Official description10 sourcesMCP servers8d ago
StacklokLabs/osv-mcp
๐๏ธ โ๏ธ - Query the OSV (Open Source Vulnerabilities) database by package version or commit, batch-queryโฆ
View on GitHub โDirect link ยท no redirect page
Official description๐๏ธ โ๏ธ - Query the OSV (Open Source Vulnerabilities) database by package version or commit, batch-query multiple packages and get vulnerability details by ID.
Config template (adjust for your client)
claude mcp add osv-mcp -- npx -y osv-mcp
A pasteable skeleton generated from the repository name. Check the project README for the exact package and arguments.
- Star count
- 42 โ ยท StacklokLabs/osv-mcp ยท read from the GitHub search API ยท (checked 2026-10-16 20:00:20)
- Source
- collected from the punkpeye/awesome-mcp-servers list ยท type: MCP server
- Harvest history
- first seen 2026-10-09 ยท last seen 2026-10-16 ยท seen 32ร ยท listed by 10 sources
- Score
- score 1,003 ยท 42 โ ยท 10 sources ยท mcp
FAQ (answers come from our records)
How do I install it?
We did not find an install command for this repository (our install coverage is only about 4%). Check its README or releases page.
Who is it for?
We filed it under these tags: MCP ๆๅก. The tags come from the entry itself, not a taxonomy we imposed.
Who maintains it?
repository
StacklokLabs/osv-mcp๏ผfirst catalogued 2026-10-09๏ผlast seen 2026-10-16ใThere is no official certification or quality rating here โ we record sources and dates only.Third-party quality signals
OSV MCP Server
ไปฅไธๆๅฝ่ช่ฏฅไปๅบ็ README๏ผ็ๆฎต๏ผ ยท ๅจ GitHub ่ฏปๅฎๆด README โ
An MCP (Model Context Protocol) server that provides access to the
OSV (Open Source Vulnerabilities) database.
Overview
This project implements an SSE-based MCP server that allows LLM-powered
applications to query the OSV database for vulnerability information. The server
provides tools for:
1. Querying vulnerabilities for a specific package version or commit
2. Batch querying vulnerabilities for multiple packages or commits
3. Getting detailed information about a specific vulnerability by ID
Installation
Prerequisites
- Go 1.21 or later
- Task (optional, for running tasks)
- ko (optional, for building container images)
Building from source
Usage
Running with ToolHive (Recommended)
The easiest way to run the OSV MCP server is using
ToolHive, which provides secure,
containerized deployment of MCP servers:
The server will be available to your MCP-compatible clients and can query the
OSV database for vulnerability information.
Running from Source
Server Configuration
The server can be configured using environment variables:
- MCP_PORT: The port number to run the server on (default: 8080)
- Must be a valid integer between 0 and 65535
- If invalid or not set, the server will use port 8080
- MCP_TRANSPORT: The transport mode for the server (default: sse)
- Supported values: sse, streamable-http
- If invalid or not set, the server will use SSE transport mode
Example:
MCP Tools
The server provides the following MCP tools:
query_vulnerability
Query for vulnerabilities affecting a specific package version or commit.
**Input Schema:**
query_vulnerabilities_batch
Query for vulnerabilities affecting multiple packages or commits at once.
**Input Schema:**
get_vulnerability
Get details for a specific vulnerability by ID.
**Input Schema:**
Examples
Querying vulnerabilities for a package
Querying vulnerabilities for a commit
Batch querying vulnerabilities
Getting vulnerability details
Development
Running tests
Linting
Formatting code
Contributing
We welcome contributions to this MCP server! If you'd like to contribute, please
review the CONTRIBUTING guide for details on how to get
OSV (Open Source Vulnerabilities) database.
Overview
This project implements an SSE-based MCP server that allows LLM-powered
applications to query the OSV database for vulnerability information. The server
provides tools for:
1. Querying vulnerabilities for a specific package version or commit
2. Batch querying vulnerabilities for multiple packages or commits
3. Getting detailed information about a specific vulnerability by ID
Installation
Prerequisites
- Go 1.21 or later
- Task (optional, for running tasks)
- ko (optional, for building container images)
Building from source
Usage
Running with ToolHive (Recommended)
The easiest way to run the OSV MCP server is using
ToolHive, which provides secure,
containerized deployment of MCP servers:
The server will be available to your MCP-compatible clients and can query the
OSV database for vulnerability information.
Running from Source
Server Configuration
The server can be configured using environment variables:
- MCP_PORT: The port number to run the server on (default: 8080)
- Must be a valid integer between 0 and 65535
- If invalid or not set, the server will use port 8080
- MCP_TRANSPORT: The transport mode for the server (default: sse)
- Supported values: sse, streamable-http
- If invalid or not set, the server will use SSE transport mode
Example:
MCP Tools
The server provides the following MCP tools:
query_vulnerability
Query for vulnerabilities affecting a specific package version or commit.
**Input Schema:**
query_vulnerabilities_batch
Query for vulnerabilities affecting multiple packages or commits at once.
**Input Schema:**
get_vulnerability
Get details for a specific vulnerability by ID.
**Input Schema:**
Examples
Querying vulnerabilities for a package
Querying vulnerabilities for a commit
Batch querying vulnerabilities
Getting vulnerability details
Development
Running tests
Linting
Formatting code
Contributing
We welcome contributions to this MCP server! If you'd like to contribute, please
review the CONTRIBUTING guide for details on how to get
- Source
- awesome ยท https://github.com/StacklokLabs/osv-mcp
- Browse by field
- MCP servers
- Traction
- 42 โ
- added
- yesterday
More in MCP servers
Filed under
Every tag opens the full list for that filter. Counts are the live catalogue figures.