OSV-MCP
If you are the rightful owner of OSV-MCP and would like to certify it and/or have it hosted online, please leave a comment on the right or send an email to henry@mcphub.com.
A lightweight MCP (Model Context Protocol) server for OSV Database API.
The MCP Server for OSV is a lightweight server designed to interface with the OSV Database API. It provides a streamlined way to query and retrieve information about Common Vulnerabilities and Exposures (CVEs) related to specific packages. The server supports querying for CVE IDs, affected versions, and fixed versions of packages, making it a valuable tool for developers and security professionals who need to manage and mitigate vulnerabilities in their software projects. The server is compatible with various ecosystems and can be easily integrated into existing workflows, offering a robust solution for vulnerability management.
Features
- Query package CVE IDs for specific packages and versions.
- Retrieve all affected versions for a given CVE.
- Get all versions that fix a specific CVE.
- List all supported ecosystems by the MCP server.
Tools
query_package_cve
List all the CVE IDs for a specific package. Specific version can be passed as well for more narrow scope CVE IDs.
query_for_cve_affected
Query the OSV database for a CVE and return all affected versions of the package.
query_for_cve_fix_versions
Query the OSV database for a CVE and return all versions that fix the vulnerability.
get_ecosystems
Query the MCP for current supported ecosystems.
