Back to search
100
MCP live MCP 2026-07-28 streamable-http

io.github.cyanheads/osv-advisory-mcp-server

io.github.cyanheads/osv-advisory-mcp-server

Query OSV.dev for package vulnerabilities and batch-audit dependency lists via MCP.

Uptime
100.0%
2 direct probes · 30d
Response
808ms
last probe
Tools
4
callable
Resources
0
readable
Prompts
0
available
Primary URL
https://osv-advisory.caseyjhand.com/mcp

Tools · 4

osv_list_ecosystems

Return the list of supported ecosystem identifier strings for use with osv_query_package and osv_query_batch. Ecosystem strings are case-sensitive exact matches — passing "pypi" instead of "PyPI" retu…

osv_query_package

Query known vulnerabilities for a single package version across any supported ecosystem. Returns all matching OSV advisories with severity (CVSS vectors), CVE aliases, affected version ranges, and fir…

osv_get_vulnerability

Fetch the full advisory record for an OSV vulnerability ID. Returns the complete record: summary, full details text, CVE aliases, all affected packages and version ranges, fix versions, CVSS severity …

osv_query_batch

Query vulnerabilities for multiple packages in one call — the primary tool for dependency audits, SBOM scanning, and lockfile triage. Pass an array of {name, ecosystem, version} tuples (up to 1000). E…

How to use

Add to your Claude Desktop / Cursor / Cline MCP config:

{
  "mcpServers": {
    "io.github.cyanheads/osv-advisory-mcp-server": {
      "url": "https://osv-advisory.caseyjhand.com/mcp",
      "transport": "streamable-http"
    }
  }
}