Query OSV.dev for package vulnerabilities, batch-audit dependency lists, and fetch full advisory records via MCP. STDIO or Streamable HTTP.
Latest release v0.3.0 — v0.3.0: PURL and commit vulnerability queries · 18 Oct 2026
2 files for Codex, OpenCode and Claude Code: osv-advisory-mcp-server AGENTS.md, osv-advisory-mcp-server CLAUDE.md — 14,050 tokens loaded in every session.
AGENTS.md A 7,025 tok CLAUDE.md A 7,025 tok These files are cyanheads/osv-advisory-mcp-server's own configuration — they tell Codex, OpenCode and Claude Code how to work on this repository, so they are not mods to install elsewhere. Copy one as a starting point and replace the parts that are about this project.