広告掲載
MCP.so
ログイン
K

Kodus OSV MCP Server

@kodustech

リポジトリ

基本情報

カテゴリ

その他

トランスポート

stdio

作者

kodustech

投稿者

Gabriel Malinosqui

Kodus OSV MCP Server について

Kodus MCP HTTP server exposing OSV (v1) for open source vulnerability lookup via osv_query/osv_query_batch tools.

#devtools#security#code-quality#code-review

Kodus OSV MCP Server の設定

以下の設定を使って、このサーバーを MCP 対応クライアントに追加してください。

{
  "mcpServers": {
    "mcp-osv-kodustech": {
      "command": "bun",
      "args": [
        "run",
        "index.ts"
      ],
      "env": {
        "PORT": "3000",
        "HOST": "0.0.0.0",
        "OSV_API_URL": "https://api.osv.dev/v1"
      }
    }
  }
}

Kodus OSV MCP Server のツール

ツール一覧はまだありません

この掲載には表示できるツール一覧がまだありません。サーバーにツールがないという意味ではありません。対応機能はプロジェクトのドキュメントをご確認ください。

ツールは README から自動的に抽出されます。メンテナーは ## Tools という見出しの下に記載することで、このタブに反映できます。

概要

What is Kodus OSV?

Kodus OSV is an HTTP MCP (Model Context Protocol) server that wraps the OSV v1 API for on‑demand open‑source vulnerability lookups. It exports MCP tools so AI agents can query the OSV vulnerability feed directly. The server uses a Streamable HTTP MCP endpoint and is intended for developers and security teams integrating vulnerability data into their MCP‑aware workflows.

How to use Kodus OSV?

Install dependencies with bun install, set environment variables (PORT, HOST, OSV_API_URL), and run bun run index.ts. The MCP endpoint is http://<host>:<port>/mcp. Clients can connect via Claude Code CLI (claude mcp add --transport http mcp-osv http://localhost:3000/mcp), VS Code (code --add-mcp), or the MCP Inspector.

Key features of Kodus OSV

  • Streamable HTTP MCP endpoint at /mcp
  • Two tools: osv_query (single) and osv_query_batch (multiple)
  • Configurable base URL via OSV_API_URL environment variable
  • Clear validation rules (commit XOR version, purl or name+ecosystem)
  • Supports pagination with pageToken field

Use cases of Kodus OSV

  • Query vulnerabilities for a specific package version (e.g., PyPI, npm)
  • Batch query multiple packages or commits in a single request
  • Perform commit‑based vulnerability lookups for Go or other ecosystems
  • Integrate real‑time OSV checks into MCP‑enabled IDEs or CLI agents

よくある質問

1

What runtime does Kodus OSV require?

Bun is required. No other runtime is supported according to the README.

2

How can I change the OSV API endpoint?

Set the `OSV_API_URL` environment variable. It defaults to `https://api.osv.dev/v1`.

3

What tools does Kodus OSV provide?

Two tools: `osv_query` for a single vulnerability query and `osv_query_batch` for multiple queries in one request.

4

What are the rules for the `package` parameter in queries?

You must use either a `purl` string or the combination of `name` and `ecosystem`. If you use `purl`, do not include the `@version` part; provide the version separately in the `version` field.

5

How can I debug the server or test the tools?

The server logs a confirmation message on startup. You can use `curl` with a JSON‑RPC initialize request or a `tools/list` call against the `/mcp` endpoint to see available tools.

コメント

「その他」の他のコンテンツ

Handl

Handl speaks the Model Context Protocol. Your whole billing operation — projects, invoices, clients, reports, approvals — as tools any AI assistant can call, inside your autonomy rules.

Lemon.io

lemon-io

Request dedicated senior developers to work on your project, write job descriptions, and prep technical interviews — all without leaving your Claude chat. Just describe what you need, and Lemon.io MCP does the rest. 1–3

ICSS

chokcoco

不止于 CSS

20.7K

Health by Dr Brad

Dr Brad Stanfield

Health by Dr Brad works out a health plan from your own results: which screening is due at your age, and evidence-based suggestions, each with the reason and the published guideline or study behind it. Your record is one

Sequential Thinking

modelcontextprotocol

Model Context Protocol Servers

88.2K
広告掲載