Osv

What Osv does

Osv MCP server exposes OSV.dev vulnerability data to MCP-compatible clients. It is intended for checking whether packages, package versions, or source commits are associated with known vulnerabilities, then retrieving the details needed to assess a finding.

The integration is keyless at the OSV tool level. It can return compact findings for scanning workflows or full records for investigating one vulnerability. The project is an independent, unofficial integration and is not affiliated with the upstream OSV.dev provider.

How it works

You can connect an MCP client to the hosted endpoint at https://gateway.pipeworx.io/osv/mcp. The endpoint serves the Osv tools together with shared Pipeworx gateway tools. A full gateway connection at https://gateway.pipeworx.io/mcp exposes the broader catalog directly; both endpoints can use ask_pipeworx to route questions across the catalog.

For local process-based setups, @pipeworx/mcp-osv runs through npx as a stdio bridge. It forwards requests to the hosted gateway, so network access is required and there is no offline mode. The HTTP API also permits direct calls such as POST /v1/tools/query_package_vulns.

Setup and configuration

Hosted MCP configuration:

{
  "mcpServers": {
    "osv": {
      "url": "https://gateway.pipeworx.io/osv/mcp"
    }
  }
}

For the npm bridge, configure the client to start the package with npx:

{
  "mcpServers": {
    "osv": {
      "command": "npx",
      "args": ["-y", "@pipeworx/mcp-osv"]
    }
  }
}

Anonymous calls are capped at 50 per day. A free Pipeworx account raises the allowance to 200 calls per day; provide its key as PIPEWORX_API_KEY. Set PIPEWORX_META_TOOLS=1 if the local bridge should list shared gateway tools in addition to the Osv tools. When using an HTTPS proxy, newer Node.js releases can honor the proxy environment setting when NODE_USE_ENV_PROXY=1 is enabled.

Tools and capabilities

• query_package_vulns checks a package across an OSV ecosystem, optionally at a specific version. Leaving out the version returns all known vulnerabilities for that package.
• get_vulnerability retrieves full information for an OSV identifier, including aliases, severity, affected package ranges, and references.
• query_by_commit checks a source repository commit, which is useful when a dependency is pinned to a commit rather than a release.
• query_batch accepts up to 1,000 package or commit entries for dependency inventories and SBOM-style checks. It returns matched vulnerability IDs; call get_vulnerability to inspect individual records.

Limitations and notes

The npm bridge depends on the hosted Pipeworx gateway and cannot operate offline. Anonymous usage has a daily call limit, while authenticated calls use a Bearer token and are metered according to the gateway account. Pack endpoints also list shared gateway meta-tools, so the visible tool count can exceed the four Osv-specific tools.