AgentDiet Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev) MCP server
online · 100% uptimeQueries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and r.
0 stars
Reviews
Write oneNobody has reviewed AgentDiet Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev) yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
AgentDiet Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev) tools (2)
write = sends, deletes, buys or postsget_agent_wallet_statusFreeInspect an agent's account ledger: remaining free trial calls (out of 5), prepaid USD balance, cumulative spend, total API calls, and total LLM tokens saved. WHEN TO USE: Call before a batch of paid tool executions or after completing a Stripe or USDC top-up to confirm your balance. WHEN NOT TO USE: Do not use to process web content, execute marketplace tools, or submit payments; use the other tools on this server for execution. PARAMETER INTERACTIONS: Omit agent_id to inspect the default trial account derived from your client IP, or pass your explicit agent_id or agd_pass_ session key to check a specific funded wallet. Free and read-only: never charges a fee or consumes a free trial call. Example: get_agent_wallet_status(agent_id='example')
scan_package_cve_advisoriesFreeQueries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions. WHEN TO USE: Call `scan_package_cve_advisories` when your task requires deterministic `cve-intel` analysis for `package`; use `get_agent_wallet_status` to check your remaining free trial quota or prepaid balance. WHEN NOT TO USE: Do not use for unrelated domains or binary media. PARAMETER INTERACTIONS: Pass the target `package` as a non-empty string; omit `agent_id` and `tx_hash` during your 5 free trial calls, or supply `agent_id` (`agd_pass_...`) / `tx_hash` for paid execution. Read-only and idempotent; results are cached for 1 hour (<5ms cache hit). $0.01 per call. Pricing: the first 5 calls per agent_id are free and failed calls are never charged. After 5 calls, the tool returns a payment-required quote (not a fatal error) with a $2 Stripe top-up link and Base/Solana USDC addresses; complete payment, then retry with your agd_pass_ key in agent_id or pass tx_hash. Example: scan_package_cve_advisories(package='example')
Public scan report
scanner v0.1.10 · 2026-10-26 · same rubric, same numbers if you re-run it
- –Code scanremote-only server, no package to scann/a
- Live reliabilityremote reachable in 596ms20/20
- Tool poisoning2 tool descriptions checked15/15
- Auth qualityopen endpoint, read-only tools10/15
- Maintenancelast push 9 days ago15/15
- Maintainer identityendpoint served from the registry-verified namespace domain8/10
How AgentDiet Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev) compares
Against every graded Security MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 91/100
- higher than 90% of 918 Security servers
- Tools
- 2
- the typical Security server has 6
- Tools that change things
- 0%
- typical: 0%. Fewer write tools means less an agent can break
- Uptime
- 100%
- of our recent checks; the typical remote Security server answers 100%
- Response time
- 95 ms
- faster than 83% of 550 Security servers
What its tools let an agent do: 2 read
Install AgentDiet Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev) in Claude Code, Cursor or VS Code
claude mcp add --transport http cve-intel https://cve-intel.agentdiet.dev/mcp
What the publisher says
From the AgentDiet Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev) repository's README, as published. We do not edit it. Read it on GitHub
Assay — A2A & MCP Provider Assurance Observatory
Live Observatory: https://assay-207908449630.us-central1.run.app
Assay continuously probes remote MCP, A2A, and x402 endpoints to verify liveness, pin canonical SHA-256 tools/list schema hashes (detecting silent MCP Rug Pulls), and scan for prompt-injection tool poisoning before your agent pays or executes a tool.
MCP Endpoint
- Streamable HTTP MCP: https://assay-207908449630.us-central1.run.app/mcp
- Pre-Flight REST API: POST https://assay-207908449630.us-central1.run.app/v1/preflight
- Live Leaderboard: GET https://assay-207908449630.us-central1.run.app/v1/leaderboard
Nothing above is checked by us. What we check is on the safety report.
AgentDiet Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev): common questions
- Is AgentDiet Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev) MCP server safe?
- Yes, by our scan: it is graded A (91/100). Read the AgentDiet Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev) safety report
- How do I install AgentDiet Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)?
- It runs remotely at cve-intel.agentdiet.dev. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
- Does AgentDiet Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev) need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is AgentDiet Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev) maintained?
- The last commit was 16 days ago (2026-10-17). The latest release is v7.0.17.
- Is AgentDiet Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev) up?
- 100% of our last 25 checks got an answer. We check remote servers about four times a day.
- What can I use instead of AgentDiet Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)?
- Servers from other publishers that do the same job: npm Registry MCP Server, Dependency Auditor MCP server and Dependency Auditor MCP server.
- How does AgentDiet Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev) compare with other Security MCP servers?
- safety score 91/100 (higher than 90% of 918 Security servers); tools 2 (the typical Security server has 6); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to AgentDiet Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)
Same job from other publishers: the closest match first, then the best rated.
- npm Registry MCP Servernpm registry MCP server — package intelligence, security audits, dependency analysisnot reviewedGrowingB
- not reviewedGrowingA
- not reviewedGrowingA
- pkgxrayPre-install security scans for npm packages, MCP servers, and AI agents with cited verdict evidence.not reviewedGrowingB
ConnectSecure MCPVulnerability management across all ConnectSecure clients: exposure ranking, CVE impact, blind spotsnot reviewedGrowingB