MCP.Market

AgentDiet Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev) MCP server

online · 100% uptime
by agentdiet.dev·dev.agentdiet/cve-intel·v7.0.17

Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and r.

A91/100grade A
What users say
No reviews yet
Be the first
Safety scan
A91/100

full report

Adoption
Growing

0 stars

Reviews

Write one

Nobody has reviewed AgentDiet Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev) yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

AgentDiet Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev) tools (2)

write = sends, deletes, buys or posts
  • get_agent_wallet_statusFree

    Inspect an agent's account ledger: remaining free trial calls (out of 5), prepaid USD balance, cumulative spend, total API calls, and total LLM tokens saved. WHEN TO USE: Call before a batch of paid tool executions or after completing a Stripe or USDC top-up to confirm your balance. WHEN NOT TO USE: Do not use to process web content, execute marketplace tools, or submit payments; use the other tools on this server for execution. PARAMETER INTERACTIONS: Omit agent_id to inspect the default trial account derived from your client IP, or pass your explicit agent_id or agd_pass_ session key to check a specific funded wallet. Free and read-only: never charges a fee or consumes a free trial call. Example: get_agent_wallet_status(agent_id='example')

  • scan_package_cve_advisoriesFree

    Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions. WHEN TO USE: Call `scan_package_cve_advisories` when your task requires deterministic `cve-intel` analysis for `package`; use `get_agent_wallet_status` to check your remaining free trial quota or prepaid balance. WHEN NOT TO USE: Do not use for unrelated domains or binary media. PARAMETER INTERACTIONS: Pass the target `package` as a non-empty string; omit `agent_id` and `tx_hash` during your 5 free trial calls, or supply `agent_id` (`agd_pass_...`) / `tx_hash` for paid execution. Read-only and idempotent; results are cached for 1 hour (<5ms cache hit). $0.01 per call. Pricing: the first 5 calls per agent_id are free and failed calls are never charged. After 5 calls, the tool returns a payment-required quote (not a fatal error) with a $2 Stripe top-up link and Base/Solana USDC addresses; complete payment, then retry with your agd_pass_ key in agent_id or pass tx_hash. Example: scan_package_cve_advisories(package='example')

Public scan report

scanner v0.1.10 · 2026-10-26 · same rubric, same numbers if you re-run it

no findings
  • –Code scanremote-only server, no package to scann/a
  • Live reliabilityremote reachable in 596ms20/20
  • Tool poisoning2 tool descriptions checked15/15
  • Auth qualityopen endpoint, read-only tools10/15
  • Maintenancelast push 9 days ago15/15
  • Maintainer identityendpoint served from the registry-verified namespace domain8/10
Overall 91/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How AgentDiet Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev) compares

Against every graded Security MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
91/100
higher than 90% of 918 Security servers
Tools
2
the typical Security server has 6
Tools that change things
0%
typical: 0%. Fewer write tools means less an agent can break
Uptime
100%
of our recent checks; the typical remote Security server answers 100%
Response time
95 ms
faster than 83% of 550 Security servers

What its tools let an agent do: 2 read

Install AgentDiet Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev) in Claude Code, Cursor or VS Code

claude mcp add --transport http cve-intel https://cve-intel.agentdiet.dev/mcp
Add to Cursor

What the publisher says

From the AgentDiet Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev) repository's README, as published. We do not edit it. Read it on GitHub

Assay — A2A & MCP Provider Assurance Observatory

Live Observatory: https://assay-207908449630.us-central1.run.app

Assay continuously probes remote MCP, A2A, and x402 endpoints to verify liveness, pin canonical SHA-256 tools/list schema hashes (detecting silent MCP Rug Pulls), and scan for prompt-injection tool poisoning before your agent pays or executes a tool.

MCP Endpoint

  • Streamable HTTP MCP: https://assay-207908449630.us-central1.run.app/mcp
  • Pre-Flight REST API: POST https://assay-207908449630.us-central1.run.app/v1/preflight
  • Live Leaderboard: GET https://assay-207908449630.us-central1.run.app/v1/leaderboard

Nothing above is checked by us. What we check is on the safety report.

AgentDiet Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev): common questions

Is AgentDiet Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev) MCP server safe?
Yes, by our scan: it is graded A (91/100). Read the AgentDiet Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev) safety report
How do I install AgentDiet Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)?
It runs remotely at cve-intel.agentdiet.dev. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
Does AgentDiet Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev) need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is AgentDiet Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev) maintained?
The last commit was 16 days ago (2026-10-17). The latest release is v7.0.17.
Is AgentDiet Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev) up?
100% of our last 25 checks got an answer. We check remote servers about four times a day.
What can I use instead of AgentDiet Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)?
Servers from other publishers that do the same job: npm Registry MCP Server, Dependency Auditor MCP server and Dependency Auditor MCP server.
How does AgentDiet Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev) compare with other Security MCP servers?
safety score 91/100 (higher than 90% of 918 Security servers); tools 2 (the typical Security server has 6); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to AgentDiet Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)

Same job from other publishers: the closest match first, then the best rated.

More from agentdiet.dev →