广告合作
MCP.so
登录
K

Kodus OSV MCP Server

@kodustech

代码仓库

基本信息

分类

其他

传输方式

stdio

作者

kodustech

提交者

Gabriel Malinosqui

关于 Kodus OSV MCP Server

Kodus MCP HTTP server exposing OSV (v1) for open source vulnerability lookup via osv_query/osv_query_batch tools.

#devtools#security#code-quality#code-review

Kodus OSV MCP Server 配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "mcp-osv-kodustech": {
      "command": "bun",
      "args": [
        "run",
        "index.ts"
      ],
      "env": {
        "PORT": "3000",
        "HOST": "0.0.0.0",
        "OSV_API_URL": "https://api.osv.dev/v1"
      }
    }
  }
}

Kodus OSV MCP Server 工具

工具列表暂未提供

当前收录暂时没有可展示的工具列表，不代表服务没有工具。请查阅项目文档了解支持的能力。

工具是从 README 中自动提取的。维护者可以在 ## Tools 标题下列出工具,即可填充这部分内容。

概览

What is Kodus OSV?

Kodus OSV is an HTTP MCP (Model Context Protocol) server that wraps the OSV v1 API for on‑demand open‑source vulnerability lookups. It exports MCP tools so AI agents can query the OSV vulnerability feed directly. The server uses a Streamable HTTP MCP endpoint and is intended for developers and security teams integrating vulnerability data into their MCP‑aware workflows.

How to use Kodus OSV?

Install dependencies with bun install, set environment variables (PORT, HOST, OSV_API_URL), and run bun run index.ts. The MCP endpoint is http://<host>:<port>/mcp. Clients can connect via Claude Code CLI (claude mcp add --transport http mcp-osv http://localhost:3000/mcp), VS Code (code --add-mcp), or the MCP Inspector.

Key features of Kodus OSV

  • Streamable HTTP MCP endpoint at /mcp
  • Two tools: osv_query (single) and osv_query_batch (multiple)
  • Configurable base URL via OSV_API_URL environment variable
  • Clear validation rules (commit XOR version, purl or name+ecosystem)
  • Supports pagination with pageToken field

Use cases of Kodus OSV

  • Query vulnerabilities for a specific package version (e.g., PyPI, npm)
  • Batch query multiple packages or commits in a single request
  • Perform commit‑based vulnerability lookups for Go or other ecosystems
  • Integrate real‑time OSV checks into MCP‑enabled IDEs or CLI agents

常见问题

1

What runtime does Kodus OSV require?

Bun is required. No other runtime is supported according to the README.

2

How can I change the OSV API endpoint?

Set the `OSV_API_URL` environment variable. It defaults to `https://api.osv.dev/v1`.

3

What tools does Kodus OSV provide?

Two tools: `osv_query` for a single vulnerability query and `osv_query_batch` for multiple queries in one request.

4

What are the rules for the `package` parameter in queries?

You must use either a `purl` string or the combination of `name` and `ecosystem`. If you use `purl`, do not include the `@version` part; provide the version separately in the `version` field.

5

How can I debug the server or test the tools?

The server logs a confirmation message on startup. You can use `curl` with a JSON‑RPC initialize request or a `tools/list` call against the `/mcp` endpoint to see available tools.

评论

其他 分类下的更多 MCP 服务器

Klarix Intelligence Engine

Klarix

B2B competitive intelligence, live sales battlecards, 5-axis ICP prospect fit scoring, and tech stack teardowns over MCP and REST with cited public-web evidence.

Screenpipe

screenpipe

YC (S26) | Open Computer History | Continuously record your company computer work, map your workflows, help you find work worth automating, and power your agents' context

22.0K

FastMCP v2 🚀

jlowin

🚀 The fast, Pythonic way to build MCP servers and clients.

26.0K

Reactive Resume

amruthpillai

A one-of-a-kind resume builder that keeps your privacy in mind. Completely secure, customizable, portable, open-source and free forever. Try it out today!

39.5K

LoadOptimizer

LoadOptimizer plans truck, container and pallet loads with a real optimization engine, straight from your AI assistant. Describe the order in plain language, for example "plan 36 Euro pallets on a standard 13.6 m trailer

广告合作