Security and engineering teams that review dependencies and want known issues checked from an assistant.
git clone https://github.com/StacklokLabs/osv-mcp.gitThird party software. By copying, downloading or installing it you accept the Academy legal notice: you are responsible for reviewing its code and permissions before use.
Loading the file...
An MCP server for the OSV open source vulnerability database. It checks a package version or commit for known vulnerabilities, runs batch queries across several packages and returns the details of a vulnerability by its ID. It is written in Go and runs over SSE.
Security and engineering teams that review dependencies and want known issues checked from an assistant. An MCP server for the OSV open source vulnerability database. It checks a package version or commit for known vulnerabilities, runs batch queries across several packages and returns the details of a vulnerability by its ID. It is written in Go and runs over SSE.
Run this in your terminal: git clone https://github.com/StacklokLabs/osv-mcp.git
Yes. The code is on GitHub (StacklokLabs/osv-mcp) under the Apache-2.0 licence.
It passed our automatic scan for credential theft, hidden instructions and risky install commands. Third party open source software. Sabemos AI does not maintain it. Check the code and permissions before you connect it to company data.