mcp-osv-dev

OSV.dev MCP — Google's open-source vulnerability database.

Part of Pipeworx — an MCP gateway connecting AI agents to 673+ live data sources.

Tools

Tool	Description
`vulnerabilities`	Query vulnerabilities by package (+ optional version) or git commit.
`query_batch`	Batch query (≤1000 queries). Pass an array of {package: {name, ecosystem}, version?} or {commit}.
`get`	Full vulnerability record by id (CVE-…, GHSA-…, OSV-…).

Add to your MCP client (Claude Desktop, Cursor, Windsurf, etc.):

config.json

{
  "mcpServers": {
    "osv-dev": {
      "url": "https://gateway.pipeworx.io/osv-dev/mcp"
    }
  }
}

Or connect to the full Pipeworx gateway for access to all 673+ data sources:

config.json

{
  "mcpServers": {
    "pipeworx": {
      "url": "https://gateway.pipeworx.io/mcp"
    }
  }
}

Instead of calling tools directly, you can ask questions in plain English:

Code

ask_pipeworx({ question: "your question about Osv Dev data" })

The gateway picks the right tool and fills the arguments automatically.

MIT