O

OSV MCP

A lightweight MCP server for querying software package vulnerability information in the OSV database.
2 points
17

What is the OSV MCP Server?

The OSV MCP Server is a lightweight tool based on the Model Context Protocol (MCP) for querying vulnerability information in the OSV (Open Source Vulnerabilities) database. It helps developers quickly understand the impact scope of specific software packages or vulnerabilities.

How to use the OSV MCP Server?

Through simple command - line operations, you can easily query the vulnerability list of software packages, the affected versions or fixed versions of specific vulnerabilities. Just install and run the server to start using it.

Applicable Scenarios

Suitable for development teams to integrate security checks into the CI/CD process, or for individual developers to quickly assess the security of dependencies during project maintenance.

Main Features

Query vulnerabilities of a software packageEnter the name or version of a software package to get all vulnerability IDs and their details of the package.
Query the affected versions of a vulnerabilityEnter a vulnerability ID to get the list of affected software versions.
Query the fixed versions of a vulnerabilityEnter a vulnerability ID to get the software versions that have fixed this vulnerability.
Query supported ecosystemsGet all ecosystems supported by the current server and their corresponding programming languages or operating systems.

Advantages and Limitations

Advantages
Quickly locate vulnerability information of software packages
Support multiple ecosystems with strong scalability
Easy to integrate into existing workflows
Limitations
Requires Python 3.11 or higher
Has certain dependence on the network environment

How to Use

Install the OSV MCP Server
Ensure that your system has Python 3.11 or higher installed, and then install the server via pip.
Start the server
After entering the server directory, run the following command to start the service.
Execute queries
Use the provided command - line tools to perform vulnerability queries.

Usage Examples

Query vulnerabilities of the numpy software packageEnter numpy as the software package name to get all its vulnerability IDs.
Query the affected versions of the Log4j vulnerabilityEnter CVE - 2021 - 44228 to view the affected versions.

Frequently Asked Questions

How to install the OSV MCP Server?
Which ecosystems are supported?
What should I do if I encounter a network connection failure?

Related Resources

GitHub Repository
The official GitHub repository containing source code and documentation.
VibeApp Reviews
User reviews and feedback.
Installation
Copy the following command to your Client for configuration
{
  "mcpServers": {
    "osv-mcp": {
      "command": "uv",
      "args": ["--directory", "path-to/OSV-MCP", "run", "osv-server"],
      "env": {}
    }
  }
}
Note: Your key is sensitive information, do not share it with anyone.
Featured MCP Services
D
Duckduckgo MCP Server
Certified
The DuckDuckGo Search MCP Server provides web search and content scraping services for LLMs such as Claude.
Python
827
4.3 points
G
Gitlab MCP Server
Certified
The GitLab MCP server is a project based on the Model Context Protocol that provides a comprehensive toolset for interacting with GitLab accounts, including code review, merge request management, CI/CD configuration, and other functions.
TypeScript
85
4.3 points
M
Markdownify MCP
Markdownify is a multi-functional file conversion service that supports converting multiple formats such as PDFs, images, audio, and web page content into Markdown format.
TypeScript
1.7K
5 points
N
Notion Api MCP
Certified
A Python-based MCP Server that provides advanced to-do list management and content organization functions through the Notion API, enabling seamless integration between AI models and Notion.
Python
140
4.5 points
U
Unity
Certified
UnityMCP is a Unity editor plugin that implements the Model Context Protocol (MCP), providing seamless integration between Unity and AI assistants, including real - time state monitoring, remote command execution, and log functions.
C#
563
5 points
F
Figma Context MCP
Framelink Figma MCP Server is a server that provides access to Figma design data for AI programming tools (such as Cursor). By simplifying the Figma API response, it helps AI more accurately achieve one - click conversion from design to code.
TypeScript
6.7K
4.5 points
M
Minimax MCP Server
The MiniMax Model Context Protocol (MCP) is an official server that supports interaction with powerful text-to-speech, video/image generation APIs, and is suitable for various client tools such as Claude Desktop and Cursor.
Python
752
4.8 points
G
Gmail MCP Server
A Gmail automatic authentication MCP server designed for Claude Desktop, supporting Gmail management through natural language interaction, including complete functions such as sending emails, label management, and batch operations.
TypeScript
282
4.5 points
AIbase
Zhiqi Future, Your AI Solution Think Tank
© 2025AIbase