OSV MCP Server

Name: OSV MCP Server
Author: ptelang

@ptelang

代码仓库

关于 OSV MCP Server

MCP Server for Vulnerabilities based on OSV API

#osv-mcp #vulnerability-server #ai-integration

基本信息

分类

其他

许可证

MIT license

运行时

python

传输方式

stdio

发布者

ptelang

配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "osv-mcp-ptelang": {
      "command": "uv",
      "args": [
        "venv"
      ]
    }
  }
}

工具

未检测到工具

工具是从 README 中自动提取的。维护者可以在 ## Tools 标题下列出工具,即可填充这部分内容。

概览

What is OSV MCP Server?

OSV MCP Server is a Python-based MCP (Model Context Protocol) server that integrates Open Source Vulnerabilities (OSV) data and tools with AI assistants or large language models (LLMs). It is designed for developers and security researchers who want to query vulnerability information through an LLM interface.

How to use OSV MCP Server?

Clone the repository, create a virtual environment with uv, install dependencies using uv sync, and start the server with uv run vulns.py. For use with Claude Desktop, add the server configuration to claude_desktop_config.json specifying the uv command and path to the project.

Key features of OSV MCP Server

Exposes OSV vulnerability data via the MCP protocol
Provides a query_vulnerabilities tool for LLM invocation
Simple Python-based setup with uv package manager
Easily connectable to any MCP‑compatible AI assistant

Use cases of OSV MCP Server

Query open source vulnerabilities using natural language through an LLM
Integrate vulnerability lookup into AI‑driven security workflows
Enable developers to check dependency risks via conversational interface
Automate vulnerability research with LLM tool‑calling capabilities

FAQ from OSV MCP Server

What prerequisites are required to run OSV MCP Server?

Python 3.8+ and the uv package manager must be installed on your system.

How do I connect OSV MCP Server to Claude Desktop?

Add the server configuration to claude_desktop_config.json with the uv command, the absolute path to the project directory, and run vulns.py as arguments.

Where does the vulnerability data come from?

The server retrieves data from the OSV (Open Source Vulnerabilities) database. The README does not specify further details about data storage or caching.

What tool does the server expose to LLMs?

The server exposes a query_vulnerabilities tool that can be invoked by connected AI assistants.

Is OSV MCP Server open source and what is its license?

Yes, the source code is available and licensed under the MIT License (as indicated in the README).

其他分类下的更多 MCP 服务器

IDA Pro MCP

mrexodia

AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.

9.9K

Reactive Resume

amruthpillai

A one-of-a-kind resume builder that keeps your privacy in mind. Completely secure, customizable, portable, open-source and free forever. Try it out today!

39.5K