Skip to main content
Glama
Sign In
enesjakozh

OSV

by EdenYavin
GitHub
Python
MIT License
2
OverviewInspectNewSchemaRelated ServersReviewsScore
Need Help?View Source CodeReport Issue

Integrations

  • Enables querying for package vulnerabilities in the PyPI ecosystem, fetching CVEs associated with packages and identifying affected and fixed versions

MCP Server For OSV

A lightweight MCP (Model Context Protocol) server for OSV Database API.

Example:

Tools Provided

Overview

namedescription
query_package_cveList all the CVE IDs for a specific package. Specific version can be passed as well for more narrow scope CVE IDs.
query_for_cve_affectedQuery the OSV database for a CVE and return all affected versions of the package.
query_for_cve_fix_versionsQuery the OSV database for a CVE and return all versions that fix the vulnerability.
get_ecosystemsQuery the MCP for current supported ecosystems.

Detailed Description

  • query_package_cve
    • Query the OSV database for a package and return the CVE IDs.
    • Input parameters:
      • package (string, required): The package name to query
      • version (string, optional): The version of the package to query. If not specified, queries all versions
      • ecosystem (string, optional): The ecosystem of the package. Defaults to "PyPI" for Python packages
    • Returns a list of CVE IDs with their details
  • query_for_cve_affected
    • Query the OSV database for a CVE and return all affected versions.
    • Input parameters:
      • cve (string, required): The CVE ID to query (e.g., "CVE-2018-1000805")
    • Returns a list of affected version strings
  • query_for_cve_fix_versions
    • Query the OSV database for a CVE and return all versions that fix the vulnerability.
    • Input parameters:
      • cve (string, required): The CVE ID to query (e.g., "CVE-2018-1000805")
    • Returns a list of fixed version strings
  • get_ecosystems
    • Query for all current supported ecosystems by the MCP servers.
    • Return a dict with the key being the ecosystem name and the value the programming language / OS.

Prerequisites

  1. Python 3.11 or higher: This project requires Python 3.11 or newer.
    # Check your Python version python --version
  2. Install uv: A fast Python package installer and resolver.
    pip install uv
    Or use Homebrew:
    brew install uv

Tested on

  • Cursor
  • Claude

Installation

  1. Via Smithery:
npx -y @smithery/cli install @EdenYavin/OSV-MCP --client claude
  1. Locally:
    1. Clone the repo: https://github.com/EdenYavin/OSV-MCP.git
    2. Configure your MCP Host (Cusrsor / Claude Desktop etc.):
{ "mcpServers": { "osv-mcp": { "command": "uv", "args": ["--directory", "path-to/OSV-MCP", "run", "osv-server"], "env": {} } } }

Leave a review on VibeApp if you enjoyed it :)!

You must be authenticated.

A
security – no known vulnerabilities
A
license - permissive license
A
quality - confirmed to work

remote-capable server

The server can be hosted and run remotely because it primarily relies on remote services or has no dependency on the local environment.

Tools

The server can be utilized for secure development by listing all packages' CVEs, their affected versions and their fix versions.

  1. Tools Provided
    1. Overview
    2. Detailed Description
  2. Prerequisites
    1. Tested on
      1. Installation

        Related Resources

        Related MCP Servers

        • MCP Security Audit Server

          qianniuspace
          A
          security
          A
          license
          A
          quality
          Audits npm package dependencies for security vulnerabilities, providing detailed reports and fix recommendations with MCP integration.
          Last updated -
          1
          26
          24
          TypeScript
          MIT License

        • Snyk MCP Server

          sammcj
          -
          security
          F
          license
          -
          quality
          A standalone server enabling Snyk security scanning through the Model Context Protocol, with support for repository and project analysis, token verification, and CLI integration.
          Last updated -
          1
          JavaScript

        • MCP Command Server

          Andrew-Beniash
          -
          security
          F
          license
          -
          quality
          A secure server that allows LLM applications like Claude to execute whitelisted system commands with user confirmation and comprehensive security features.
          Last updated -
          Python
          • Linux
          • Apple

        • MCP-REPL

          AnEntrypoint
          A
          security
          F
          license
          A
          quality
          A secure JavaScript REPL server that enables executing code snippets in a sandboxed environment with memory protection, timeout handling, and comprehensive error reporting.
          Last updated -
          2
          1,369
          3
          JavaScript
          • Linux
          • Apple

        View all related MCP servers

        Appeared in Searches

        New MCP Servers

        ID: v2cmrj1d1r