Skip to main content
Glama
pipeworx-io

mcp-osv-dev

by pipeworx-io
OverviewSchemaSourceRelated ServersDiscussionsAdmin
TypeScript
Remote

mcp-osv-dev

OSV.dev MCP — Google's open-source vulnerability database.

Part of Pipeworx — an MCP gateway connecting AI agents to 673+ live data sources.

Tools

Tool

Description

vulnerabilities

Query vulnerabilities by package (+ optional version) or git commit.

query_batch

Batch query (≤1000 queries). Pass an array of {package: {name, ecosystem}, version?} or {commit}.

get

Full vulnerability record by id (CVE-…, GHSA-…, OSV-…).

Related MCP server: cve-mcp

Quick Start

Add to your MCP client (Claude Desktop, Cursor, Windsurf, etc.):

{
  "mcpServers": {
    "osv-dev": {
      "url": "https://gateway.pipeworx.io/osv-dev/mcp"
    }
  }
}

Or connect to the full Pipeworx gateway for access to all 673+ data sources:

{
  "mcpServers": {
    "pipeworx": {
      "url": "https://gateway.pipeworx.io/mcp"
    }
  }
}

Using with ask_pipeworx

Instead of calling tools directly, you can ask questions in plain English:

ask_pipeworx({ question: "your question about Osv Dev data" })

The gateway picks the right tool and fills the arguments automatically.

More

License

MIT

This server cannot be deployed

RayrunBuild, deploy, and operate MCP servers without becoming an infrastructure team.ray.runAd

Maintenance

ActivityInactive
ResponsivenessNo issues

Resources

Related MCP Connectors

Related MCP Servers

  • NVD MCP Server

    Alig1493
    A
    license
    A
    quality
    C
    maintenance
    MCP server for the NIST National Vulnerability Database — lets AI assistants search CVEs by keyword, severity, CPE, CWE, KEV status, and date range via natural language.
    2
    GPL 3.0

  • cve-mcp

    badchars
    A
    license
    A
    quality
    B
    maintenance
    Unifies NVD, EPSS, CISA KEV, GitHub Advisory, and OSV into a single MCP server, enabling AI agents to query vulnerability intelligence conversationally with 23 tools for incident response, prioritization, dependency audits, and threat monitoring.
    41
    351
    24
    MIT

  • GhostFree

    shane-js
    A
    license
    A
    quality
    B
    maintenance
    A local MCP server that scans repository dependencies for known vulnerabilities (CVEs) using OSV.dev, enriches findings with NVD and CISA KEV data, and supports triage, remediation, and accepted risk management directly from an AI coding assistant.
    6
    35
    1
    MIT

  • purify-feeds-mcp

    eason4kim-rocket
    A
    license
    Not graded
    quality
    B
    maintenance
    MCP server for querying live CISA KEV, EPSS, and enriched vulnerability feeds with full provenance. Enables natural-language access to auditable security-intelligence data from Claude Desktop and other MCP clients.
    MIT