English Français العربية

Dependency Vulnerability Check (OSV)

Official registry Security

Known vulnerabilities and fixed versions for npm, PyPI, Go, Maven packages from OSV.dev via Apify.

Website

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

Remote (streamable-http)
Claude Code 
claude mcp add --transport http dependency-vulnerability-check-osv 'https://mcp.apify.com/?tools=implementable_antler/dependency-vuln-check' --header 'Authorization: <Your Apify API token as '\''Bearer <APIFY_TOKEN>'\'' (from console.apify.com/settings/integrations). Actor runs bill to your Apify account.>'
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "dependency-vulnerability-check-osv": {
            "type": "http",
            "url": "https://mcp.apify.com/?tools=implementable_antler/dependency-vuln-check",
            "headers": {
                "Authorization": "<Your Apify API token as 'Bearer <APIFY_TOKEN>' (from console.apify.com/settings/integrations). Actor runs bill to your Apify account.>"
            }
        }
    }
}

Frequently asked questions

What is Dependency Vulnerability Check (OSV)?

Known vulnerabilities and fixed versions for npm, PyPI, Go, Maven packages from OSV.dev via Apify.

How do I install Dependency Vulnerability Check (OSV)?

It runs as a remote server. In Claude Code: claude mcp add --transport http dependency-vulnerability-check-osv 'https://mcp.apify.com/?tools=implementable_antler/dependency-vuln-check' --header 'Authorization: <Your Apify API token as '\''Bearer <APIFY_TOKEN>'\'' (from console.apify.com/settings/integrations). Actor runs bill to your Apify account.>'. For other clients, paste the JSON configuration from this page into their MCP settings.

Does Dependency Vulnerability Check (OSV) need an API key?

Yes. It expects Authorization, which you set in its configuration.

Who maintains Dependency Vulnerability Check (OSV)?

It is published by brunckel. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.