OSV Advisories MCP server
Query OSV.dev for known vulnerabilities by package and version, and scan lockfiles in batch.
not scanned yet
1 stars
Reviews
Write oneNobody has reviewed OSV Advisories yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
OSV Advisories tools
No tool declarations could be read from the package source. They show once the server is installed.
How OSV Advisories compares
Against every graded Security MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 88/100
- higher than 85% of 915 Security servers
- GitHub stars
- 1
- more than 60% of 587 Security servers
Release history: 4 versions in the registry since 2026-10-09, latest 2026-10-28, typically one every 5 days.
Install OSV Advisories in Claude Code, Cursor or VS Code
claude mcp add mcp-osv-advisories -- docker run -i --rm ghcr.io/basitalisandhu/mcp-osv-advisories:0.3.0
What the publisher says
From the OSV Advisories repository's README, as published. We do not edit it. Read it on GitHub
dev-mcp-servers
Ten small MCP servers for everyday development and security checks. Each one is a separate npm package you add to Claude Code, Claude Desktop, Cursor or any other MCP client with one line, and each does one job well: look up vulnerabilities, grade security headers, decode a JWT, test a regex, explain a cron expression, validate JSON against a schema, lint an OpenAPI document or a Dockerfile, read statistics out of a git repository, or build an llms.txt.
All servers are TypeScript on the official @modelcontextprotocol/sdk, speak stdio only, validate every input with zod, bound their inputs and run time, send no telemetry, and ship with node:test suites that cover every tool.
Servers
Every package README lists its tools with inputs and outputs, the exact claude mcp add command, a .mcp.json snippet, and what the server touches on disk and on the network.
Quick start
With Claude Code:
claude mcp add jwt-tools -- npx -y @basitalisandhu/mcp-jwt-tools@0.2.0
claude mcp listAdd -s user to install for every project rather than the current one. For clients that read .mcp.json (Claude Code, Claude Desktop, Cursor), add an entry per server:
{
"mcpServers": {
"jwt-tools": { "command": "npx", "args": ["-y", "@basitalisandhu/mcp-jwt-tools@0.2.0"] },
"osv-advisories": { "command": "npx", "args": ["-y", "@basitalisandhu/mcp-osv-advisories@0.2.0"] }
}
}Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
OSV Advisories: common questions
- Is OSV Advisories MCP server safe?
- Yes, by our scan: it is graded A (88/100). Read the OSV Advisories safety report
- How do I install OSV Advisories?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does OSV Advisories need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is OSV Advisories maintained?
- The last commit was 26 days ago (2026-10-09). The latest release is v0.3.0.
- What can I use instead of OSV Advisories?
- Servers from other publishers that do the same job: pkgxray MCP server, Inkog MCP server and Scan MCP server.
- How does OSV Advisories compare with other Security MCP servers?
- safety score 88/100 (higher than 85% of 915 Security servers); github stars 1 (more than 60% of 587 Security servers). Full comparison.
Alternatives to OSV Advisories
Same job from other publishers: the closest match first, then the best rated.
- pkgxrayPre-install security scans for npm packages, MCP servers, and AI agents with cited verdict evidence.not reviewedGrowingB
- InkogSecurity co-pilot for AI agents. Scan for vulnerabilities, audit MCP servers, verify governance.not reviewedGrowingB
- ScanMCP server for scanner discovery and batch capture via SANEnot reviewedGrowingA
- PyMemoryEditorRead, write and scan process memory, Cheat Engine style, on Windows, Linux and macOS.not reviewedEstablishedA
- Autopilot JobhuntAgentic job hunt: scan careers pages, score against your resume, draft applications. Never applies.not reviewedGrowingA