mcpField
O
Osv Dev

Osv Dev

Remote
pipeworx.ioSecurity0Updated 21w ago
RepositoryVisit website

About Osv Dev

Osv Dev is an MCP server for querying Google's OSV.dev open-source vulnerability database. It helps developers and security workflows check package or commit vulnerabilities, retrieve full records, and query up to 1000 entries at once.

Key features

  1. 01Query package vulnerabilities
  2. 02Query vulnerabilities by commit
  3. 03Retrieve full records by ID
  4. 04Batch-query up to 1000 entries

Use cases

  1. 01Check a package and version for vulnerabilities
  2. 02Inspect vulnerabilities tied to a commit
  3. 03Scan dependencies with a batch query
  4. 04Retrieve a CVE, GHSA, or OSV record

MCP support

Exposes OSV.dev vulnerability queries to MCP clients through a Pipeworx endpoint. The gateway can also route natural-language requests to the appropriate tool.

Configuration

Remote servers need no local install. Pick your client, then copy the config or install in one click.

Endpointhttps://gateway.pipeworx.io/osv-dev/mcp
Copy install command
Claude CodeTerminal
Cursor.cursor/mcp.json
VS Code.vscode/mcp.json
Claude Desktopclaude_desktop_config.json
Windsurf~/.codeium/windsurf/mcp_config.json

Run commands in a terminal; paste JSON into the client’s MCP config and restart. Servers that need sign-in will prompt on first connect.

Tools

Details

From the project README

mcp-osv-dev

OSV.dev MCP — Google's open-source vulnerability database.

Part of Pipeworx — an MCP gateway connecting AI agents to 673+ live data sources.

Tools

ToolDescription
vulnerabilitiesQuery vulnerabilities by package (+ optional version) or git commit.
query_batchBatch query (≤1000 queries). Pass an array of {package: {name, ecosystem}, version?} or {commit}.
getFull vulnerability record by id (CVE-…, GHSA-…, OSV-…).

Quick Start

Add to your MCP client (Claude Desktop, Cursor, Windsurf, etc.):

{
  "mcpServers": {
    "osv-dev": {
      "url": "https://gateway.pipeworx.io/osv-dev/mcp"
    }
  }
}

Or connect to the full Pipeworx gateway for access to all 673+ data sources:

{
  "mcpServers": {
    "pipeworx": {
      "url": "https://gateway.pipeworx.io/mcp"
    }
  }
}

Using with ask_pipeworx

Instead of calling tools directly, you can ask questions in plain English:

ask_pipeworx({ question: "your question about Osv Dev data" })

The gateway picks the right tool and fills the arguments automatically.

More

License

MIT

Comments

Markdown supported

New to MCP?

From what the protocol is to installing your first server, these answers cover most first questions.

An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.