osv-advisory-mcp-server

io.github.cyanheads/osv-advisory-mcp-server · v0.2.0

Query OSV.dev for package vulnerabilities and batch-audit dependency lists via MCP.

Description supplied by the publisher in the MCP Registry. We have not tested this server.

Install

npx -y @cyanheads/osv-advisory-mcp-server

npx -y @cyanheads/osv-advisory-mcp-server

Assembled from the package metadata in the official MCP Registry (including any subcommand or flag the publisher lists). Some publishers do not list the subcommand that starts MCP mode, so confirm the command in the README, along with any required configuration and credentials, before connecting it to real data.

Offers a hosted remote endpoint: https://osv-advisory.caseyjhand.com/mcp (streamable-http). No local install needed.

Signals

GitHub stars	2
npm weekly downloads	366
Last push	7d ago
Licence	Apache-2.0
Open issues	7
SECURITY.md	No
Language	TypeScript
Latest version published	2026-10-14

Signals captured from GitHub, npm and the official MCP Registry on October 15, 2026. See the scoring method.