mcp-osv
7
MCP Security Analyst is an MCP server designed to perform security analysis by leveraging OSV.dev and AI models. It offers tools to identify and analyze potential code vulnerabilities and supports seamless integration with AI tools through the MCP protocol.
MCP Security Analyst
A Model Context Protocol (MCP) server offering security analysis capabilities by integrating with OSV.dev and AI models to help identify vulnerabilities in codebases.
Features
- Vulnerability checking using OSV.dev database
- Basic security analysis of code files
- Integration with AI models for security insights
- MCP protocol support for varied AI tools
- Optional static code analysis with Semgrep
Installation
Install using make deps and make install. The server uses stdin/stdout methods for communication.
Integration
Works with AI models like Claude and Cursor via the MCP protocol, enabling the analysis of dependencies, security issues, and recommendations for improvements.