Osv Scanner MCP
Verified · npm:osv-scanner-mcpMCP server by tedorigawa001 · updated · ★ 0 · 2.4k downloads a week
MCP server that wraps Google's OSV-Scanner to scan Java projects for known vulnerabilities Osv Scanner MCP is published by npm:osv-scanner-mcp from its verified domain in the official MCP Registry.
Last commit 3 days ago
Apache-2.0: permissive, fine for commercial use
Clear description, published package or server URL, original repository
Not checked yet. What we check
Install Osv Scanner MCP
Built from the published package, never by AIclaude mcp add osv-scanner-mcp -- npx -y osv-scanner-mcpRun in your terminal. Add --scope user to use it in every project.
{
"mcpServers": {
"osv-scanner-mcp": {
"command": "npx",
"args": [
"-y",
"osv-scanner-mcp"
]
}
}
}Settings, Developer, Edit config. Paste into claude_desktop_config.json and restart.
{
"mcpServers": {
"osv-scanner-mcp": {
"command": "npx",
"args": [
"-y",
"osv-scanner-mcp"
]
}
}
}Add to ~/.cursor/mcp.json (all projects) or .cursor/mcp.json (this project).
{
"servers": {
"osv-scanner-mcp": {
"command": "npx",
"args": [
"-y",
"osv-scanner-mcp"
]
}
}
}Add to .vscode/mcp.json. VS Code uses "servers", not "mcpServers".
codex mcp add osv-scanner-mcp -- npx -y osv-scanner-mcp{
"mcpServers": {
"osv-scanner-mcp": {
"command": "npx",
"args": [
"-y",
"osv-scanner-mcp"
]
}
}
}Add to ~/.gemini/config/mcp_config.json (all projects) or .agents/mcp_config.json (this project).
gemini mcp add osv-scanner-mcp npx -y osv-scanner-mcpGemini CLI was replaced by Antigravity CLI in June 2026 and remains only for enterprise licences and paid API keys.
MCP servers run with your permissions and can read what you give them access to. Some need an API key: check the README and add it under env in the osv-scanner-mcp block.
Alternatives to Osv Scanner MCP
All alternatives →Your OpenWork org's skills, plugins, workflows, and connections through one OAuth MCP URL.
Model Context Protocol registry, transports, and OAuth bridges for Electric Agents
Remote proxy for Model Context Protocol, allowing local-only clients to connect to remote servers using oAuth
Public Preview — Security proxy for MCP servers: The Firewall for Model Context Protocol
OAuth MCP for Google, Meta, X, LinkedIn, Reddit, TikTok, GSC, GA4, WordPress and GHL.
Register [Model Context Protocol](https://modelcontextprotocol.io) servers as tool integrations for an executor. Supports both stdio-launched servers and remote (HTTP) servers, with optional OAuth.
Osv Scanner MCP: common questions
How do I install Osv Scanner MCP?
In Claude Code run claude mcp add osv-scanner-mcp -- npx -y osv-scanner-mcp. For Claude Desktop, Cursor and VS Code, paste the config shown above and restart. See the install guides.
Is Osv Scanner MCP the official server?
Osv Scanner MCP is published by npm:osv-scanner-mcp from its verified domain in the official MCP Registry.
Is Osv Scanner MCP free?
The code is published under the Apache-2.0 licence. The service it connects to may have its own pricing.
Is Osv Scanner MCP safe to use?
It scores 84 of 100. Grades: maintenance A, licence A, quality C. The security check has not run for it yet. Review the code before you install. How grades work.
What are alternatives to Osv Scanner MCP?
Similar MCP servers: OpenWork MCP Gateway, Agents MCP, MCP Remote, Agentmesh MCP Proxy.
Does Osv Scanner MCP work with ChatGPT?
Not directly. It runs locally, and ChatGPT only connects to remote servers with a URL. Use it in Claude Code, Claude Desktop, Cursor, VS Code or Codex.
