MCP server

Osv

io.github.mrfentmen/osv-mcp

Checked 26 Oct 2026, 08:31 UTC · Still published on its registry; checked against OSV.dev; never run by us

Use this MCP server to OSV open source vulnerability data and package security checks. Tools...

Source

At a glance

Type

MCP server

Publisher

Not verified

Status

Runs on your computer

Sets up in

Claude Code, Claude Desktop, Codex, Gemini CLI, Cursor, VS Code

Last checked

26 Oct 2026, 08:31 UTC

Connect it to your agent

Add to CursorAdd to VS CodeVS Code Insiders

Opens the app, which shows the server and asks you to confirm. It then runs the package on your computer with your permissions. For other apps, copy the setup below.

Claude Code

claude mcp add osv-mcp -- npx -y osv-mcp@1.0.0

Claude Desktop

{"mcpServers":{"osv-mcp":{"command":"npx","args":["-y","osv-mcp@1.0.0"]}}}

Codex (config.toml)

[mcp_servers.osv-mcp]
command = "npx"
args = ["-y","osv-mcp@1.0.0"]

Gemini CLI

{"mcpServers":{"osv-mcp":{"command":"npx","args":["-y","osv-mcp@1.0.0"]}}}

Cursor

{"mcpServers":{"osv-mcp":{"command":"npx","args":["-y","osv-mcp@1.0.0"]}}}

VS Code

{"servers":{"osv-mcp":{"type":"stdio","command":"npx","args":["-y","osv-mcp@1.0.0"]}}}

Runs on your computer with your permissions: check the package and its source before installing.

Browse

• GitHub tools
• GitHub and code hosting

Related MCP servers

• Agent Kiosk — 23-in-1 B2A Intelligence, Action & x402 API
  23-in-1 MCP server: EVM tx simulator, funding rate arb, macro radar, swap calldata & security.
• Dependency Trust
  Trust-check any dependency for agents: OpenSSF Scorecard, licenses, CVEs, deps. 7 ecosystems.
• DataNexus MCP
  Public data intelligence for AI agents — CVE, compliance, patents, contracts, domains.
• Crypto, web, finance and app data tools
  179 tools: crypto, EVM, SEC, FDA, NHTSA VIN, NWS weather, Eurostat, FRED, cloud & LLM prices, DNS.
• WebsterBerry Synaptic
  Pay-per-call US public data for agents: OFAC, SEC, FMCSA, NPI, VIN recalls, SAM.gov. x402 USDC.
• Dependency Vulnerability Tracker — package security advisories ($0.01/query)
  Dependency vulns & malicious-package advisories. Register in-session — free testnet funds.
• overflo.ws
  Look up CVEs, CISA KEV, EPSS and open-source package vulnerabilities, including malicious packages.
• Osv
  OSV.dev (Open Source Vulnerabilities) MCP.

Badge for your README

[![AptLynx](https://aptlynx.net/badge/io.github.mrfentmen/osv-mcp.svg)](https://aptlynx.net/servers/io.github.mrfentmen/osv-mcp)

Listing text is written by the maker; AptLynx lists tools and does not vouch for them. Find another tool · Browse by topic · For agents