Osv Dev
Server Details
OSV.dev — Google's open-source vulnerability database
The last two health checks of this connector failed. If this server requires authentication, missing or expired test credentials may be the cause. A test profile lets Glama authenticate for health checks and discover tools; it is separate from your personal connections.
If you are the author, claim ownership, then add or update a test profile under Admin → Test Profile.
- Status
- Unhealthy
- Uptime
- 7.0% over 69 days
- Last Tested
- Transport
- Streamable HTTP
- URL
- Repository
- pipeworx-io/mcp-osv-dev
- GitHub Stars
- 0
- Server Listing
- mcp-osv-dev
- ChatGPT
- –
- Claude
- –
TDQS
Scored across 31 tools
Several tools form overlapping clusters that could confuse an agent: the three ask_pipeworx variants (base, beta, grounded) serve nearly identical routing purposes with beta explicitly identical to base, and the five polymarket_* tools cover related but distinct trading-adjacent functions. Descriptions are detailed and mostly disambiguate, but the sheer number of similar-sounding tools (31) increases the risk of misselection.
All names use snake_case and are descriptive, but the semantic pattern is inconsistent: some are verb_noun (compare_entities, discover_tools), some noun_noun (entity_profile, polymarket_edge_tracker), some single verbs (remember, recall, forget), and some adjective_noun (deep_research, recent_alerts). This mix is readable but lacks the uniform verb_noun structure of the high-coherence calibration example.
31 tools is above the 25+ threshold that feels heavy for most servers, but this is a comprehensive data-aggregation platform exposing a curated subset of 5,621 internal tools. The breadth justifies many of them, yet from an agent's perspective the surface is dense and could overwhelm; a more focused set with fewer overlapping utilities would improve usability.
The surface covers a wide range of domain operations: data lookup (ask_pipeworx), research (deep_research), entity profiling and comparison, claim verification, prediction markets, subscriptions, memory, and discovery. Minor gaps exist—for example, there is no explicit tool to fetch a raw record by pipeworx:// URI (though search_within can search inside already-fetched text), and web utilities like generate_llms_txt and scan_dependency feel tangential. Overall the core data workflows are well covered.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
1 tool update
- Changed
deep_research1 field changed- changed
Input schema / properties / depth / descriptionPrevious value: -"How many facets to research in parallel: quick=3 (single hop), standard=5 (default; adds a gap-recovery hop that re-angles unanswered facets + a contradictions[] scan across findings), thorough=8 (paid; adds a full iterative hop that chases leads + recovers gaps, plus the contradictions[] scan)."New value: +"How many facets to research in parallel: quick=3 (single hop), standard=3 (default; adds a gap-recovery hop that re-angles unanswered facets + a contradictions[] scan across findings), thorough=6 (paid; adds a full iterative hop that chases leads + recovers gaps, plus the contradictions[] scan)."
Related MCP Connectors
Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and re
Package vuln advisories from OSV.dev: CVEs, severity, fixes, manifest audit. Pay per call via x402.
Known vulnerabilities and fixed versions for npm, PyPI, Go, Maven packages from OSV.dev via Apify.
Related MCP Servers
- AlicenseAqualityAmaintenanceEnables AI agents to submit npm, PyPI, Go, or Maven packages and manifests to the free OSV.dev database and receive per-package and per-advisory results with CVE mappings, CVSS scores, severities, and the versions that fix each issue. It also supports filtering by minimum severity, de-duplicating alias advisories, and machine-readable error/warning rows for CI gates and upgrade recommendations.3MIT

@guardbee/mcp-dependencyofficial
AlicenseNot gradedqualityFmaintenanceEnables auditing npm, pip, and other package dependencies for known CVEs via the OSV database, with tools to scan manifests, query individual packages, and integrate into CI/CD workflows.785 npmMIT- AlicenseNot gradedqualityBmaintenanceEnables AI agents to look up known open-source vulnerabilities in the OSV.dev database, covering individual packages and versions, specific git commits, single vulnerability IDs, and batch SBOM-style dependency scans. Queries are keyless and return compact summaries or full vulnerability details with affected ranges and references.412 npmMIT
- FlicenseNot gradedqualityCmaintenanceScans Python, Node.js, Java/Spring, and PHP dependency manifests for known vulnerabilities using OSV and GitHub Advisory APIs.-
Glama MCP Gateway
Add one secure layer between your agents and this server.