ossfind
Safety-ranked open-source component discovery for agents across six package ecosystems.
Install
Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).
ossfindclaude mcp add ossfind -e 'GITHUB_TOKEN=<your github_token>' -e 'LIBRARY_IO_API_KEY=<your library_io_api_key>' -e 'OSSFIND_FIXTURES=<OSSFIND_FIXTURES>' -- npx -y ossfind@0.1.12
{
"mcpServers": {
"ossfind": {
"command": "npx",
"args": [
"-y",
"ossfind@0.1.12"
],
"env": {
"GITHUB_TOKEN": "<your github_token>",
"LIBRARY_IO_API_KEY": "<your library_io_api_key>",
"OSSFIND_FIXTURES": "<OSSFIND_FIXTURES>"
}
}
}
}
Environment variables
GITHUB_TOKENsecret Optional. Raises the GitHub repository-search rate limit; discovery works without it.LIBRARY_IO_API_KEYsecret Optional libraries.io key, used as the PyPI discovery fallback when no local index has been built. Without it, and without an index, PyPI search reports itself unavailable rather than returning nothing.OSSFIND_FIXTURESSet to 1 to run fully offline against frozen supplier responses, for evaluation without network access.
Frequently asked questions
What is ossfind?
Safety-ranked open-source component discovery for agents across six package ecosystems.
How do I install ossfind?
It runs on your machine. In Claude Code: claude mcp add ossfind -e 'GITHUB_TOKEN=<your github_token>' -e 'LIBRARY_IO_API_KEY=<your library_io_api_key>' -e 'OSSFIND_FIXTURES=<OSSFIND_FIXTURES>' -- npx -y ossfind@0.1.12. For other clients, paste the JSON configuration from this page into their MCP settings.
Does ossfind need an API key?
Yes. It expects GITHUB_TOKEN, LIBRARY_IO_API_KEY, which you set in its configuration.
Is ossfind open source?
Its code is public on GitHub, but the repository does not declare a standard license.
Who maintains ossfind?
It is published by Aniket-kr1030. AI.tn lists it but does not maintain or endorse it.
From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.