LocalFree

OSV MCP server

StacklokLabs/osv-mcp

Access the OSV (Open Source Vulnerabilities) database for vulnerability information. Query vulnerabilities by package version or commit, batch query multiple packages, and get detailed vulnerability information by ID.

43 GitHub stars7 forks

Install OSV in Claude Code

This server doesn't publish a package to a registry, so follow the install steps in its README. Once it runs, register it with Claude Code:

Claude Code
claude mcp add osv -- <command to start the server>

Frequently asked questions

What does the OSV MCP server do?

Access the OSV (Open Source Vulnerabilities) database for vulnerability information. Query vulnerabilities by package version or commit, batch query multiple packages, and get detailed vulnerability information by ID.

Is the OSV MCP server free?

Yes, most likely. Open source and no paid account or API key is mentioned in the listing. Check the provider for current pricing.

Does OSV run locally or remotely?

Local. Runs on your machine (stdio). You install it with npx, uvx, Docker or from source.

How do I add OSV to Claude Code?

Follow the install steps in the project's README at https://github.com/StacklokLabs/osv-mcp, then register it with "claude mcp add".

More security & identity MCP servers

View all