官方说明10 个来源MCP 服务8 天前

StacklokLabs/osv-mcp

🏎️ ☁️ - Query the OSV (Open Source Vulnerabilities) database by package version or commit, batch-query…

官方说明🏎️ ☁️ - Query the OSV (Open Source Vulnerabilities) database by package version or commit, batch-query multiple packages and get vulnerability details by ID.

配置模板（请按你的客户端调整）

claude mcp add osv-mcp -- npx -y osv-mcp

这是根据仓库名生成的可粘贴骨架，命令行参数与包名请以该项目 README 为准。

★ 数取值: 42 ★ · StacklokLabs/osv-mcp · 取自 GitHub 搜索 API · （2026-10-16 20:00:20 核对）
来源明细: 收录自 punkpeye/awesome-mcp-servers 榜单（我们从中收集的条目之一） · 条目类型：MCP 服务
收录与活跃: 收录于 2026-10-09 · 最近见到 2026-10-16 · 共见到 32 次 · 被 10 个来源列出
评分构成: 综合分 1,003 · 42 ★ · 10 个来源 · mcp

常见问题（答案都来自我们的记录）

怎么安装？

我们【没有】从该仓库取到安装命令（我们的 install 覆盖率只有约 4%）。请看它的 README 或 releases 页。

它适合谁 / 用来做什么？

我们把它归在这些标签下: MCP 服务。标签来自条目自身，不是我们强加的分类。

谁维护它、还在更新吗？

仓库 StacklokLabs/osv-mcp；我们收录于 2026-10-09；最近见到 2026-10-16。这里没有"官方认证"或"质量评级"——我们只记录来源与时间。

第三方质量标记

OSV MCP Server

以下摘录自该仓库的 README（片段） · 在 GitHub 读完整 README →

An MCP (Model Context Protocol) server that provides access to the
OSV (Open Source Vulnerabilities) database.
Overview
This project implements an SSE-based MCP server that allows LLM-powered
applications to query the OSV database for vulnerability information. The server
provides tools for:
1. Querying vulnerabilities for a specific package version or commit
2. Batch querying vulnerabilities for multiple packages or commits
3. Getting detailed information about a specific vulnerability by ID
Installation
Prerequisites
- Go 1.21 or later
- Task (optional, for running tasks)
- ko (optional, for building container images)
Building from source
Usage
Running with ToolHive (Recommended)
The easiest way to run the OSV MCP server is using
ToolHive, which provides secure,
containerized deployment of MCP servers:
The server will be available to your MCP-compatible clients and can query the
OSV database for vulnerability information.
Running from Source
Server Configuration
The server can be configured using environment variables:
- MCP_PORT: The port number to run the server on (default: 8080)
- Must be a valid integer between 0 and 65535
- If invalid or not set, the server will use port 8080
- MCP_TRANSPORT: The transport mode for the server (default: sse)
- Supported values: sse, streamable-http
- If invalid or not set, the server will use SSE transport mode
Example:
MCP Tools
The server provides the following MCP tools:
query_vulnerability
Query for vulnerabilities affecting a specific package version or commit.
**Input Schema:**
query_vulnerabilities_batch
Query for vulnerabilities affecting multiple packages or commits at once.
**Input Schema:**
get_vulnerability
Get details for a specific vulnerability by ID.
**Input Schema:**
Examples
Querying vulnerabilities for a package
Querying vulnerabilities for a commit
Batch querying vulnerabilities
Getting vulnerability details
Development
Running tests
Linting
Formatting code
Contributing
We welcome contributions to this MCP server! If you'd like to contribute, please
review the CONTRIBUTING guide for details on how to get