About OSV Dependency Vulnerability Check
An Apify Actor and stdio MCP server that checks exact dependency versions against the OSV.dev vulnerability database. It accepts package lists or supported manifests and returns structured package and advisory details for developers and CI workflows.
Key features
- 01Queries OSV.dev advisories
- 02Checks exact package versions
- 03Parses supported dependency manifests
- 04Filters findings by severity
- 05Returns CVEs, CVSS, and fixed versions
Use cases
- 01Auditing a package lockfile
- 02Checking dependencies in CI
- 03Finding upgrade versions for vulnerable packages
- 04Filtering high-severity advisories for review
MCP support
The stdio MCP server provides `check_dependency_vulnerabilities`, `get_vulnerability_details`, and `list_package_vulnerabilities`. The check tool runs the Apify Actor and requires `APIFY_TOKEN`; the other two query OSV.dev directly without a token.
Configuration
Remote servers need no local install. Pick your client, then copy the config or install in one click.
https://mcp.apify.com/?tools=fetch-actor-details,fairquery/osv-dependency-vulnerability-checkclaude mcp add --transport http fairquery-osv-dependency-vulnerability-check https://mcp.apify.com/?tools=fetch-actor-details,fairquery/osv-dependency-vulnerability-check{"mcpServers":{"fairquery-osv-dependency-vulnerability-check":{"type":"http","url":"https://mcp.apify.com/?tools=fetch-actor-details,fairquery/osv-dependency-vulnerability-check"}}}Open in Cursor{"servers":{"fairquery-osv-dependency-vulnerability-check":{"type":"http","url":"https://mcp.apify.com/?tools=fetch-actor-details,fairquery/osv-dependency-vulnerability-check"}}}Open in VS Code{"mcpServers":{"fairquery-osv-dependency-vulnerability-check":{"type":"http","url":"https://mcp.apify.com/?tools=fetch-actor-details,fairquery/osv-dependency-vulnerability-check"}}}{"mcpServers":{"fairquery-osv-dependency-vulnerability-check":{"serverUrl":"https://mcp.apify.com/?tools=fetch-actor-details,fairquery/osv-dependency-vulnerability-check"}}}Run commands in a terminal; paste JSON into the client’s MCP config and restart. Servers that need sign-in will prompt on first connect.
https://mcp.apify.com/?tools=fetch-actor-details,fairquery/osv-dependency-vulnerability-checkAuth requiredTools
Details
The maintainer has not added details yet. Check the README in the repository.
Comments
New to MCP?
From what the protocol is to installing your first server, these answers cover most first questions.
An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.