io.github.cyanheads

osv-advisory-mcp-server

Query OSV.dev for package vulnerabilities and batch-audit dependency lists via MCP.

Hosted
communityservice

Deployment

Hosted
streamable-httphttps://osv-advisory.caseyjhand.com/mcp

Package Details

@cyanheads/osv-advisory-mcp-server

0.1.12•https://www.npmjs.com/package/@cyanheads/osv-advisory-mcp-server
Transportstdio
Runtimebun

Package Arguments

Positional
Position 0
run
Position 1
start:stdio

Environment Variables

OSV_REQUEST_TIMEOUT_MS(str)
Default:10000

HTTP request timeout in milliseconds for OSV.dev API calls.

OSV_BATCH_CONCURRENCY(str)
Default:10

Maximum number of concurrent OSV.dev requests issued by osv_query_batch.

OSV_QUERY_MAX_PAGES(str)
Default:10

Maximum number of OSV.dev result pages osv_query_package follows before marking a result truncated.

MCP_LOG_LEVEL(str)
Default:info

Sets the minimum log level for output (e.g., 'debug', 'info', 'warn').

@cyanheads/osv-advisory-mcp-server

0.1.12•https://www.npmjs.com/package/@cyanheads/osv-advisory-mcp-server
TransportStreamable HTTP
Runtimebun

Package Arguments

Positional
Position 0
run
Position 1
start:http

Environment Variables

OSV_REQUEST_TIMEOUT_MS(str)
Default:10000

HTTP request timeout in milliseconds for OSV.dev API calls.

OSV_BATCH_CONCURRENCY(str)
Default:10

Maximum number of concurrent OSV.dev requests issued by osv_query_batch.

OSV_QUERY_MAX_PAGES(str)
Default:10

Maximum number of OSV.dev result pages osv_query_package follows before marking a result truncated.

MCP_HTTP_HOST(str)
Default:127.0.0.1

The hostname for the HTTP server.

MCP_HTTP_PORT(str)
Default:3010

The port to run the HTTP server on.

MCP_HTTP_ENDPOINT_PATH(str)
Default:/mcp

The endpoint path for the MCP server.

MCP_AUTH_MODE(str)
Default:none

Authentication mode to use: 'none', 'jwt', or 'oauth'.

MCP_LOG_LEVEL(str)
Default:info

Sets the minimum log level for output (e.g., 'debug', 'info', 'warn').