MCP server: One MCP server.

OSV

@mrfentmenMCP server · External

Use this MCP server to OSV open source vulnerability data and package security checks. Tools...

Vulnerability managementv1.0.0TypeScript
Freeno charge per call

Runs on your machine from its package; the steps are below.

What it does

  1. Reads
  2. Writes
  3. High impact

At most: only reads or looks up information.

What it costs

Free

Odel charges nothing per call. The publisher may charge for its own service.

Runs locally over stdio

This server isn't hosted — your MCP client launches it from a package registry. Use one of the commands below, or drop the config into your client (e.g. Claude Desktop).

npmosv-mcpv1.0.0

Run

npx -y osv-mcp

MCP client config

{
  "mcpServers": {
    "osv": {
      "command": "npx",
      "args": [
        "-y",
        "osv-mcp"
      ]
    }
  }
}
README1 min read

OSV MCP

Open source vulnerability checks for coding agents. It uses the public OSV.dev API and needs no API key.

Tools

  • check_package checks an ecosystem, package name, and optional version
  • scan_packages checks several package references in one request; parse lockfiles in your client and pass the package list
  • get_vulnerability retrieves a CVE, GHSA, or OSV record

Run

bash
npm install
npm run build
node dist/index.js

The server is read only and uses stdio MCP transport.

Similar modules

Browse Vulnerability management