Summary
Connects Claude to OSV.dev, Google's open source vulnerability database. You get three tools: query vulnerabilities by package name and version or git commit, batch query up to 1000 packages at once, and fetch full CVE, GHSA, or OSV records by ID. Useful when you need to check dependencies for known security issues during code review, audit a project's supply chain, or investigate specific vulnerability details without leaving your editor. Runs through Pipeworx's gateway, which means you can either use this standalone or tap into their full collection of 673+ data sources with a single connection.
Keep your Mac awake while Claude Code and 40+ AI agents run. Sleeps when they're idle.
One time payment $9 →
Integrate web data into your AI product. One API to scrape website & brand data.
Get API Key Now →
Agent, run crypto. Access onchain data & trade routes via 1inch.
Install now →
On Capafy, your Skill runs online 24/7 as an agent product, and you get paid every time someone uses it.
Start earning →
mcp-osv-dev
OSV.dev MCP — Google's open-source vulnerability database.
Part of Pipeworx — an MCP gateway connecting AI agents to 673+ live data sources.
Tools
| Tool | Description |
|---|---|
vulnerabilities | Query vulnerabilities by package (+ optional version) or git commit. |
query_batch | Batch query (≤1000 queries). Pass an array of {package: {name, ecosystem}, version?} or {commit}. |
get | Full vulnerability record by id (CVE-…, GHSA-…, OSV-…). |
Quick Start
Add to your MCP client (Claude Desktop, Cursor, Windsurf, etc.):
{
"mcpServers": {
"osv-dev": {
"url": "https://gateway.pipeworx.io/osv-dev/mcp"
}
}
}
Or connect to the full Pipeworx gateway for access to all 673+ data sources:
{
"mcpServers": {
"pipeworx": {
"url": "https://gateway.pipeworx.io/mcp"
}
}
}
Using with ask_pipeworx
Instead of calling tools directly, you can ask questions in plain English:
ask_pipeworx({ question: "your question about Osv Dev data" })
The gateway picks the right tool and fills the arguments automatically.
More
License
MIT
Featured
Keep your Mac awake while Claude Code and 40+ AI agents run. Sleeps when they're idle.
One time payment $9 →Integrate web data into your AI product. One API to scrape website & brand data.
Get API Key Now →Agent, run crypto. Access onchain data & trade routes via 1inch.
Install now →On Capafy, your Skill runs online 24/7 as an agent product, and you get paid every time someone uses it.
Start earning →Categories
Registryactive
TransportHTTP
UpdatedMay 16, 2026
