OSV Dependency Vulnerability Check MCP Server

by fairquery Your server? Claim it

answering

OSV Dependency Vulnerability Check is answering right now. Last checked 9 min ago.

Check npm, PyPI, Go and Maven packages or lockfiles against OSV.dev: CVEs, CVSS, fixed versions.

The linked repository no longer exists on GitHub — it was deleted or made private.

Uptime history 8 days of history · worst day 98%

8 days agonow

97.8%

Uptime 24h

89 of 91 checks

—

Tools

hidden behind auth

343 ms

Response time

average over 24h

API key

Access

streamable-http

OSV Dependency Vulnerability Check missed 3 checks this week

Everything else answered, so this is steady rather than shaky. We check every 15 minutes, which is how a one-off gets told apart from the start of a pattern, and how you hear about the next one within the hour instead of from your users.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 9 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add osv-dependency-vulnerability-check --transport http 'https://mcp.apify.com/?tools=fetch-actor-details,fairquery/osv-dependency-vulnerability-check'

Settings → Connectors → Add custom connector, then paste this address

https://mcp.apify.com/?tools=fetch-actor-details,fairquery/osv-dependency-vulnerability-check

~/.codex/config.toml

[mcp_servers.osv-dependency-vulnerability-check]
url = "https://mcp.apify.com/?tools=fetch-actor-details,fairquery/osv-dependency-vulnerability-check"

.cursor/mcp.json

{
  "mcpServers": {
    "osv-dependency-vulnerability-check": {
      "url": "https://mcp.apify.com/?tools=fetch-actor-details,fairquery/osv-dependency-vulnerability-check"
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "osv-dependency-vulnerability-check": {
      "type": "http",
      "url": "https://mcp.apify.com/?tools=fetch-actor-details,fairquery/osv-dependency-vulnerability-check"
    }
  }
}

This endpoint answered with an authorization challenge. The server is running, but you need an API key from its owner to call it.

Endpoints

URL	Transport	State	Latency	Checked
https://mcp.apify.com/?tools=fetch-actor-details,fairquery/osv-dependency-vulnerability-check	streamable-http	needs key	315 ms	9 min ago

Alternatives to OSV Dependency Vulnerability Check

same job, measured the same way

Dependency Vulnerability Check (OSV)

by brunckel

Known vulnerabilities and fixed versions for npm, PyPI, Go, Maven packages from OSV.dev via Apify.

answering

DepScout

by yc-droid

Scan packages and lockfiles (npm, PyPI, Go, Maven, Cargo, NuGet) for vulnerabilities and malware.

4 tools answering

OSV Advisories

by basitalisandhu

Query OSV.dev for known vulnerabilities by package and version, and scan lockfiles in batch.

local only

Osv Advisory MCP Server

by cyanheads

Query OSV.dev for package vulnerabilities and batch-audit dependency lists via MCP.

311 installs/wk 5 tools answering

AgentGuard — security checks for AI agents

by shuaicongxiaomai

Secret, CVE and dependency-vulnerability scanning for AI agents (free, OSV.dev).

local only

AgentDiet Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)

by agentdiet

Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and r.

2 tools answering

Cve Intel MCP

by robertoyanguas-ops

Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and re

2 tools answering

Depcheck

by kaneky

Known vulnerabilities for exact package versions from OSV, with fixes. Paid per call, x402.

1 tools answering

OSV Dependency Vulnerability Check — questions

Answers built from our own checks of this server.

Why is there no tool list for OSV Dependency Vulnerability Check?

The server answered our handshake with an authorization challenge, so it is running — but it will not describe its tools to an anonymous client. To see them you need to connect with your own credentials. We record it as alive, not as broken: 97.8% of checks in the last 24 hours got a reply.

Is OSV Dependency Vulnerability Check working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 89 of 91 checks got a reply (97.8%), average response time 343 ms. The bar chart above shows every period we have measured.

Is OSV Dependency Vulnerability Check still maintained?

The linked repository no longer exists on GitHub — it was deleted or made private. We show this because it changes what you can expect: an unmaintained server may keep answering for months and then stop without warning.

How do I connect OSV Dependency Vulnerability Check?

Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address. You will need your own key: it refuses anonymous clients.

Does OSV Dependency Vulnerability Check need an API key?

Yes. Every time we knock, OSV Dependency Vulnerability Check answers with an authorization challenge instead of its tool list — that is how we know it is running and gated rather than broken. Bring your own credentials and it will talk.

How fast is OSV Dependency Vulnerability Check?

It answers our handshake in 343 ms on average, which is faster than 46% of all working MCP servers we measure. The comparison comes from our own checks across the whole registry, every 15 minutes.