diff --git a/sbom.spdx b/sbom.spdx
new file mode 100644
index 0000000..e744a36
--- /dev/null
+++ b/sbom.spdx
@@ -0,0 +1,52 @@
+SPDXVersion: SPDX-2.2
+DataLicense: CC0-1.0
+SPDXID: SPDXRef-DOCUMENT
+DocumentName: coreMQTT Agent
+DocumentNamespace: https://github.com/FreeRTOS/coreMQTT Agent/blob/v1.3.0+/sbom.spdx
+Creator: Organization:Amazon Web Services
+Created: 2024-08-28T11:02:23Z
+CreatorComment: NOASSERTION
+DocumentComment: NOASSERTION
+
+PackageName: coreMQTT Agent
+SPDXID: SPDXRef-Package-coreMQTT Agent
+PackageVersion: v1.3.0+
+PackageDownloadLocation: https://github.com/FreeRTOS/coreMQTT-Agent/tree/v1.3.0+
+PackageLicenseDeclared: MIT
+PackageLicenseConcluded: MIT
+PackageLicenseInfoFromFiles: NOASSERTION
+FilesAnalyzed: true
+PackageVerificationCode: db25802b1c9148c48f48a42b37eaa0e9787a2f37
+PackageCopyrightText: NOASSERTION
+PackageSummary: NOASSERTION
+PackageDescription: "Agent for thread-safe use of coreMQTT.\n"
+
+
+FileName: ./core_mqtt_agent.c
+SPDXID: SPDXRef-File-coremqttagent.c
+FileChecksum: SHA1: 1857228dd63fb9694c4cb4ebb05765e9c1e06ace
+LicenseConcluded: MIT
+FileCopyrightText: NOASSERTION
+FileComment: NOASSERTION
+
+FileName: ./core_mqtt_agent_command_functions.c
+SPDXID: SPDXRef-File-coremqttagentcommandfunctions.c
+FileChecksum: SHA1: 2231a69e5fd1868be1ab2dbd603d85ea95698796
+LicenseConcluded: MIT
+FileCopyrightText: NOASSERTION
+FileComment: NOASSERTION
+
+PackageName: coreMQTT
+SPDXID: SPDXRef-Package-coreMQTT
+PackageVersion: v2.3.1
+PackageDownloadLocation: https://github.com/FreeRTOS/coreMQTT/
+PackageLicenseDeclared: MIT
+PackageLicenseConcluded: MIT
+PackageLicenseInfoFromFiles: NOASSERTION
+FilesAnalyzed: true
+PackageVerificationCode: da39a3ee5e6b4b0d3255bfef95601890afd80709
+PackageCopyrightText: NOASSERTION
+PackageSummary: NOASSERTION
+PackageDescription: NOASSERTION
+
+Relationship: SPDXRef-Package-coreMQTT Agent DEPENDS_ON SPDXRef-Package-coreMQTT