Osv Dev
pipeworx-io/mcp-osv-dev
Connects Claude to OSV.dev, Google's open source vulnerability database. You get three tools: query vulnerabilities by package name and version or git commit, batch query up to 1000 packages at once, and fetch full CVE, GHSA, or OSV records by ID. Useful when you need to check dependencies for known security issues during code review, audit a project's supply chain, or investigate specific vulnerability details without leaving your editor. Runs through Pipeworx's gateway, which means you can either use this standalone or tap into their full collection of 673+ data sources with a single connection.
- last updated
- May 16, 2026
Sponsors
Readme
mcp-osv-dev
OSV.dev MCP — Google's open-source vulnerability database.
Part of Pipeworx — an MCP gateway connecting AI agents to 673+ live data sources.
Tools
| Tool | Description |
|---|---|
vulnerabilities | Query vulnerabilities by package (+ optional version) or git commit. |
query_batch | Batch query (≤1000 queries). Pass an array of {package: {name, ecosystem}, version?} or {commit}. |
get | Full vulnerability record by id (CVE-…, GHSA-…, OSV-…). |
Quick Start
Add to your MCP client (Claude Desktop, Cursor, Windsurf, etc.):
{
"mcpServers": {
"osv-dev": {
"url": "https://gateway.pipeworx.io/osv-dev/mcp"
}
}
}
Or connect to the full Pipeworx gateway for access to all 673+ data sources:
{
"mcpServers": {
"pipeworx": {
"url": "https://gateway.pipeworx.io/mcp"
}
}
}
Using with ask_pipeworx
Instead of calling tools directly, you can ask questions in plain English:
ask_pipeworx({ question: "your question about Osv Dev data" })
The gateway picks the right tool and fills the arguments automatically.
More
License
MIT
Details
- Repository
- github.com/pipeworx-io/mcp-osv-dev
- Website
- pipeworx.io/packs/osv-dev
- Categories
- Databases, Security & Pentesting
- Transport
- HTTP
- Registry
- MCP registry, active
