OSV

MCP Server For OSV

A lightweight MCP (Model Context Protocol) server for OSV Database API.

Example:

Tools Provided

Overview

Detailed Description

• query_package_cve
  • Query the OSV database for a package and return the CVE IDs.
  • Input parameters:
    • package (string, required): The package name to query
    • version (string, optional): The version of the package to query. If not specified, queries all versions
    • ecosystem (string, optional): The ecosystem of the package. Defaults to "PyPI" for Python packages
  • Returns a list of CVE IDs with their details
• query_for_cve_affected
  • Query the OSV database for a CVE and return all affected versions.
  • Input parameters:
    • cve (string, required): The CVE ID to query (e.g., "CVE-2018-1000805")
  • Returns a list of affected version strings
• query_for_cve_fix_versions
  • Query the OSV database for a CVE and return all versions that fix the vulnerability.
  • Input parameters:
    • cve (string, required): The CVE ID to query (e.g., "CVE-2018-1000805")
  • Returns a list of fixed version strings
• get_ecosystems
  • Query for all current supported ecosystems by the MCP servers.
  • Return a dict with the key being the ecosystem name and the value the programming language / OS.

Prerequisites

1. Python 3.11 or higher: This project requires Python 3.11 or newer.
   # Check your Python version python --version
2. Install uv: A fast Python package installer and resolver.
   pip install uv
   Or use Homebrew:
   brew install uv

Tested on

• Cursor
• Claude

Installation

1. Via Smithery:

2. Locally:
   1. Clone the repo: https://github.com/EdenYavin/OSV-MCP.git
   2. Configure your MCP Host (Cusrsor / Claude Desktop etc.):

Leave a review on VibeApp if you enjoyed it :)!