How do I install mcp-osv?

Its README did not state an install command plainly enough for us to quote one, so we do not guess. The repository has the instructions: https://github.com/kodustech/mcp-osv

Is mcp-osv official and is it maintained?

We found nothing naming it as a vendor’s official server. Its repository has 2 GitHub stars and its state in our directory is listed. Its last commit we recorded was on 2025-11-20.

What licence does mcp-osv use?

The repository declares the MIT licence.

InfratoApp / Resources / MCP servers / mcp-osv

mcp-osv

mcp-osv is an MCP server, listed under security. Its repository has 2 GitHub stars and is licensed under MIT; we last read it on 2026-10-22.

This software exposes OSV (version 1) data via an HTTP server, allowing lookup of open source vulnerabilities using osv_query or osv_query_batch tools.

Install

MCP servers are packaged differently from each other -- some run via npx, some as a Docker image, some as a plain script you clone and run. mcp-osv’s own README did not state one plainly enough for this page to quote it rather than guess, so it will not guess. The repository below states it.

Read mcp-osv’s own install instructions ↗

What it reaches, and what it needs

Reaches

○ not recognised

Credential

○ none found

Maintenance

Stars

State

listed

Licence

MIT

From the repository

Free Kodus MCP HTTP server exposing OSV (v1) for open source vulnerability lookup via osv_query/osv_query_batch tools.

View on GitHub ↗2026-10-22

mcp-osv compared with similar servers

mcp-osv compared with the closest alternatives, by services reached, credentials, stars, last update and licence
Server	Reaches	Needs	Stars	Last update	Licence
mcp-osv (this page)	—	None listed	2	2025-11-20	MIT
ida-pro-mcp	—	None listed	13,080	2026-09-26	MIT
mcp-shodan	shodan	SHODAN_API_KEY	178	2026-10-19	MIT
mcp-server-idapro	—	None listed	103	2025-03-26	MIT
search-solodit-mcp	—	None listed	42	2025-06-30	—
opencti-mcp	opencti	OPENCTI_TOKEN	40	2026-08-03	MIT

Ranked by services in common with mcp-osv, then by stars. Figures are from each repository when we last read it.

Common questions about mcp-osv

What does mcp-osv do?: This software exposes OSV (version 1) data via an HTTP server, allowing lookup of open source vulnerabilities using osv_query or osv_query_batch tools.
How do I install mcp-osv?: Its README did not state an install command plainly enough for us to quote one, so we do not guess. The repository has the instructions: https://github.com/kodustech/mcp-osv
Is mcp-osv official and is it maintained?: We found nothing naming it as a vendor’s official server. Its repository has 2 GitHub stars and its state in our directory is listed. Its last commit we recorded was on 2025-11-20.
What licence does mcp-osv use?: The repository declares the MIT licence.

More MCP servers for security

ida-pro-mcp13,080 stars
mcp-shodan178 stars
mcp-server-idapro103 stars
search-solodit-mcp42 stars
opencti-mcp40 stars
MalwareBazaar_MCP30 stars

All security entries →