Skip to content
Squatch MCP
Sign in

io.github.cyanheads/osv-advisory-mcp-server

io.github.cyanheads/osv-advisory-mcp-server

by io.github.cyanheads· v0.5.1Source: Official MCP Registry
Sign in to watchSign in to claim this server

All versions

VersionRegistry status
0.5.1latestActive
0.5.0Active
0.4.1Active
0.4.0Active
0.3.0Active
0.2.0Active
0.1.9Active
0.1.8Active
0.1.7Active
0.1.6Active
0.1.5Active
0.1.4Active
0.1.3Active
0.1.2Active
0.1.16Active
0.1.15Active
0.1.14Active
0.1.13Active
0.1.12Active
0.1.11Active
0.1.10Active
0.1.1Active
0.1.0Active

Version details

Version
0.5.1
Source
Source: Official MCP Registry
Published
Registry last updated
First observed by Squatch
Content fingerprint
d8f23d7d09f714e4c9c5e2b0789557448e94d78125f323b24710f88acc0ae15e

Transports in this version

  • remotestreamable-httphttps://osv-advisory.caseyjhand.com/mcpNo authentication
  • packagestdionpm @cyanheads/osv-advisory-mcp-serverUnknown
  • packagestreamable-httpnpm @cyanheads/osv-advisory-mcp-serverUnknown
Registry metadata (server.json, sanitized)
{
  "_meta": {
    "io.modelcontextprotocol.registry/official": {
      "status": "active",
      "isLatest": true,
      "updatedAt": "2026-11-14T07:03:08.993358Z",
      "publishedAt": "2026-11-14T07:03:08.993358Z",
      "statusChangedAt": "2026-11-14T07:03:08.993358Z"
    }
  },
  "server": {
    "name": "io.github.cyanheads/osv-advisory-mcp-server",
    "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
    "remotes": [
      {
        "url": "https://osv-advisory.caseyjhand.com/mcp",
        "type": "streamable-http"
      }
    ],
    "version": "0.5.1",
    "packages": [
      {
        "version": "0.5.1",
        "transport": {
          "type": "stdio"
        },
        "identifier": "@cyanheads/osv-advisory-mcp-server",
        "runtimeHint": "npx",
        "registryType": "npm",
        "registryBaseUrl": "https://registry.npmjs.org",
        "environmentVariables": [
          {
            "name": "OSV_REQUEST_TIMEOUT_MS",
            "format": "string",
            "default": "40000",
            "description": "HTTP request timeout in milliseconds for OSV.dev API calls."
          },
          {
            "name": "OSV_BATCH_CONCURRENCY",
            "format": "string",
            "default": "10",
            "description": "Maximum number of concurrent OSV.dev requests issued by osv_query_batch."
          },
          {
            "name": "OSV_QUERY_MAX_PAGES",
            "format": "string",
            "default": "10",
            "description": "Maximum number of OSV.dev result pages followed per package or commit before marking a result truncated."
          },
          {
            "name": "MCP_LOG_LEVEL",
            "format": "string",
            "default": "info",
            "description": "Sets the minimum log level for output (e.g., 'debug', 'info', 'warn')."
          },
          {
            "name": "OSV_BATCH_SERVE_OVER_CAP",
            "format": "string",
            "default": "true",
            "description": "Accept up to 5000 packages and process the first 1000. Set false to reject submissions over 1000."
          }
        ]
      },
      {
        "version": "0.5.1",
        "transport": {
          "url": "http://localhost:3010/mcp",
          "type": "streamable-http"
        },
        "identifier": "@cyanheads/osv-advisory-mcp-server",
        "runtimeHint": "npx",
        "registryType": "npm",
        "registryBaseUrl": "https://registry.npmjs.org",
        "environmentVariables": [
          {
            "name": "MCP_TRANSPORT_TYPE",
            "value": "http",
            "format": "string",
            "description": "Selects the HTTP transport."
          },
          {
            "name": "OSV_REQUEST_TIMEOUT_MS",
            "format": "string",
            "default": "40000",
            "description": "HTTP request timeout in milliseconds for OSV.dev API calls."
          },
          {
            "name": "OSV_BATCH_CONCURRENCY",
            "format": "string",
            "default": "10",
            "description": "Maximum number of concurrent OSV.dev requests issued by osv_query_batch."
          },
          {
            "name": "OSV_QUERY_MAX_PAGES",
            "format": "string",
            "default": "10",
            "description": "Maximum number of OSV.dev result pages followed per package or commit before marking a result truncated."
          },
          {
            "name": "MCP_HTTP_HOST",
            "format": "string",
            "default": "127.0.0.1",
            "description": "The hostname for the HTTP server."
          },
          {
            "name": "OSV_BATCH_SERVE_OVER_CAP",
            "format": "string",
            "default": "true",
            "description": "Accept up to 5000 packages and process the first 1000. Set false to reject submissions over 1000."
          },
          {
            "name": "MCP_HTTP_PORT",
            "format": "string",
            "default": "3010",
            "description": "The port to run the HTTP server on."
          },
          {
            "name": "MCP_HTTP_ENDPOINT_PATH",
            "format": "string",
            "default": "/mcp",
            "description": "The endpoint path for the MCP server."
          },
          {
            "name": "MCP_AUTH_MODE",
            "format": "string",
            "default": "none",
            "description": "Authentication mode to use: 'none', 'jwt', or 'oauth'."
          },
          {
            "name": "MCP_SESSION_MODE",
            "format": "string",
            "default": "stateless",
            "description": "HTTP session mode. This server deploys stateless because its tools do not use multi-round input."
          },
          {
            "name": "MCP_LOG_LEVEL",
            "format": "string",
            "default": "info",
            "description": "Sets the minimum log level for output (e.g., 'debug', 'info', 'warn')."
          }
        ]
      }
    ],
    "repository": {
      "url": "https://github.com/cyanheads/osv-advisory-mcp-server",
      "source": "github"
    },
    "description": "Query OSV.dev for package vulnerabilities and batch-audit dependency lists via MCP."
  }
}