OSV-MCP

OSV-MCP

2
databases

The MCP Server for OSV is a lightweight server designed to interact with the OSV Database API. It provides tools to query CVE information and supported ecosystems efficiently, leveraging Python 3.11 or higher.

MCP Server For OSV

A lightweight MCP server for OSV Database API.

Tools Provided

  • query_package_cve: List all the CVE IDs for a specific package.
  • query_for_cve_affected: Query the OSV for CVE and return all affected versions.
  • query_for_cve_fix_versions: Query the OSV for CVE and return fix versions.
  • get_ecosystems: List supported ecosystems by the MCP server.

Prerequisites

  • Python 3.11 or higher
  • Install uv

Installation

  1. Via Smithery
  2. Locally: Clone the repo and configure MCP Host.

Tested on Cursor and Claude.