Skip to main content
Glama
pipeworx-io

mcp-osv-dev

by pipeworx-io
OverviewSchemaRelated ServersScoreDiscussions
TypeScript
Remote

mcp-osv-dev

OSV.dev MCP — Google's open-source vulnerability database.

Part of Pipeworx — an MCP gateway connecting AI agents to 673+ live data sources.

Tools

Tool

Description

vulnerabilities

Query vulnerabilities by package (+ optional version) or git commit.

query_batch

Batch query (≤1000 queries). Pass an array of {package: {name, ecosystem}, version?} or {commit}.

get

Full vulnerability record by id (CVE-…, GHSA-…, OSV-…).

Related MCP server: vuln-nist-mcp-server

Quick Start

Add to your MCP client (Claude Desktop, Cursor, Windsurf, etc.):

{
  "mcpServers": {
    "osv-dev": {
      "url": "https://gateway.pipeworx.io/osv-dev/mcp"
    }
  }
}

Or connect to the full Pipeworx gateway for access to all 673+ data sources:

{
  "mcpServers": {
    "pipeworx": {
      "url": "https://gateway.pipeworx.io/mcp"
    }
  }
}

Using with ask_pipeworx

Instead of calling tools directly, you can ask questions in plain English:

ask_pipeworx({ question: "your question about Osv Dev data" })

The gateway picks the right tool and fills the arguments automatically.

More

License

MIT

This server cannot be installed

A
license - permissive license
-
quality - not tested
F
maintenance

How are these scores calculated?

Maintenance

–Maintainers
–Response time
–Release cycle
–Releases (12mo)
Commit activity

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Servers

  • NVD MCP Server

    Alig1493
    A
    license
    A
    quality
    A
    maintenance
    MCP server for the NIST National Vulnerability Database — lets AI assistants search CVEs by keyword, severity, CPE, CWE, KEV status, and date range via natural language.
    Last updated
    2
    GPL 3.0

  • vuln-nist-mcp-server

    HaroldFinchIFT
    A
    license
    -
    quality
    D
    maintenance
    A Model Context Protocol (MCP) server for querying the NIST National Vulnerability Database (NVD) API, enabling search and retrieval of CVE details, temporal context, and KEV catalog entries.
    Last updated
    13
    MIT

  • cve-mcp

    badchars
    A
    license
    A
    quality
    A
    maintenance
    Unifies NVD, EPSS, CISA KEV, GitHub Advisory, and OSV into a single MCP server, enabling AI agents to query vulnerability intelligence conversationally with 23 tools for incident response, prioritization, dependency audits, and threat monitoring.
    Last updated
    41
    324
    18
    MIT

  • touful-vuln-search-mcp

    touful
    F
    license
    -
    quality
    B
    maintenance
    Unified vulnerability search MCP server for penetration testing agents, integrating 5 data sources (NVD, OSV, EPSS, CISA KEV, Exploit-DB+GitHub) and 10 MCP tools for CVE query, keyword search, batch query, EPSS scoring, KEV checking, exploit search, and comprehensive assessment with Chinese output.
    Last updated
    1

View all related MCP servers

Related MCP Connectors

  • osv-advisory-mcp-server

    Query OSV.dev for package vulnerabilities and batch-audit dependency lists via MCP.

  • Security Intel MCP

    CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.

  • security-intel-mcp

    CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.

View all MCP Connectors

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/pipeworx-io/mcp-osv-dev'

If you have feedback or need assistance with the MCP directory API, please join our Discord server