Connects your MCP client to OSV.dev, Google's open source vulnerability database. Part of the Pipeworx gateway ecosystem, which means you can either use this standalone OSV endpoint or tap into their full gateway for 842+ data sources. The implementation supports Pipeworx's ask_pipeworx pattern, letting you query vulnerability data in plain English rather than calling structured tool methods directly. Useful when you need to check package vulnerabilities, scan dependencies, or pull security advisories during development workflows. The gateway handles tool selection and argument mapping automatically.
OSV.dev (Open Source Vulnerabilities) MCP.
Part of Pipeworx — an MCP gateway connecting AI agents to 842+ live data sources.
| Tool | Description |
|---|
Add to your MCP client (Claude Desktop, Cursor, Windsurf, etc.):
{
"mcpServers": {
"osv": {
"url": "https://gateway.pipeworx.io/osv/mcp"
}
}
}
Or connect to the full Pipeworx gateway for access to all 842+ data sources:
{
"mcpServers": {
"pipeworx": {
"url": "https://gateway.pipeworx.io/mcp"
}
}
}
Instead of calling tools directly, you can ask questions in plain English:
ask_pipeworx({ question: "your question about Osv data" })
The gateway picks the right tool and fills the arguments automatically.
MIT