Prototype · Preview: every server in the official registry, synced every 30 minutes. Sign in with Google to write reviews.Prototype · updated every 30 min
PopNx MCPMCP servers for people who use AI · explained in plain words
☰ MenuEnglish Settings
Beginner mode On
ColoursSystemLightWhiteDark
LanguageไทยEnglish中文日本語한국어EspañolDeutsch

Osv Dev

by pipeworx-ioversion 0.1.0i★ 0iRuns in the cloud
Registry nameio.github.pipeworx-io/osv-dev

How to install

What it does

OSV.dev — Google's open-source vulnerability database

  • Connects Runs in the cloud
  • Account or key No key needed
  • Category Cybersecurity

Install

Pick the AI app you use, then copy the settings.

Passed 2/4 checks · Runs on your computer

We hid some of the commands

Connect by URL: the server address did not answer when we checked

No install path has passed yet. See the maker’s instructions or pick another server in this category · Maker’s install instructions · Others in this category

First: which AI do you use?

Pick your app and the steps appear below.

Claude cannot connect Osv Dev yet

No install path has passed yet. See the maker’s instructions or pick another server in this category

ChatGPT cannot connect Osv Dev yet

No install path has passed yet. See the maker’s instructions or pick another server in this category

What you can do instead

B · Others in Cybersecurity that work with ChatGPT

Picked from the most used in the same category, only ones that connect by address with no key

Claude Code cannot connect Osv Dev yet

No install path has passed yet. See the maker’s instructions or pick another server in this category

Cursor cannot connect Osv Dev yet

No install path has passed yet. See the maker’s instructions or pick another server in this category

VS Code cannot connect Osv Dev yet

No install path has passed yet. See the maker’s instructions or pick another server in this category

No install path has passed yet. See the maker’s instructions or pick another server in this category

Stuck? Ask people who use Osv Dev💬 Discussion →

At a glance

Downloads per weeki
Not on npm/PyPI
Connection
Runs in the cloud
Transport
streamable-http
Latest versioni
0.1.0
Published to registryi
May 16, 2026
Code last changedi
Jun 3, 2026
Maker
pipeworx-io
Registry status
Active

Which apps can use it

Based on how this server connects and on each app’s own docs, checked Nov 10, 2026.

Connect over the internet in

GooseLM StudioMsty StudioCherry StudioVisual StudioWindsurf (Devin Desktop)ZedKiroClineContinueJetBrains AI AssistantCodex CLIGemini CLIOpenCodenodecodeWarpLibreChatOpen WebUIRaycast

All apps, with pros and cons →

Related guides

Guide 85 checks before you install an MCPAbout 2 minutes each: check its page on our site and the permission request in your AI app before you say yes.4 min read

What it can do

The server did not answer when we last checked, so we could not read its tools.

Basic checksi

We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 15, 2026

  • ✓ Pass

    Maker matches the repo

    The registry name was verified with the GitHub account pipeworx-io, which owns the repo

  • ✕ Fail

    Still maintained

    No code changes for over a year, or the repo is archived

  • ✓ Pass

    Has a licence

    Uses MIT

  • ✕ Fail

    Endpoint responds

    Did not respond within 6 seconds when we checked

  • – Not applicable

    Sign-in with OAuth

    Did not respond within 6 seconds when we checked

  • … Not checked yet

    No hidden instructions in tool descriptions

    Not checked yet; we read the tool list when we check the endpoint

What we check → · JSON

Makers: ask for a re-check or report wrong info

Sign in

Discussion

Ask, share a tip or report that it does not work. Sorted by what people marked helpful.

No posts yet. Be the first to ask or share.

Posts here are written by users, not the PopNx team.

Sign in to post

User reviews

No reviews yet

Sign in to write a review

Compared with others in Cybersecurityi

  • More stars than 0% of the other 1064 servers in this category
  • Published to the registry more recently than 15% of the other 1064 servers in this category
  • Basic checks equal to or better than 15% of the other 1064 servers in this category

Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.

Common questions

Is Osv Dev safe?

It passed 2 of 4 applicable basic checks. We have not read the code. Before adding a key or token, see what access the server asks for and use a key with only the permissions you need.

What keys or codes does it need?

The registry does not list a required key, though some servers ask you to sign in on first use.

Does it run on my computer or in the cloud?

It runs in the maker’s cloud. Connect over the internet with nothing to install, but what you send passes through the maker’s servers.

Is it still maintained?

The GitHub repo last changed 5 months ago, and the latest version (0.1.0) reached the registry 6 months ago.

Which apps can use it?

Apps that support MCP, such as Claude Desktop, Claude Code, Cursor and VS Code. It connects by URL, so apps that accept remote MCP servers work too, such as ChatGPT on the web (full MCP on Business and above; Pro read-only).

What can I use instead?

In the same category: GitHits, Dependency Management MCP Server, Snyk MCP, Draugr, Spotdb

Similar alternatives

Same category, other makers, commands already checked. Official ones first, then by stars.

Reading a card:↓ Downloads per weeki★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi

GitHits

Search public open-source code, documentation, metadata, vulnerabilities, changelogs, and examples.

by githits-comGrowing↓ 3.8K/wk★ 136Updated 6 days ago

Computer or cloud✓ service owner · githits.com
Install

Snyk MCP

Easily find and fix security issues in your applications leveraging Snyk platform capabilities.

by snykWidely used↓ 762.1K/wk★ 62Updated 6 months ago

Runs on your computer✓ service owner · snyk.io
Install

Draugr

Security scanning for AI agents: SAST, SCA, secrets, IaC, DAST, ranked by real risk.

by draugr-devEarly★ 29Updated today

Runs on your computer✓ service owner · draugr.dev
Install

Spotdb

Ephemeral data sandbox for AI workflows with guardrails and security

by aliengiraffeEarly★ 21Updated 13 months ago

Runs on your computer✓ aliengiraffe.ai
Install
  • GitHits — Cloud or install on your computer · No key needed
  • Dependency Management MCP Server — Runs in the cloud, nothing to install · No key needed
  • Snyk MCP — Installs on your computer · No key needed
  • Draugr — Installs on your computer · No key needed
  • Spotdb — Installs on your computer · No key needed

README from the maker

Open the README

Copied from the maker’s repo as written. PopNx MCP has not reviewed or endorsed it. HTML, images and scripts are removed. Links lead off this site.

mcp-osv-dev

OSV.dev MCP — Google's open-source vulnerability database.

Part of Pipeworx — an MCP gateway connecting AI agents to 673+ live data sources.

Tools

ToolDescription
vulnerabilitiesQuery vulnerabilities by package (+ optional version) or git commit.
query_batchBatch query (≤1000 queries). Pass an array of {package: {name, ecosystem}, version?} or {commit}.
getFull vulnerability record by id (CVE-…, GHSA-…, OSV-…).

Quick Start

Add to your MCP client (Claude Desktop, Cursor, Windsurf, etc.):

{

"mcpServers": { "osv-dev": { "url": "https://gateway.pipeworx.io/osv-dev/mcp" } } }

Or connect to the full Pipeworx gateway for access to all 673+ data sources:

{

"mcpServers": { "pipeworx": { "url": "https://gateway.pipeworx.io/mcp" } } }

Using with ask_pipeworx

Instead of calling tools directly, you can ask questions in plain English:

ask_pipeworx({ question: "your question about Osv Dev data" })

The gateway picks the right tool and fills the arguments automatically.

More

License

MIT