mcpField
O
OSV MCP Server

OSV MCP Server

Local
github.com/ptelangSecurity1Updated 79w ago
Repository

About OSV MCP Server

OSV MCP Server is a Python MCP server that makes OSV vulnerability data and tools available to AI assistants and LLMs. It provides a `query_vulnerabilities` tool for vulnerability lookups.

Key features

  1. 01Exposes OSV-related data
  2. 02Provides a vulnerability query tool
  3. 03Python setup and execution

Use cases

  1. 01Look up vulnerabilities through an AI assistant
  2. 02Add OSV data to an MCP workflow

MCP support

The server exposes OSV-related data and resources to MCP clients, including the `query_vulnerabilities` tool.

#osv-mcp#vulnerability-server#ai-integration

Configuration

Local server config is the same for every client. Copy it into your client’s MCP config file.

No install method listed yet

We haven’t collected a package or remote endpoint for this server. Follow the instructions in the project README.

Repository

Tools

No tool list yet

Local servers expose tools only once running on your machine, and the maintainer has not provided a tool list.

Details

From the project README

OSV MCP Server

This project provides an MCP (Model Context Protocol) server for integrating OSV (Open Source Vulnerabilities) data and tools with AI assistants or large language models (LLMs). The server is implemented in Python and exposes tools and resources that can be used by LLMs to enhance their workflow and capabilities. Here is a screenshot of Claude Desktop using the OSV MCP Server.

Claude Desktop Using OSV MCP Server

Features

  • Exposes OSV-related data via the MCP protocol
  • Easily connectable to AI assistants or LLMs that support MCP
  • Simple Python-based setup

Prerequisites

Setup Instructions

1. Clone the Repository

Clone this repository to your local machine:

git clone https://github.com/your-org/osv-mcp.git
cd osv-mcp
2. Create a Virtual Environment (Recommended)

It is recommended to use a virtual environment to avoid dependency conflicts:

curl -LsSf https://astral.sh/uv/install.sh | sh
uv venv
3. Install Dependencies

Install the required Python packages using uv:

uv sync
4. Start the MCP Server

Run the server using:

uv run vulns.py

Using MCP Servers with AI Assistants and LLMs

MCP servers expose tools and resources over a local or network-accessible API. AI assistants and LLMs that support the Model Context Protocol can connect to one or more MCP servers to extend their capabilities. Once connected, the assistant can invoke the query_vulnerabilities tool.

Consult your AI assistant or LLM's documentation for specific instructions on adding or configuring MCP servers.

Using OSV MCP Server with Claude Desktop

Add the OSV MCP server in claude_desktop_config.json file.

On Mac or Linux, edit: ~/Library/Application\ Support/Claude/claude_desktop_config.json. On Windows, edit: env:AppData\Claude\claude_desktop_config.json.

Add the OSV MCP server to the config as below.

{
    "mcpServers": {
        "vulns": {
            "command": "uv",
            "args": [
                "--directory",
                "/ABSOLUTE/PATH/TO/PARENT/FOLDER/osv-mcp",
                "run",
                "vulns.py"
            ]
        }
    }
}

Development

  • Source code is in vulns.py.
  • Project dependencies are managed via pyproject.toml.

License

MIT License (or specify your license here)

For further questions or support, please open an issue or contact the maintainers.

Comments

Markdown supported

New to MCP?

From what the protocol is to installing your first server, these answers cover most first questions.

An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.