Osv Dev
Connects Claude to OSV.dev, Google's open source vulnerability database. You get three tools: query vulnerabilities by package name and version or git commit, batch query up to 1000 packages at once, and fetch full CVE, GHSA, or OSV records by ID. Useful when you need to check dependencies for known security issues during code review, audit a project's supply chain, or investigate specific vulnerability details without leaving your editor. Runs through Pipeworx's gateway, which means you can either use this standalone or tap into their full collection of 673+ data sources with a single connection.
- tools
- 3
- transport
- HTTP
- last updated
- May 16, 2026
Tools
3 toolsPublic tool metadata for what this MCP can expose to an agent.
vulnerabilitiesQuery vulnerabilities by package (+ optional version) or git commit.
Query vulnerabilities by package (+ optional version) or git commit.
No parameter schema in public metadata yet.
query_batchBatch query (≤1000 queries). Pass an array of {package: {name, ecosystem}, version?} or {commit}.
Batch query (≤1000 queries). Pass an array of {package: {name, ecosystem}, version?} or {commit}.
No parameter schema in public metadata yet.
getFull vulnerability record by id (CVE-…, GHSA-…, OSV-…).
Full vulnerability record by id (CVE-…, GHSA-…, OSV-…).
No parameter schema in public metadata yet.
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageReadme
mcp-osv-dev
OSV.dev MCP — Google's open-source vulnerability database.
Part of Pipeworx — an MCP gateway connecting AI agents to 673+ live data sources.
Tools
| Tool | Description |
|---|---|
vulnerabilities | Query vulnerabilities by package (+ optional version) or git commit. |
query_batch | Batch query (≤1000 queries). Pass an array of {package: {name, ecosystem}, version?} or {commit}. |
get | Full vulnerability record by id (CVE-…, GHSA-…, OSV-…). |
Quick Start
Add to your MCP client (Claude Desktop, Cursor, Windsurf, etc.):
{
"mcpServers": {
"osv-dev": {
"url": "https://gateway.pipeworx.io/osv-dev/mcp"
}
}
}
Or connect to the full Pipeworx gateway for access to all 673+ data sources:
{
"mcpServers": {
"pipeworx": {
"url": "https://gateway.pipeworx.io/mcp"
}
}
}
Using with ask_pipeworx
Instead of calling tools directly, you can ask questions in plain English:
ask_pipeworx({ question: "your question about Osv Dev data" })
The gateway picks the right tool and fills the arguments automatically.
More
Details
- Repository
- github.com/pipeworx-io/mcp-osv-dev
- Website
- pipeworx.io/packs/osv-dev
- Categories
- Databases, Security & Pentesting
- Transport
- HTTP
- Registry
- MCP registry, active
More from pipeworx-io
Related Databases MCP servers
View all
Overpasspipeworx-io/mcp-overpassOpenStreetMap Overpass MCP — programmatic queries against the OSM database0starsPaleobiodbpipeworx-io/mcp-paleobiodbPaleobiology Database (PBDB) MCP — the global fossil record. Keyless.0starsPeeringdbpipeworx-io/mcp-peeringdbPeeringDB MCP — the peering ecosystem database. Look up networks by name or ASN, find internet…0starsPombasepipeworx-io/mcp-pombasePomBase MCP — the fission yeast (Schizosaccharomyces pombe) model-organism database.0stars