Osv Advisory MCP server
online · 100% uptimeQuery OSV.dev for package vulnerabilities and batch-audit dependency lists via MCP.
not scanned yet
2 stars732 downloads/wk
Reviews
Write oneNobody has reviewed Osv Advisory yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Osv Advisory tools
Tool list not cached yet. `describe` through the gateway fetches it live.
How Osv Advisory compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 93/100
- higher than 96% of 48,255 servers
- Uptime
- 100%
- of our recent checks; the typical remote server answers 100%
- Response time
- 487 ms
- faster than 30% of 30,031 servers
- GitHub stars
- 2
- more than 75% of 28,688 servers
- Downloads a week
- 732
- more than 92% of 12,191 servers with a package
Release history: 8 versions in the registry since 2026-08-25, latest 2026-11-01, typically one every 5 days.
Install Osv Advisory in Claude Code, Cursor or VS Code
claude mcp add --transport http osv-advisory-mcp-server https://osv-advisory.caseyjhand.com/mcp
What the publisher says
From the Osv Advisory repository's README, as published. We do not edit it. Read it on GitHub
@cyanheads/osv-advisory-mcp-server Query OSV.dev for package vulnerabilities, batch-audit dependency lists, and fetch full advisory records via MCP. STDIO or Streamable HTTP. 4 Tools
Public Hosted Server: https://osv-advisory.caseyjhand.com/mcp
Overview
Vulnerability data from OSV.dev, the open-source vulnerability database. Query a single package version, batch-audit a full dependency list or SBOM, and fetch complete advisory records with CVSS severity, CVE aliases, and affected version ranges. Runs as a stdio process, a local Streamable HTTP server, or the public hosted endpoint above.
Tools
Capability reference
osvquerypackage tool
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Osv Advisory: common questions
- Is Osv Advisory MCP server safe?
- Yes, by our scan: it is graded A (93/100). Read the Osv Advisory safety report
- How do I install Osv Advisory?
- It runs remotely at osv-advisory.caseyjhand.com. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
- Does Osv Advisory need an API key?
- No secret keys are declared. It reads 14 settings from the environment.
- Is Osv Advisory maintained?
- The last commit was 21 days ago (2026-10-14). The latest release is v0.4.1.
- Is Osv Advisory up?
- 100% of our last 28 checks got an answer. We check remote servers about four times a day.
- How does Osv Advisory compare with other MCP servers?
- safety score 93/100 (higher than 96% of 48,255 servers); uptime 100% (of our recent checks; the typical remote server answers 100%); response time 487 ms (faster than 30% of 30,031 servers). Full comparison.