Skip to content
Back to the index

OSV MCP

github.comInfrastructure

PulseGate's liveness check found it on 24 Sep 2026; it has been in the index since 24 Sep 2026. How this is checked

OSV MCP is an open-source Model Context Protocol server that connects AI assistants and developer workflows to OSV vulnerability checks. It provides keyless dependency vulnerability lookups for developers and security teams.

Inferred · not functionally tested

Open SourceWebCLIAPISelf-hosted
OSV MCP preview
Visit github.com

Overview

6 features

Purpose: Checking open-source dependencies for known vulnerabilities without managing API credentials.

Inferred · not functionally tested

Audience: developers and security engineers

Inferred · not functionally tested

Functions: data_extraction

Inferred · not functionally tested

Interfaces: API: indicated (inferred, not tested) · MCP: indicated (inferred, not tested) · CLI: indicated (inferred, not tested) · Self-hosting: indicated (inferred, not tested)

Recorded constraints: pricing: open_source · license: Open Source · platforms: CLI, WEB · deployment: browser, cli, api_only, self_hosted

Constraint provenance is unknown; confirm requirements with the publisher.

Record sources: github.com. These links do not verify the individual claims.

OSV MCP is an AI security & guardrails project. Inferred · not functionally tested: It focuses on checking open-source dependencies for known vulnerabilities without managing API credentials. Inferred · not functionally tested: It is built as an open-source project for developers and security engineers. Basis unknown · not verified: OSV MCP is open source under the Open Source license. Basis unknown · not verified: It ships for the web, the command line, and API, and it can be self-hosted.

It is developed by mrfentmen. Inferred · not functionally tested: Among its 6 catalogued features are vulnerability checks, dependency lookup, and keyless access. Inferred · not functionally tested: Catalogued interfaces include an MCP server and a public API.

Summary written by a language model from the project’s public pages.

Tasks: Inferred · not functionally tested

  • Vulnerability checks
  • Dependency lookup
  • Keyless access
  • MCP server
  • OSV integration
  • JSON responses

Topics: Inferred · not functionally tested

Tags
osv-scannerdependency-vulnerabilitiesmcp-serverdevsecops
AI capabilities
TextStructured

JSON profile · Text profile · Access guide

Built with & integrations

Connectors
MCPAPI
Runs on
BrowserCLIAPI-onlySelf-hosted

Trust & compliance

License
Open Source
Public signals
HTTPSPrivacy PolicyTerms of ServiceOpen SourceFree tier
Legal
Privacy Policy Terms of Service

Indexing history

1

What PulseGate has recorded for this listing

  1. Indexed21 Sep · 22:11 UTC
    io.github.mrfentmen/osv-mcp seen via MCP Registry (official)
    Source: MCP Registry (official) · Open

Frequently asked questions about OSV MCP

What does OSV MCP do?
Inferred · not functionally tested: OSV MCP focuses on checking open-source dependencies for known vulnerabilities without managing API credentials. It is catalogued under AI security & guardrails on PulseGate.
Who is OSV MCP for?
Inferred · not functionally tested: OSV MCP is an open-source project built for developers and security engineers.
Does OSV MCP have a free plan?
Basis unknown · not verified: Yes — OSV MCP is open source under the Open Source license and free to use.
What platforms does OSV MCP run on?
Basis unknown · not verified: OSV MCP runs on the web, the command line, and API. It can also be self-hosted.
Is OSV MCP still active?
PulseGate's liveness check found it on 24 Sep 2026.
What are alternatives to OSV MCP?
Similar projects tracked by PulseGate include VulnCheck MCP Server, osm-mcp, and CISA Cybersecurity MCP Server.VulnCheck MCP Serverosm-mcpCISA Cybersecurity MCP Server
Who develops OSV MCP?
OSV MCP is developed by mrfentmen.
Is OSV MCP open source?
Basis unknown · not verified: Yes — OSV MCP is open source under the Open Source license.

Similar projects

Closest matches by what these projects do