Advertise
MCP.so
Sign In

MCP Server For OSV

@EdenYavin

Repository

Basic information

Category

Other

License

MIT

Transports

stdio

Author

EdenYavin

About MCP Server For OSV

OSV MCP server implementation

MCP Server For OSV config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "osv-mcp-edenyavin": {
      "command": "npx",
      "args": [
        "-y",
        "@smithery/cli",
        "install",
        "@EdenYavin/OSV-MCP",
        "--client",
        "claude"
      ]
    }
  }
}

MCP Server For OSV tools

Tool list not available yet

This listing does not currently have a tool list to display. This does not mean the server has no tools; check its documentation for supported capabilities.

Fetch the live tool list by running this server in a temporary sandbox using the button above.

Overview

What is MCP Server For OSV?

MCP Server For OSV is a lightweight MCP server that wraps the OSV (Open Source Vulnerabilities) Database API, letting you query CVEs for specific packages, find affected and fixed versions, and list supported ecosystems. It is designed for developers and security researchers who need vulnerability data inside AI-powered tools like Cursor and Claude Desktop.

How to use MCP Server For OSV?

Install it via Smithery (npx -y @smithery/cli install @EdenYavin/OSV-MCP --client claude) or clone the repo locally and configure your MCP host with the provided JSON snippet. The server exposes four tools: query_package_cve, query_for_cve_affected, query_for_cve_fix_versions, and get_ecosystems.

Key features of MCP Server For OSV

  • Query CVE IDs for any package by name and optional version.
  • Retrieve all affected versions for a given CVE.
  • List all versions that fix a specific CVE.
  • Fetch the list of supported package ecosystems.

Use cases of MCP Server For OSV

  • Check if a Python (or other ecosystem) package has known vulnerabilities.
  • Determine which versions of a library are affected by a CVE.
  • Find the exact versions that patch a security issue.
  • Discover which ecosystems (e.g., PyPI, npm) are currently queryable.

Frequently asked questions

1

What dependencies does MCP Server For OSV need?

Python 3.11 or higher and the `uv` package manager (installable via `pip install uv` or `brew install uv`).

2

How do I install MCP Server For OSV?

You can install it via Smithery (`npx -y @smithery/cli install @EdenYavin/OSV-MCP --client claude`) or clone the repository and add the server configuration to your MCP host’s JSON file.

3

Which clients is MCP Server For OSV tested on?

Cursor and Claude Desktop.

4

What is the default ecosystem for package queries?

If no ecosystem is specified, the `query_package_cve` tool defaults to "PyPI".

5

How can I see all supported ecosystems?

Use the `get_ecosystems` tool; it returns a dictionary mapping ecosystem names to their programming language or operating system.

Comments

More Other MCP servers

Blender

ahujasid

Open-source MCP to use Blender with any LLM

23.6K

Screenpipe

screenpipe

YC (S26) | Open Computer History | Continuously record your company computer work, map your workflows, help you find work worth automating, and power your agents' context

22.0K

Lemon.io

lemon-io

Request dedicated senior developers to work on your project, write job descriptions, and prep technical interviews — all without leaving your Claude chat. Just describe what you need, and Lemon.io MCP does the rest. 1–3

N

Next Generation Movers: free moving quotes (remote MCP)

Next Generation Movers

Free moving quotes for AI agents from Next Generation Movers, a licensed interstate mover (USDOT 3764697). US long-distance nationwide and local DC/MD/VA. Indicative ballpark price and booking options; optional $0.01 x40

Hindsight

vectorize-io

Hindsight: Agent Memory That Learns

50.4K
Advertise