Osv MCP Server

An MCP (Model Context Protocol) server that provides access to the [OSV (Open Source Vulnerabilities) database](https://osv.dev/).

Local serverstdioGo

What is the Osv MCP Server?

Osv MCP connects Osv MCP to AI assistants that speak the Model Context Protocol. An MCP (Model Context Protocol) server that provides access to the OSV (Open Source Vulnerabilities) database.

What Osv MCP does

An MCP (Model Context Protocol) server that provides access to the OSV (Open Source Vulnerabilities) database.

This project implements an SSE-based MCP server that allows LLM-powered applications to query the OSV database for vulnerability information. The server provides tools for:

Requirements

  • Go 1.21 or later - Task (optional, for running tasks) - ko (optional, for building container images)

Practical notes

  • Maintained by StacklokLabs, written in Go.

More MCP options

Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.

Maintainer setup documentation.

Recorded tools

Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.

ToolWhat it does
query_vulnerabilityQuery for vulnerabilities affecting a specific package version or commit.
query_vulnerabilities_batchQuery for vulnerabilities affecting multiple packages or commits at once.
get_vulnerability

Configuration

  • Go 1.21 or later - Task (optional, for running tasks) - ko (optional, for building container images)

Example prompts to try

  • “Use Osv MCP to Prerequisites.”
  • “Use Osv MCP to query vulnerability.”
  • “Use Osv MCP to query vulnerabilities batch.”

Frequently asked questions

An MCP (Model Context Protocol) server that provides access to the [OSV (Open Source Vulnerabilities) database](https://osv.dev/). Confirm the tools offered by your installed version in the connected client. Tool availability and permissions depend on the server and account configuration.