# mcp-osv-dev

OSV.dev MCP — Google's open-source vulnerability database.

Part of [Pipeworx](https://pipeworx.io) — an MCP gateway connecting AI agents to 673+ live data sources.

## Tools

| Tool | Description |
|------|-------------|
| `vulnerabilities` | Query vulnerabilities by package (+ optional version) or git commit. |
| `query_batch` | Batch query (≤1000 queries). Pass an array of {package: {name, ecosystem}, version?} or {commit}. |
| `get` | Full vulnerability record by id (CVE-…, GHSA-…, OSV-…). |

## Quick Start

Add to your MCP client (Claude Desktop, Cursor, Windsurf, etc.):

```json
{
  "mcpServers": {
    "osv-dev": {
      "url": "https://gateway.pipeworx.io/osv-dev/mcp"
    }
  }
}
```

Or connect to the full Pipeworx gateway for access to all 673+ data sources:

```json
{
  "mcpServers": {
    "pipeworx": {
      "url": "https://gateway.pipeworx.io/mcp"
    }
  }
}
```

## Using with ask_pipeworx

Instead of calling tools directly, you can ask questions in plain English:

```
ask_pipeworx({ question: "your question about Osv Dev data" })
```

The gateway picks the right tool and fills the arguments automatically.

## More

- [All tools and guides](https://github.com/pipeworx-io/examples)
- [pipeworx.io](https://pipeworx.io)

## License

MIT