the workspace.
{
"servers": {
"deepbom": {
"type": "stdio",
"command": "npx",
"args": ["-y", "deepbom@1.103.0", "mcp"],
"cwd": "${workspaceFolder}",
"env": { "DEEPBOM_MCP_ALLOWED_ROOTS": "${workspaceFolder}" }
}
}
}Start the server using VS Code's MCP controls, approve the tools you want to use, and ask your agent to inspect a workspace file. This is MCP configuration, not a dedicated DEEPBOM Marketplace extension.
VS Code's MCP setup guideDeveloper-mode testing is available where your account and workspace permit it. Public directory review is pending as of the date above.
https://deepbom.org/mcpThe attachment already belongs to your ChatGPT conversation. DEEPBOM parses it in the host's browser sandbox and returns bounded evidence. Save via ChatGPT provides generated export downloads; Send PNG to chat shares a picture. For ChatGPT desktop, use this connection only if that client exposes the required plugin features.
On a Claude client with custom connectors and MCP App support, add the following endpoint. No DEEPBOM account is required.
https://deepbom.org/mcp/claudeAsk to open the analyzer, then select the file inside the app. Claude attachments are not read automatically. This path currently provides static results and a model-summary table; use the website or local tools for diagram and BOM exports.
Prepared for host testing; directory approval and compatibility with every Claude client are not claimed.
Connection details & limitationsConfigure your client's local MCP command as:
npx -y deepbom@1.103.0 mcpSet the process's working directory to your model folder, or set DEEPBOM_MCP_ALLOWED_ROOTS to an existing absolute directory. In clients such as Gemini CLI, use that client's MCP settings; this does not imply an official extension-store listing or a tested host integration.
Available tools: deepbom_capabilities, deepbom_audit, deepbom_diff, and deepbom_explain_rule. A server waiting on standard input is normal; the MCP client sends the requests.
A first request after connecting
Use DEEPBOM to inspect this model without executing model code.
Report its full SHA-256, serialized structure, artifact defects,
cautions, evidence gaps, and analysis limits.Attach a model for ChatGPT, select it in a browser-local app, or provide an allowed local path for a local agent.
Choose the right data path
Local artifact inspection and local exports. Desktop makes no analysis uploads. Install software in advance and use the CLI's offline option when needed.
The analyzer reads local files. Returned hashes, names, structures, and findings enter the AI host's conversation and can still be confidential.
The host's sandbox analyzes the selected file. ChatGPT attachments have already been shared with ChatGPT; the Claude app uses a separate file picker.
Static inspection does not execute model code or establish measured latency, task accuracy, actual hardware placement, clinical validity, or regulatory compliance. Supported evidence and export controls vary by channel.