Home/osv-advisory-mcp-server
Hybrid

osv-advisory-mcp-server

Query OSV.dev for package vulnerabilities and batch-audit dependency lists via MCP.

io.github.cyanheads/osv-advisory-mcp-serverSource repository
Version0.4.1latest catalog version
ConnectionHybridstreamable-http · npm
PublishedNov 01, 2026catalog
UpdatedNov 01, 2026catalog
Overview

What this server provides

Query OSV.dev for package vulnerabilities and batch-audit dependency lists via MCP.

Connect

Remote endpoints

1
Remote endpoint 1streamable-http
https://osv-advisory.caseyjhand.com/mcp
Open endpoint
Install

Packages

2
Package 1npm
@cyanheads/osv-advisory-mcp-server0.4.1
Runtime npxTransport stdio
  • OSV_REQUEST_TIMEOUT_MS

    HTTP request timeout in milliseconds for OSV.dev API calls.

    Format: string · Default: 10000
    Optional
  • OSV_BATCH_CONCURRENCY

    Maximum number of concurrent OSV.dev requests issued by osv_query_batch.

    Format: string · Default: 10
    Optional
  • OSV_QUERY_MAX_PAGES

    Maximum number of OSV.dev result pages followed per package or commit before marking a result truncated.

    Format: string · Default: 10
    Optional
  • MCP_LOG_LEVEL

    Sets the minimum log level for output (e.g., 'debug', 'info', 'warn').

    Format: string · Default: info
    Optional
Package 2npm
@cyanheads/osv-advisory-mcp-server0.4.1
Runtime npxTransport streamable-http
http://localhost:3010/mcp
  • OSV_REQUEST_TIMEOUT_MS

    HTTP request timeout in milliseconds for OSV.dev API calls.

    Format: string · Default: 10000
    Optional
  • OSV_BATCH_CONCURRENCY

    Maximum number of concurrent OSV.dev requests issued by osv_query_batch.

    Format: string · Default: 10
    Optional
  • OSV_QUERY_MAX_PAGES

    Maximum number of OSV.dev result pages followed per package or commit before marking a result truncated.

    Format: string · Default: 10
    Optional
  • MCP_HTTP_HOST

    The hostname for the HTTP server.

    Format: string · Default: 127.0.0.1
    Optional
  • MCP_HTTP_PORT

    The port to run the HTTP server on.

    Format: string · Default: 3010
    Optional
  • MCP_HTTP_ENDPOINT_PATH

    The endpoint path for the MCP server.

    Format: string · Default: /mcp
    Optional
  • MCP_AUTH_MODE

    Authentication mode to use: 'none', 'jwt', or 'oauth'.

    Format: string · Default: none
    Optional
  • MCP_SESSION_MODE

    HTTP session mode. This server deploys stateless because its tools do not use multi-round input.

    Format: string · Default: stateless
    Optional
  • MCP_LOG_LEVEL

    Sets the minimum log level for output (e.g., 'debug', 'info', 'warn').

    Format: string · Default: info
    Optional
View server metadata