MCP Server For OSV

@BIGdeadLock

Repository

Basic information

About MCP Server For OSV

OSV MCP server implementation

#mcp#osv#server

MCP Server For OSV config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "OSV-MCP": {
      "command": "npx",
      "args": [
        "-y",
        "@smithery/cli",
        "install",
        "@EdenYavin/OSV-MCP",
        "--client",
        "claude"
      ]
    }
  }
}

MCP Server For OSV tools

Tool list not available yet

This listing does not currently have a tool list to display. This does not mean the server has no tools; check its documentation for supported capabilities.

Fetch the live tool list by running this server in a temporary sandbox using the button above.

Overview

What is MCP Server For OSV?

MCP Server For OSV is a lightweight MCP server that provides access to the OSV Database API, enabling querying of package vulnerabilities, affected versions, and fix versions. It is intended for developers and security researchers using MCP-compatible hosts like Claude Desktop or Cursor.

How to use MCP Server For OSV?

Install via Smithery (npx -y @smithery/cli install @EdenYavin/OSV-MCP --client claude) or clone locally and configure your MCP host with the provided JSON config (using uv). The server offers four tools: query_package_cve, query_for_cve_affected, query_for_cve_fix_versions, and get_ecosystems.

Key features of MCP Server For OSV

List all CVE IDs for a package, optionally filtered by version and ecosystem.
Query a CVE to retrieve all affected versions of a package.
Query a CVE to retrieve all versions that fix the vulnerability.
List currently supported ecosystems with their programming language or OS.

Use cases of MCP Server For OSV

Identify known vulnerabilities in a specific package version before deployment.
Audit dependencies by checking which CVEs affect a given package.
Determine which versions patch a known CVE for upgrade planning.
Discover which ecosystems (e.g., PyPI, npm) are supported for vulnerability queries.

Frequently asked questions

Which tools does MCP Server For OSV provide?

It provides four tools: `query_package_cve`, `query_for_cve_affected`, `query_for_cve_fix_versions`, and `get_ecosystems`.

What are the prerequisites for running MCP Server For OSV?

Python 3.11 or higher and the `uv` package installer (installable via `pip install uv` or `brew install uv`).

How do I install MCP Server For OSV?

Install via Smithery (`npx -y @smithery/cli install @EdenYavin/OSV-MCP --client claude`) or clone the repository locally and add a JSON configuration to your MCP host (Cursor, Claude Desktop, etc.).

Which MCP hosts are tested with MCP Server For OSV?

Cursor and Claude Desktop are listed as tested hosts.

What ecosystem does the server default to when not specified?

The `query_package_cve` tool defaults to the "PyPI" ecosystem if no ecosystem parameter is provided.

Comments

More Other MCP servers

Volley.sh

Volley

A good sequence diagram can solve almost any communication problem in engineering. Volley lets your agent write them as plain text, with the real request and response payloads on every arrow. It checks its own syntax wi

Senso MCP for Joomla

sensomedia

Senso MCP turns a Joomla 5 or 6 site into a remote MCP server. It runs inside Joomla itself (no extra server, no Node.js bridge) and is secured with OAuth 2.1 and Joomla's own ACL. The free pack lets an AI assistant crea

ICSS

chokcoco

不止于 CSS

20.7K

Awesome Mlops

visenger

A curated list of references for MLOps

14.0K

Blender

ahujasid

Open-source MCP to use Blender with any LLM

23.6K