MCP.Market

OSV Advisories MCP server

by basitalisandhu·io.github.basitalisandhu/mcp-osv-advisories·v0.3.0·1 stars

Query OSV.dev for known vulnerabilities by package and version, and scan lockfiles in batch.

A88/100grade A
What users say
No reviews yet
Be the first
Safety scan
A88/100

not scanned yet

Adoption
New

1 stars

Reviews

Write one

Nobody has reviewed OSV Advisories yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

OSV Advisories tools

No tool declarations could be read from the package source. They show once the server is installed.

Not scanned yet. New listings are scanned within a day or two of arriving.

How OSV Advisories compares

Against every graded Security MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
88/100
higher than 85% of 915 Security servers
GitHub stars
1
more than 60% of 587 Security servers

Release history: 4 versions in the registry since 2026-10-09, latest 2026-10-28, typically one every 5 days.

Install OSV Advisories in Claude Code, Cursor or VS Code

claude mcp add mcp-osv-advisories -- docker run -i --rm ghcr.io/basitalisandhu/mcp-osv-advisories:0.3.0
Add to Cursor

What the publisher says

From the OSV Advisories repository's README, as published. We do not edit it. Read it on GitHub

dev-mcp-servers

Ten small MCP servers for everyday development and security checks. Each one is a separate npm package you add to Claude Code, Claude Desktop, Cursor or any other MCP client with one line, and each does one job well: look up vulnerabilities, grade security headers, decode a JWT, test a regex, explain a cron expression, validate JSON against a schema, lint an OpenAPI document or a Dockerfile, read statistics out of a git repository, or build an llms.txt.

All servers are TypeScript on the official @modelcontextprotocol/sdk, speak stdio only, validate every input with zod, bound their inputs and run time, send no telemetry, and ship with node:test suites that cover every tool.

Servers

Every package README lists its tools with inputs and outputs, the exact claude mcp add command, a .mcp.json snippet, and what the server touches on disk and on the network.

Quick start

With Claude Code:

claude mcp add jwt-tools -- npx -y @basitalisandhu/mcp-jwt-tools@0.2.0
claude mcp list

Add -s user to install for every project rather than the current one. For clients that read .mcp.json (Claude Code, Claude Desktop, Cursor), add an entry per server:

{
  "mcpServers": {
    "jwt-tools": { "command": "npx", "args": ["-y", "@basitalisandhu/mcp-jwt-tools@0.2.0"] },
    "osv-advisories": { "command": "npx", "args": ["-y", "@basitalisandhu/mcp-osv-advisories@0.2.0"] }
  }
}

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

OSV Advisories: common questions

Is OSV Advisories MCP server safe?
Yes, by our scan: it is graded A (88/100). Read the OSV Advisories safety report
How do I install OSV Advisories?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does OSV Advisories need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is OSV Advisories maintained?
The last commit was 26 days ago (2026-10-09). The latest release is v0.3.0.
What can I use instead of OSV Advisories?
Servers from other publishers that do the same job: pkgxray MCP server, Inkog MCP server and Scan MCP server.
How does OSV Advisories compare with other Security MCP servers?
safety score 88/100 (higher than 85% of 915 Security servers); github stars 1 (more than 60% of 587 Security servers). Full comparison.

Alternatives to OSV Advisories

Same job from other publishers: the closest match first, then the best rated.

  • pkgxray
    Pre-install security scans for npm packages, MCP servers, and AI agents with cited verdict evidence.
    B
  • Inkog
    Security co-pilot for AI agents. Scan for vulnerabilities, audit MCP servers, verify governance.
    B
  • Scan
    MCP server for scanner discovery and batch capture via SANE
    A
  • PyMemoryEditor
    Read, write and scan process memory, Cheat Engine style, on Windows, Linux and macOS.
    A
  • Autopilot Jobhunt
    Agentic job hunt: scan careers pages, score against your resume, draft applications. Never applies.
    A

More from basitalisandhu →