Skip to content
mcp/harbor
Verified official

osv advisory mcp server MCP

v0.5.1 changelog · 12

io.github.cyanheads/osv-advisory-mcp-server

Query OSV.dev for package vulnerabilities and batch-audit dependency lists via MCP.

transport:streamable-http runtime:npm tools:5
View source

Target client

run in your project directory 

claude mcp add --transport http osv-advisory-mcp-server https://osv-advisory.caseyjhand.com/mcp

setup guides: Claude Code Claude Desktop Cursor VS Code Zed Windsurf Cline Gemini CLI Grok ChatGPT Claude.ai LangChain

Adds it for this project only. Append --scope user to make it available everywhere. Claude Code docs

osv_list_ecosystems

osv list ecosystems

osv_query_package

osv query package

osv_get_vulnerability

osv get vulnerability

osv_query_batch

osv query batch

osv_query_commit

osv query commit

All 5 tools, one page each

1 resource you attach as context

Mutating and Read-only are read off each tool's name, not its schema — a hint, not a guarantee. Check the server's own documentation before granting access.