OSV MCP Server

Example Use Cases

• 1

  Query vulnerabilities affecting a specific package version or commit.

• 2

  Perform batch queries for vulnerabilities across multiple packages or commits.

• 3

  Detailed information about a specific vulnerability by its OSV ID.

Description

This MCP server implements an SSE-based protocol allowing LLM-powered applications to query the Open Source Vulnerabilities (OSV) database. It supports querying vulnerabilities for specific package versions or commits, batch queries for multiple packages, and retrieving detailed vulnerability information by ID. The server can be run standalone or via ToolHive for secure containerized deployment, making it easy to integrate vulnerability data into various applications.