io.github.cyanheads/osv-advisory-mcp-server MCP Server

io.github.cyanheads/osv-advisory-mcp-server

Repository Registry

What is the io.github.cyanheads/osv-advisory-mcp-server MCP server?

Query OSV.dev for package vulnerabilities and batch-audit dependency lists via MCP.

How to install io.github.cyanheads/osv-advisory-mcp-server

Copy-paste configuration for popular MCP clients.

transport: stdio

Config generated by PluginBench — verify against the source before use.

Environment / auth

OSV_REQUEST_TIMEOUT_MS
HTTP request timeout in milliseconds for OSV.dev API calls.
OSV_BATCH_CONCURRENCY
Maximum number of concurrent OSV.dev requests issued by osv_query_batch.
OSV_QUERY_MAX_PAGES
Maximum number of OSV.dev result pages osv_query_package follows before marking a result truncated.
MCP_LOG_LEVEL
Sets the minimum log level for output (e.g., 'debug', 'info', 'warn').
MCP_HTTP_HOST
The hostname for the HTTP server.
MCP_HTTP_PORT
The port to run the HTTP server on.
MCP_HTTP_ENDPOINT_PATH
The endpoint path for the MCP server.
MCP_AUTH_MODE
Authentication mode to use: 'none', 'jwt', or 'oauth'.
MCP_SESSION_MODE
HTTP session mode. This server deploys stateless because its tools do not use multi-round input.

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "osv-advisory-mcp-server": {
      "command": "bun",
      "args": [
        "-y",
        "@cyanheads/osv-advisory-mcp-server",
        "run",
        "start:stdio"
      ],
      "env": {
        "OSV_REQUEST_TIMEOUT_MS": "<YOUR_OSV_REQUEST_TIMEOUT_MS>",
        "OSV_BATCH_CONCURRENCY": "<YOUR_OSV_BATCH_CONCURRENCY>",
        "OSV_QUERY_MAX_PAGES": "<YOUR_OSV_QUERY_MAX_PAGES>",
        "MCP_LOG_LEVEL": "<YOUR_MCP_LOG_LEVEL>",
        "MCP_HTTP_HOST": "<YOUR_MCP_HTTP_HOST>",
        "MCP_HTTP_PORT": "<YOUR_MCP_HTTP_PORT>",
        "MCP_HTTP_ENDPOINT_PATH": "<YOUR_MCP_HTTP_ENDPOINT_PATH>",
        "MCP_AUTH_MODE": "<YOUR_MCP_AUTH_MODE>",
        "MCP_SESSION_MODE": "<YOUR_MCP_SESSION_MODE>"
      }
    }
  }
}

Related MCP servers

io.github.cyanheads/ourairports-mcp-server

Active

Offline global aviation reference — airports, runways, navaids, frequencies from OurAirports.

TypeScript

Apache-2.0

View repository →

io.github.cyanheads/paleobiology-mcp-server

Active

Search fossil occurrences, taxon ranges, diversity through deep time, and the geologic time scale.

TypeScript

Apache-2.0

View repository →

io.github.cyanheads/pentest-mcp-server

Active

Offline methodology engine for authorized penetration testing, CTF, and security research.

TypeScript

Apache-2.0

View repository →

io.github.cyanheads/pixoo-mcp-server

Active

Render and push styled pixel art, text, dashboards, and animations to Divoom Pixoo LED displays.

TypeScript

Apache-2.0

View repository →

io.github.cyanheads/pokeapi-mcp-server

Active

Look up Pokémon, moves, abilities, items, natures, and type matchups from PokéAPI v2.

TypeScript

Apache-2.0

View repository →

io.github.cyanheads/protein-mcp-server

Active

MCP Server for 3D protein structural data retrieval & analysis from RCSB PDB, PDBe, and UniProt.

TypeScript

Apache-2.0

View repository →