osv
No liveness check has reached it yet; it has been in the index since 10 Oct 2026. How this is checked
OSV is an HTTP JSON-RPC MCP server that exposes tools for querying the OSV.dev vulnerability database. It supports package and version lookups, vulnerability detail retrieval, commit-based queries, and batch SBOM-style dependency scanning for developers and security teams.
Inferred · not functionally tested
Overview
6 featuresPurpose: Finding known vulnerabilities in open-source dependencies, versions, commits, and SBOM entries.
Inferred · not functionally tested
Audience: software developers and security engineers
Inferred · not functionally tested
Functions: data_extraction
Inferred · not functionally tested
Interfaces: API: indicated (inferred, not tested) · MCP: indicated (inferred, not tested) · CLI: unknown · Self-hosting: unknown
Recorded constraints: pricing: free · license: Proprietary · platforms: WEB · deployment: browser, api_only, cloud_managed
Constraint provenance is unknown; confirm requirements with the publisher.
Record sources: gateway.pipeworx.io. These links do not verify the individual claims.
In the Application security & vulnerability scanning space, osv takes a focused approach. Inferred · not functionally tested: It focuses on finding known vulnerabilities in open-source dependencies, versions, commits, and SBOM entries. Inferred · not functionally tested: It is built as a B2B product for software developers and security engineers. Basis unknown · not verified: osv is free to use. Basis unknown · not verified: It ships for the web and API.
Behind osv is Pipeworx. Inferred · not functionally tested: Key capabilities include package vulnerability lookup, version-specific queries, and vulnerability details. Inferred · not functionally tested: Catalogued interfaces include an MCP server and a public API.
Summary written by a language model from the project’s public pages.
Tasks: Inferred · not functionally tested
- Package vulnerability lookup
- Version-specific queries
- Vulnerability details
- Commit scanning
- Batch queries
- SBOM scanning
Topics: Inferred · not functionally tested
Built with & integrations
- Cloudflare
- cf-ray header
Trust & compliance
Indexing history
1What PulseGate has recorded for this listing
Frequently asked questions about osv
- What does osv do?
- Inferred · not functionally tested: Osv focuses on finding known vulnerabilities in open-source dependencies, versions, commits, and SBOM entries. It is catalogued under Application security & vulnerability scanning on PulseGate.
- Who is osv for?
- Inferred · not functionally tested: osv is a B2B product built for software developers and security engineers.
- Does osv have a free plan?
- Basis unknown · not verified: Yes — osv is free to use.
- What platforms does osv run on?
- Basis unknown · not verified: osv runs on the web and API.
- Is osv still active?
- Unverified. osv has not been re-checked since it entered the index, so there is no finding either way — and only a positive finding would say otherwise.
- What projects are similar to osv?
- Similar projects tracked by PulseGate include OSV MCP, osf, and owasp.OSV MCPosfowasp
- Who makes osv?
- osv is developed by Pipeworx.
- Does osv have an API or integrations?
- Inferred · not functionally tested: Yes — osv exposes an MCP server and a public API.
Similar projects
Closest matches by what these projects do