Skip to main content
Glama

Server Details

OSV.dev — Google's open-source vulnerability database

The last two health checks of this connector failed. If this server requires authentication, missing or expired test credentials may be the cause. A test profile lets Glama authenticate for health checks and discover tools; it is separate from your personal connections.

If you are the author, claim ownership, then add or update a test profile under Admin → Test Profile.

Status
Unhealthy
Uptime
7.0% over 69 days
Last Tested
Transport
Streamable HTTP
URL
Repository
pipeworx-io/mcp-osv-dev
GitHub Stars
0
Server Listing
mcp-osv-dev
ChatGPT
–
Claude
–

TDQS

A4.1/5.0

Scored across 31 tools

Disambiguation3/5

Several tools form overlapping clusters that could confuse an agent: the three ask_pipeworx variants (base, beta, grounded) serve nearly identical routing purposes with beta explicitly identical to base, and the five polymarket_* tools cover related but distinct trading-adjacent functions. Descriptions are detailed and mostly disambiguate, but the sheer number of similar-sounding tools (31) increases the risk of misselection.

Naming Consistency4/5

All names use snake_case and are descriptive, but the semantic pattern is inconsistent: some are verb_noun (compare_entities, discover_tools), some noun_noun (entity_profile, polymarket_edge_tracker), some single verbs (remember, recall, forget), and some adjective_noun (deep_research, recent_alerts). This mix is readable but lacks the uniform verb_noun structure of the high-coherence calibration example.

Tool Count3/5

31 tools is above the 25+ threshold that feels heavy for most servers, but this is a comprehensive data-aggregation platform exposing a curated subset of 5,621 internal tools. The breadth justifies many of them, yet from an agent's perspective the surface is dense and could overwhelm; a more focused set with fewer overlapping utilities would improve usability.

Completeness4/5

The surface covers a wide range of domain operations: data lookup (ask_pipeworx), research (deep_research), entity profiling and comparison, claim verification, prediction markets, subscriptions, memory, and discovery. Minor gaps exist—for example, there is no explicit tool to fetch a raw record by pipeworx:// URI (though search_within can search inside already-fetched text), and web utilities like generate_llms_txt and scan_dependency feel tangential. Overall the core data workflows are well covered.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 1 tool update
    • Changeddeep_research1 field changed
      • changedInput schema / properties / depth / description
        Previous value: -"How many facets to research in parallel: quick=3 (single hop), standard=5 (default; adds a gap-recovery hop that re-angles unanswered facets + a contradictions[] scan across findings), thorough=8 (paid; adds a full iterative hop that chases leads + recovers gaps, plus the contradictions[] scan)."New value: +"How many facets to research in parallel: quick=3 (single hop), standard=3 (default; adds a gap-recovery hop that re-angles unanswered facets + a contradictions[] scan across findings), thorough=6 (paid; adds a full iterative hop that chases leads + recovers gaps, plus the contradictions[] scan)."

Related MCP Connectors

Related MCP Servers

  • A
    license
    A
    quality
    A
    maintenance
    Enables AI agents to submit npm, PyPI, Go, or Maven packages and manifests to the free OSV.dev database and receive per-package and per-advisory results with CVE mappings, CVSS scores, severities, and the versions that fix each issue. It also supports filtering by minimum severity, de-duplicating alias advisories, and machine-readable error/warning rows for CI gates and upgrade recommendations.
    3
    MIT
  • A
    license
    Not graded
    quality
    F
    maintenance
    Enables auditing npm, pip, and other package dependencies for known CVEs via the OSV database, with tools to scan manifests, query individual packages, and integrate into CI/CD workflows.
    785 npm
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables AI agents to look up known open-source vulnerabilities in the OSV.dev database, covering individual packages and versions, specific git commits, single vulnerability IDs, and batch SBOM-style dependency scans. Queries are keyless and return compact summaries or full vulnerability details with affected ranges and references.
    412 npm
    MIT
Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.