Skip to main content
Glama
pipeworx-io

mcp-osv-dev

by pipeworx-io
OverviewSchemaRelated ServersScoreDiscussions
TypeScript
Remote

mcp-osv-dev

OSV.dev MCP — Google's open-source vulnerability database.

Part of Pipeworx — an MCP gateway connecting AI agents to 673+ live data sources.

Tools

Tool

Description

vulnerabilities

Query vulnerabilities by package (+ optional version) or git commit.

query_batch

Batch query (≤1000 queries). Pass an array of {package: {name, ecosystem}, version?} or {commit}.

get

Full vulnerability record by id (CVE-…, GHSA-…, OSV-…).

Related MCP server: vuln-nist-mcp-server

Quick Start

Add to your MCP client (Claude Desktop, Cursor, Windsurf, etc.):

{
  "mcpServers": {
    "osv-dev": {
      "url": "https://gateway.pipeworx.io/osv-dev/mcp"
    }
  }
}

Or connect to the full Pipeworx gateway for access to all 673+ data sources:

{
  "mcpServers": {
    "pipeworx": {
      "url": "https://gateway.pipeworx.io/mcp"
    }
  }
}

Using with ask_pipeworx

Instead of calling tools directly, you can ask questions in plain English:

ask_pipeworx({ question: "your question about Osv Dev data" })

The gateway picks the right tool and fills the arguments automatically.

More

License

MIT

This server cannot be installed

A
license - permissive license
Not graded
quality - not tested
F
maintenance

How are these scores calculated?

Maintenance

–Maintainers
–Response time
–Release cycle
–Releases (12mo)
Commit activity

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Servers

  • NVD MCP Server

    Alig1493
    A
    license
    A
    quality
    C
    maintenance
    MCP server for the NIST National Vulnerability Database — lets AI assistants search CVEs by keyword, severity, CPE, CWE, KEV status, and date range via natural language.
    2
    GPL 3.0

  • vuln-nist-mcp-server

    HaroldFinchIFT
    A
    license
    Not graded
    quality
    D
    maintenance
    A Model Context Protocol (MCP) server for querying the NIST National Vulnerability Database (NVD) API, enabling search and retrieval of CVE details, temporal context, and KEV catalog entries.
    15
    MIT

  • cve-mcp

    badchars
    A
    license
    A
    quality
    A
    maintenance
    Unifies NVD, EPSS, CISA KEV, GitHub Advisory, and OSV into a single MCP server, enabling AI agents to query vulnerability intelligence conversationally with 23 tools for incident response, prioritization, dependency audits, and threat monitoring.
    41
    673
    19
    MIT

  • kr.ai.vdb/vdb

    0pstech
    A
    license
    Not graded
    quality
    C
    maintenance
    MCP server for checking packages against an AI-aware vulnerability database, including CVEs, slopsquatting, CISA KEV, and MCP-server trust profiles.
    Elastic 2.0

View all related MCP servers

Related MCP Connectors

  • osv-advisory-mcp-server

    Query OSV.dev for package vulnerabilities and batch-audit dependency lists via MCP.

  • security-intel-mcp

    CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.

  • Security Intel MCP

    CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.

View all MCP Connectors

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/pipeworx-io/mcp-osv-dev'

If you have feedback or need assistance with the MCP directory API, please join our Discord server