Osv MCP Server

Query OSV.dev for package vulnerabilities and batch-audit dependency lists via MCP.

Remote serverstreamable-httpPython

What is the Osv MCP server?

Most file and storage access work still happens through a UI a human drives. Osv MCP server moves it into the conversation instead. Query OSV.dev for package vulnerabilities and batch-audit dependency lists via MCP.

The short version

  • Declarative tool definitions — single file per tool, framework handles registration and validation
  • Unified error handling — handlers throw, framework catches, classifies, and formats
  • Pluggable auth: none, jwt, oauth
  • Swappable storage backends: in-memory, filesystem, Supabase, Cloudflare KV/R2/D1
  • Structured logging with optional OpenTelemetry tracing
  • STDIO and Streamable HTTP transports

The tools it exposes

The server publishes 6 tools. What each one is for:

  • osv_query_package — Query known vulnerabilities for a single package version by name, ecosystem, and version
  • osv_query_batch — Batch vulnerability query for an array of package tuples — one call for a full dependency list or SBOM audit
  • osv_get_vulnerability — Fetch the full advisory record for a single OSV vulnerability ID
  • osv_list_ecosystems — Return the list of supported ecosystem identifier strings
  • Prerequisites — The Prerequisites tool exposed by this server
  • Installation — The Installation tool exposed by this server

What it needs from you

Configuration is passed through the environment: MCP_TRANSPORT_TYPE, MCP_LOG_LEVEL, MCP_HTTP_ENDPOINT_PATH, MCP_PUBLIC_URL. Treat anything key-shaped as a real credential — scope it to the minimum the server needs, and rotate it if it ever lands in a shared config.

  • Bun v1.3.0 or higher (or Node.js v24+). - No API key required — OSV.dev is fully public.

Getting it running

Because this one is hosted, setup is mostly authentication — you point your client at the endpoint and approve access. Nothing runs on your machine, so there is no runtime to keep patched.

How it compares

This sits in the file and storage access group, where several servers overlap in what they claim to do but differ sharply once you actually set them up. Osv's toolset — osv_query_package, osv_query_batch, osv_get_vulnerability and 3 more — is a fair guide to whether it matches your workflow. It is maintained by cyanheads; worth a glance at recent repository activity before you build anything load-bearing on it.

We check each listing at SyncDev against the project's documentation before it goes live — if something here drifts out of date, it is a bug worth reporting.

Things to watch

  • Your data travels to the provider's service, so the usual questions apply about what you send and what they retain.
  • Missing credentials fail quietly in some clients — if no tools show up, check the environment block first.
  • Keep per-call confirmation enabled while you learn its behaviour; it is the cheapest safeguard you have.

Available tools

ToolWhat it does
osv_query_packageQuery known vulnerabilities for a single package version by name, ecosystem, and version
osv_query_batchBatch vulnerability query for an array of package tuples — one call for a full dependency list or SBOM audit
osv_get_vulnerabilityFetch the full advisory record for a single OSV vulnerability ID
osv_list_ecosystemsReturn the list of supported ecosystem identifier strings
PrerequisitesThe Prerequisites tool exposed by this server.
InstallationThe Installation tool exposed by this server.

How to install the Osv MCP server

{
  "mcpServers": {
    "osv-advisory-mcp-server": {
      "type": "streamable-http",
      "url": "https://osv-advisory.caseyjhand.com/mcp"
    }
  }
}

Configuration as documented by the project. Restart the client after saving.

Configuration

  • Bun v1.3.0 or higher (or Node.js v24+). - No API key required — OSV.dev is fully public.
VariableDescriptionRequired
MCP_TRANSPORT_TYPEConfiguration value read at startup.Optional
MCP_LOG_LEVELConfiguration value read at startup.Optional
MCP_HTTP_ENDPOINT_PATHFilesystem location the server is allowed to use.Optional
MCP_PUBLIC_URLEndpoint or connection string the server talks to.Yes

Example prompts to try

  • Use Osv to osv query package.
  • Use Osv to osv query batch.
  • Use Osv to osv get vulnerability.

Frequently asked questions

It connects Osv to MCP-compatible AI assistants such as Claude and Cursor, exposing 6 tools (osv_query_package, osv_query_batch, osv_get_vulnerability, and more) that the assistant can call on your behalf. Instead of copying data back and forth by hand, the assistant works with Osv directly.