io.github.cyanheads/osv-advisory-mcp-server

Query OSV.dev for package vulnerabilities and batch-audit dependency lists via MCP.

Ready: ReadySecurity: SecureAuth: No authSetup: Openmcp_servermcp

Use it

Endpoints
Packages
  • npm: @cyanheads/osv-advisory-mcp-server 0.1.5npx -y @cyanheads/osv-advisory-mcp-server
    Env: OSV_REQUEST_TIMEOUT_MS, MCP_LOG_LEVEL
  • npm: @cyanheads/osv-advisory-mcp-server 0.1.5npx -y @cyanheads/osv-advisory-mcp-server
    Env: OSV_REQUEST_TIMEOUT_MS, MCP_HTTP_HOST, MCP_HTTP_PORT, MCP_HTTP_ENDPOINT_PATH, MCP_AUTH_MODE, MCP_LOG_LEVEL
Instructions
  • Use the MCP protocol over streamable-http.
  • No authentication metadata was declared; the endpoint may still require credentials.

Version history

VersionStatusPublished
0.1.5LatestactiveJun 13, 2026
0.1.4activeJun 4, 2026
0.1.3activeJun 2, 2026
0.1.2activeJun 1, 2026
0.1.1activeMay 31, 2026
0.1.0activeMay 30, 2026