Osv MCP
This project provides a Python - based MCP server for integrating OSV (open - source vulnerability) data with AI assistants or large - language models, and exposes tools and resources through the MCP protocol to enhance the workflows and capabilities of LLMs.
2 points
7.2K

What is the OSV MCP Server?

The OSV MCP Server is an intermediate service that enables AI assistants to query the open - source software vulnerability database (OSV). Through the standardized Model Context Protocol (MCP), AI can obtain the latest security vulnerability information to enhance the accuracy of responses.

How to use the OSV MCP Server?

Simply configure the connection information of the AI assistant (such as Claude), and the AI can automatically acquire the vulnerability query capability. Users do not need to operate the server directly, and all interactions are completed through the AI interface.

Applicable scenarios

When you need AI to help analyze the security risks of software dependencies, check for known vulnerabilities, or obtain repair suggestions, an AI integrated with the OSV MCP Server can provide professional - level security analysis.

Main features

Vulnerability data query
Provides full query capabilities for the OSV database, supporting multi - condition retrieval by software package, version, etc.
Standard protocol integration
Adopts the MCP protocol and is compatible with various AI assistants and large - language models that support this protocol.
Easy deployment
Implemented in Python, with simple dependencies, and can be quickly deployed locally or on a server.
Advantages
Add professional - level security analysis capabilities to AI
Obtain authoritative open - source vulnerability data in real - time
Simple configuration and seamless integration with existing AI workflows
Limitations
Requires the AI assistant to support the MCP protocol
Only provides vulnerability data and does not include automatic generation of repair solutions
Requires simple configuration for first - time use

How to use

Installation preparation
Ensure that Python 3.8+ and the uv package manager are installed on the system.
Get the project code
Clone the repository to the local machine.
Create a virtual environment
Create an independent Python environment for the project to avoid conflicts.
Install dependencies
Install all the Python packages required by the project.
Start the service
Run the server program.

Usage examples

Security audit assistance
When developers evaluate the security of project dependencies, they can query known vulnerabilities of specific libraries through AI.
Vulnerability repair decision - making
When the security team evaluates the severity of a vulnerability, they can quickly obtain detailed vulnerability information.

Frequently Asked Questions

Which AI assistants support the MCP protocol?
Does it need to be used online?
What is the data update frequency?

Related resources

OSV project official website
Official website of the open - source vulnerability database
MCP protocol description
Technical specification of the Model Context Protocol
uv package manager
Python package management tool used in the project

Installation

Copy the following command to your Client for configuration
{
    "mcpServers": {
        "vulns": {
            "command": "uv",
            "args": [
                "--directory",
                "/ABSOLUTE/PATH/TO/PARENT/FOLDER/osv-mcp",
                "run",
                "vulns.py"
            ]
        }
    }
}
Note: Your key is sensitive information, do not share it with anyone.

Alternatives

M
MCP
The Microsoft official MCP server provides search and access functions for the latest Microsoft technical documentation for AI assistants
8.7K
5 points
A
Aderyn
Aderyn is an open - source Solidity smart contract static analysis tool written in Rust, which helps developers and security researchers discover vulnerabilities in Solidity code. It supports Foundry and Hardhat projects, can generate reports in multiple formats, and provides a VSCode extension.
Rust
5.9K
5 points
D
Devtools Debugger MCP
The Node.js Debugger MCP server provides complete debugging capabilities based on the Chrome DevTools protocol, including breakpoint setting, stepping execution, variable inspection, and expression evaluation.
TypeScript
5.4K
4 points
S
Scrapling
Scrapling is an adaptive web scraping library that can automatically learn website changes and re - locate elements. It supports multiple scraping methods and AI integration, providing high - performance parsing and a developer - friendly experience.
Python
7.8K
5 points
M
Mcpjungle
MCPJungle is a self-hosted MCP gateway used to centrally manage and proxy multiple MCP servers, providing a unified tool access interface for AI agents.
Go
0
4.5 points
C
Cipher
Cipher is an open-source memory layer framework designed for programming AI agents. It integrates with various IDEs and AI coding assistants through the MCP protocol, providing core functions such as automatic memory generation, team memory sharing, and dual-system memory management.
TypeScript
0
5 points
N
Nexus
Nexus is an AI tool aggregation gateway that supports connecting multiple MCP servers and LLM providers, providing tool search, execution, and model routing functions through a unified endpoint, and supporting security authentication and rate limiting.
Rust
0
4 points
S
Shadcn Ui MCP Server
An MCP server that provides shadcn/ui component integration for AI workflows, supporting React, Svelte, and Vue frameworks. It includes functions for accessing component source code, examples, and metadata.
TypeScript
12.1K
5 points
G
Gitlab MCP Server
Certified
The GitLab MCP server is a project based on the Model Context Protocol that provides a comprehensive toolset for interacting with GitLab accounts, including code review, merge request management, CI/CD configuration, and other functions.
TypeScript
16.6K
4.3 points
N
Notion Api MCP
Certified
A Python-based MCP Server that provides advanced to-do list management and content organization functions through the Notion API, enabling seamless integration between AI models and Notion.
Python
14.8K
4.5 points
M
Markdownify MCP
Markdownify is a multi-functional file conversion service that supports converting multiple formats such as PDFs, images, audio, and web page content into Markdown format.
TypeScript
24.5K
5 points
D
Duckduckgo MCP Server
Certified
The DuckDuckGo Search MCP Server provides web search and content scraping services for LLMs such as Claude.
Python
44.7K
4.3 points
U
Unity
Certified
UnityMCP is a Unity editor plugin that implements the Model Context Protocol (MCP), providing seamless integration between Unity and AI assistants, including real - time state monitoring, remote command execution, and log functions.
C#
20.2K
5 points
F
Figma Context MCP
Framelink Figma MCP Server is a server that provides access to Figma design data for AI programming tools (such as Cursor). By simplifying the Figma API response, it helps AI more accurately achieve one - click conversion from design to code.
TypeScript
44.3K
4.5 points
M
Minimax MCP Server
The MiniMax Model Context Protocol (MCP) is an official server that supports interaction with powerful text-to-speech, video/image generation APIs, and is suitable for various client tools such as Claude Desktop and Cursor.
Python
30.2K
4.8 points
G
Gmail MCP Server
A Gmail automatic authentication MCP server designed for Claude Desktop, supporting Gmail management through natural language interaction, including complete functions such as sending emails, label management, and batch operations.
TypeScript
15.8K
4.5 points
AIBase
Zhiqi Future, Your AI Solution Think Tank
© 2025AIBase