MCP.so
Sign In
O

Osv Ui Mcp

@toan203

Repository

About Osv Ui Mcp

Visual CVE audit dashboard for npm, Python, Go, and Rust projects. Scans your project manifests (package-lock.json, requirements.txt, go.sum, Cargo.lock) against OSV.dev live data, opens a browser dashboard for human review, then applies fixes only after explicit confirmation. Su

Basic information

Category

Other

Transports

stdio

Publisher

toan203

Submitted by

Toan Nguyen

Config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "osv-ui": {
      "command": "npx",
      "args": [
        "-y",
        "osv-ui-mcp"
      ]
    }
  }
}

Tools

4

Scan a project directory for CVE vulnerabilities. Automatically detects npm (package-lock.json), Python (requirements.txt / Pipfile.lock / poetry.lock), Go (go.sum), and Rust (Cargo.lock) manifests. Queries live CVE data from OSV.dev. Returns structured vulnerability report with severity counts, risk score, and fix recommendations. Use this as the first step before open_dashboard or apply_fixes.

Launch the osv-ui visual dashboard in the browser for human review. This is the HUMAN-IN-THE-LOOP step — always offer this before applying fixes. The dashboard shows full CVE details, severity charts, and the upgrade guide. Returns the dashboard URL. If already running for this path, returns existing URL.

Get the safe upgrade commands for vulnerable packages WITHOUT executing them. Use this to show the user what will be changed before calling apply_fixes. Returns a list of commands grouped by ecosystem (npm install / pip install).

Execute package upgrade commands to fix CVEs. IMPORTANT: This is a DESTRUCTIVE action that modifies package files. ALWAYS call get_fix_commands first and confirm with the user before calling this. Returns the command output for each fix applied.

Overview

What is Osv Ui Mcp?

Osv Ui Mcp is a visual CVE audit dashboard for npm, Python, Go, and Rust projects. It scans project manifests (package-lock.json, requirements.txt, go.sum, Cargo.lock) against live OSV.dev data, opens a browser dashboard for human review, and applies fixes only after explicit confirmation. It supports multi-service monorepos in a single command.

How to use Osv Ui Mcp?

Run the scanner on your project manifests; the server will open a browser dashboard displaying vulnerabilities. Review the results and confirm fixes, which are applied only after explicit approval.

Key features of Osv Ui Mcp

  • Visual browser dashboard for CVE review
  • Scans npm, Python, Go, and Rust manifests
  • Uses live OSV.dev vulnerability data
  • Fixes applied only after human confirmation
  • Supports multi-service monorepos in one scan

Use cases of Osv Ui Mcp

  • Auditing Node.js, Python, Go, and Rust projects for known CVEs
  • Reviewing vulnerabilities across multiple services in a monorepo
  • Applying security fixes only after manual approval

FAQ from Osv Ui Mcp

—

Comments

More Other MCP servers

MCP Go 🚀

mark3labs

A Go implementation of the Model Context Protocol (MCP), enabling seamless integration between LLM applications and external data sources and tools.

8.9K

MCP Toolbox for Databases

googleapis

MCP Toolbox for Databases is an open source MCP server for databases.

15.9K

Maestro

mobile-dev-inc

Painless E2E Automation for Mobile and Web

14.8K

Awesome Mlops

visenger

A curated list of references for MLOps

14.0K

🚀 Model Context Protocol (MCP) Curriculum for Beginners

microsoft

This open-source curriculum introduces the fundamentals of Model Context Protocol (MCP) through real-world, cross-language examples in .NET, Java, TypeScript, JavaScript, Rust and Python. Designed for developers, it focuses on practical techniques for building modular, scalable,

16.7K