Osv MCP Server

by mrfentmen Your server? Claim it

local only

Osv MCP runs on your own machine — the client starts it, so there is no endpoint to ping. 68 installs a week from npm.

Use this MCP server to OSV open source vulnerability data and package security checks. Tools...

The linked repository no longer exists on GitHub — it was deleted or made private.

Installs per day peak 201 · avg 17 · -69% w/w

a month agotoday

Installs / week

npm · osv-mcp

—

Stars

on GitHub

—

Last commit

3 releases in 90 days

—

License

language unknown

This one has been quiet for a while

Quiet is not dead — but it is worth knowing when it wakes up, or when someone else takes it over. We watch the repository and tell you either way.

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add osv-mcp -- npx -y osv-mcp

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "osv-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "osv-mcp"
      ]
    }
  }
}

~/.codex/config.toml

[mcp_servers.osv-mcp]
command = "npx"
args = ["-y", "osv-mcp"]

.cursor/mcp.json

{
  "mcpServers": {
    "osv-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "osv-mcp"
      ]
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "osv-mcp": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "osv-mcp"
      ]
    }
  }
}

Alternatives to Osv MCP

same job, measured the same way

Osv

by pipeworx-io

OSV.dev (Open Source Vulnerabilities) MCP.

296 installs/wk 48 tools answering

Presend MCP Server

by presendapp

Before an AI agent installs an npm/PyPI package: typosquat, vulnerability and existence checks.

40 tools answering

ESET PROTECT

by wyre-ai

MCP server for ESET PROTECT's ESET Connect API - device, EDR, vulnerability, patch, and user data.

local only

npm MCP

by alisaitteke

MCP server for npm package management, security analysis, and compatibility checking

61 installs/wk local only

Mythos Agent

by mythos-agent

Open-source AI security agent: SAST, DAST, and policy-as-code over MCP.

294 installs/wk local only

Codesearch

by sk-dev-ai

Code, package, docs, paper and vulnerability search. 17 tools, keyless lanes.

146 installs/wk local only

Cisa Kev MCP

by mrfentmen

Use this MCP server to CISA Known Exploited Vulnerabilities catalog search. Tools include search...

97 installs/wk local only

Fetter MCP

by fetter-io

Real-time Python package and vulnerability data for AI coding agents.

3 tools answering

Osv MCP — questions

Answers built from our own checks of this server.

Why is there no uptime for Osv MCP?

Osv MCP runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the npm package osv-mcp was installed 68 times last week.

Is Osv MCP still maintained?

The linked repository no longer exists on GitHub — it was deleted or made private. We show this because it changes what you can expect: an unmaintained server may keep answering for months and then stop without warning.

How do I connect Osv MCP?

Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It runs locally, so the command pulls osv-mcp straight from npm; nothing to host, nothing to sign up for.

How many people use Osv MCP?

The npm package osv-mcp was installed 68 times in the last week. Week over week that is -69%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.