Summary
Connects Claude to OSV.dev, Google's open source vulnerability database. You get three tools: query vulnerabilities by package name and version or git commit, batch query up to 1000 packages at once, and fetch full CVE, GHSA, or OSV records by ID. Useful when you need to check dependencies for known security issues during code review, audit a project's supply chain, or investigate specific vulnerability details without leaving your editor. Runs through Pipeworx's gateway, which means you can either use this standalone or tap into their full collection of 673+ data sources with a single connection.
Agent, run crypto. Access onchain data & trade routes via 1inch.
Install now →
Make coding agent sessions - Searchable, Shareable, Vendor-neutral & Scored.
Try For Free →
Your agent targets a perfect 10 Code Health score. Deterministic. Every commit.
Try For Free →
Integrate web data into your AI product. One API to scrape website & brand data.
Get API Key Now →
belt cli automatically finds the best tools and skills for your agent. image, video, music, tts...
one prompt install →mcp-osv-dev
OSV.dev MCP — Google's open-source vulnerability database.
Part of Pipeworx — an MCP gateway connecting AI agents to 673+ live data sources.
Tools
| Tool | Description |
|---|---|
vulnerabilities | Query vulnerabilities by package (+ optional version) or git commit. |
query_batch | Batch query (≤1000 queries). Pass an array of {package: {name, ecosystem}, version?} or {commit}. |
get | Full vulnerability record by id (CVE-…, GHSA-…, OSV-…). |
Quick Start
Add to your MCP client (Claude Desktop, Cursor, Windsurf, etc.):
{
"mcpServers": {
"osv-dev": {
"url": "https://gateway.pipeworx.io/osv-dev/mcp"
}
}
}
Or connect to the full Pipeworx gateway for access to all 673+ data sources:
{
"mcpServers": {
"pipeworx": {
"url": "https://gateway.pipeworx.io/mcp"
}
}
}
Using with ask_pipeworx
Instead of calling tools directly, you can ask questions in plain English:
ask_pipeworx({ question: "your question about Osv Dev data" })
The gateway picks the right tool and fills the arguments automatically.
More
License
MIT
Featured
Agent, run crypto. Access onchain data & trade routes via 1inch.
Install now →Make coding agent sessions - Searchable, Shareable, Vendor-neutral & Scored.
Try For Free →Your agent targets a perfect 10 Code Health score. Deterministic. Every commit.
Try For Free →Integrate web data into your AI product. One API to scrape website & brand data.
Get API Key Now →belt cli automatically finds the best tools and skills for your agent. image, video, music, tts...
one prompt install →Categories
Registryactive
TransportHTTP
UpdatedMay 16, 2026
