OSV MCP Server

@ptelang

Repository

Basic information

About OSV MCP Server

MCP Server for Vulnerabilities based on OSV API

#osv-mcp#vulnerability-server#ai-integration

OSV MCP Server config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "osv-mcp-ptelang": {
      "command": "uv",
      "args": [
        "venv"
      ]
    }
  }
}

OSV MCP Server tools

Tool list not available yet

This listing does not currently have a tool list to display. This does not mean the server has no tools; check its documentation for supported capabilities.

We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.

Overview

What is OSV MCP Server?

OSV MCP Server is a Python-based MCP (Model Context Protocol) server that integrates Open Source Vulnerabilities (OSV) data and tools with AI assistants or large language models (LLMs). It is designed for developers and security researchers who want to query vulnerability information through an LLM interface.

How to use OSV MCP Server?

Clone the repository, create a virtual environment with uv, install dependencies using uv sync, and start the server with uv run vulns.py. For use with Claude Desktop, add the server configuration to claude_desktop_config.json specifying the uv command and path to the project.

Key features of OSV MCP Server

Exposes OSV vulnerability data via the MCP protocol
Provides a query_vulnerabilities tool for LLM invocation
Simple Python-based setup with uv package manager
Easily connectable to any MCP‑compatible AI assistant

Use cases of OSV MCP Server

Query open source vulnerabilities using natural language through an LLM
Integrate vulnerability lookup into AI‑driven security workflows
Enable developers to check dependency risks via conversational interface
Automate vulnerability research with LLM tool‑calling capabilities

Frequently asked questions

What prerequisites are required to run OSV MCP Server?

Python 3.8+ and the `uv` package manager must be installed on your system.

How do I connect OSV MCP Server to Claude Desktop?

Add the server configuration to `claude_desktop_config.json` with the `uv` command, the absolute path to the project directory, and `run vulns.py` as arguments.

Where does the vulnerability data come from?

The server retrieves data from the OSV (Open Source Vulnerabilities) database. The README does not specify further details about data storage or caching.

What tool does the server expose to LLMs?

The server exposes a `query_vulnerabilities` tool that can be invoked by connected AI assistants.

Is OSV MCP Server open source and what is its license?

Yes, the source code is available and licensed under the MIT License (as indicated in the README).

Comments

More Other MCP servers

Handl

Handl speaks the Model Context Protocol. Your whole billing operation — projects, invoices, clients, reports, approvals — as tools any AI assistant can call, inside your autonomy rules.

Senso MCP for Joomla

sensomedia

Senso MCP turns a Joomla 5 or 6 site into a remote MCP server. It runs inside Joomla itself (no extra server, no Node.js bridge) and is secured with OAuth 2.1 and Joomla's own ACL. The free pack lets an AI assistant crea

🚀 Model Context Protocol (MCP) Curriculum for Beginners

microsoft

This open-source curriculum introduces the fundamentals of Model Context Protocol (MCP) through real-world, cross-language examples in .NET, Java, TypeScript, JavaScript, Rust and Python. Designed for developers, it focuses on practical techniques for building modular, scalable,

16.7K

Awesome Mlops

visenger

A curated list of references for MLOps

14.0K

Lemon.io

lemon-io

Request dedicated senior developers to work on your project, write job descriptions, and prep technical interviews — all without leaving your Claude chat. Just describe what you need, and Lemon.io MCP does the rest. 1–3