Osv Advisory MCP Server

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 13 min ago.

claude mcp add osv-advisory-mcp-server --transport http https://osv-advisory.caseyjhand.com/mcp

{
  "mcpServers": {
    "osv-advisory-mcp-server": {
      "url": "https://osv-advisory.caseyjhand.com/mcp"
    }
  }
}

[mcp_servers.osv-advisory-mcp-server]
url = "https://osv-advisory.caseyjhand.com/mcp"

{
  "mcpServers": {
    "osv-advisory-mcp-server": {
      "url": "https://osv-advisory.caseyjhand.com/mcp"
    }
  }
}

{
  "mcpServers": {
    "osv-advisory-mcp-server": {
      "url": "https://osv-advisory.caseyjhand.com/mcp"
    }
  }
}

This one needs environment variables set before it will start: OSV_REQUEST_TIMEOUT_MS (HTTP request timeout in milliseconds for OSV.dev API calls.), OSV_BATCH_CONCURRENCY (Maximum number of concurrent OSV.dev requests issued by osv_query_batch.), OSV_QUERY_MAX_PAGES (Maximum number of OSV.dev result pages osv_query_package follows before marking a result truncated.), MCP_HTTP_HOST (The hostname for the HTTP server.), MCP_HTTP_PORT (The port to run the HTTP server on.), MCP_HTTP_ENDPOINT_PATH (The endpoint path for the MCP server.), MCP_AUTH_MODE (Authentication mode to use: 'none', 'jwt', or 'oauth'.), MCP_SESSION_MODE (HTTP session mode. This server deploys stateless because its tools do not use multi-round input.), MCP_LOG_LEVEL (Sets the minimum log level for output (e.g., 'debug', 'info', 'warn').). The author declared them in the registry entry; get the values from the project itself.

Available tools 4

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

Endpoints