{"name":"io.github.cyanheads/osv-advisory-mcp-server","slug":"cyanheads-osv-advisory-mcp-server","title":null,"description":"Query OSV.dev for package vulnerabilities and batch-audit dependency lists via MCP.","url":"https://mcp.market/server/cyanheads-osv-advisory-mcp-server","rating":null,"grade":"A","score":93,"certified":false,"status":"active","category":"other","tags":[],"presence":{"score":39,"stars":2,"forks":0,"downloads_week":732,"last_push_at":"2026-10-14T14:52:07.000Z","license":"Apache-2.0"},"uptime":{"percent":100,"checks":28,"ok":28,"last_checked_at":"2026-11-04T05:50:31.179Z","last_ok_at":"2026-11-04T05:50:31.179Z","latency_ms":487},"claimed":false,"transport":"mixed","callable_via_gateway":true,"default_price_micros":0,"repository":"https://github.com/cyanheads/osv-advisory-mcp-server","website":null,"version":"0.4.1","remotes":[{"type":"streamable-http","url":"https://osv-advisory.caseyjhand.com/mcp"}],"packages":[{"registryType":"npm","registryBaseUrl":"https://registry.npmjs.org","identifier":"@cyanheads/osv-advisory-mcp-server","version":"0.4.1","runtimeHint":"npx","transport":{"type":"stdio"},"environmentVariables":[{"description":"HTTP request timeout in milliseconds for OSV.dev API calls.","format":"string","default":"10000","name":"OSV_REQUEST_TIMEOUT_MS"},{"description":"Maximum number of concurrent OSV.dev requests issued by osv_query_batch.","format":"string","default":"10","name":"OSV_BATCH_CONCURRENCY"},{"description":"Maximum number of OSV.dev result pages followed per package or commit before marking a result truncated.","format":"string","default":"10","name":"OSV_QUERY_MAX_PAGES"},{"description":"Sets the minimum log level for output (e.g., 'debug', 'info', 'warn').","format":"string","default":"info","name":"MCP_LOG_LEVEL"}]},{"registryType":"npm","registryBaseUrl":"https://registry.npmjs.org","identifier":"@cyanheads/osv-advisory-mcp-server","version":"0.4.1","runtimeHint":"npx","transport":{"type":"streamable-http","url":"http://localhost:3010/mcp"},"environmentVariables":[{"description":"Selects the HTTP transport.","format":"string","value":"http","name":"MCP_TRANSPORT_TYPE"},{"description":"HTTP request timeout in milliseconds for OSV.dev API calls.","format":"string","default":"10000","name":"OSV_REQUEST_TIMEOUT_MS"},{"description":"Maximum number of concurrent OSV.dev requests issued by osv_query_batch.","format":"string","default":"10","name":"OSV_BATCH_CONCURRENCY"},{"description":"Maximum number of OSV.dev result pages followed per package or commit before marking a result truncated.","format":"string","default":"10","name":"OSV_QUERY_MAX_PAGES"},{"description":"The hostname for the HTTP server.","format":"string","default":"127.0.0.1","name":"MCP_HTTP_HOST"},{"description":"The port to run the HTTP server on.","format":"string","default":"3010","name":"MCP_HTTP_PORT"},{"description":"The endpoint path for the MCP server.","format":"string","default":"/mcp","name":"MCP_HTTP_ENDPOINT_PATH"},{"description":"Authentication mode to use: 'none', 'jwt', or 'oauth'.","format":"string","default":"none","name":"MCP_AUTH_MODE"},{"description":"HTTP session mode. This server deploys stateless because its tools do not use multi-round input.","format":"string","default":"stateless","name":"MCP_SESSION_MODE"},{"description":"Sets the minimum log level for output (e.g., 'debug', 'info', 'warn').","format":"string","default":"info","name":"MCP_LOG_LEVEL"}]}],"tools":[],"scan":null,"grade_history":[],"reviews":[]}