English Français العربية

OSV Dependency Vulnerability Check

Official registry Security

Check npm, PyPI, Go and Maven packages or lockfiles against OSV.dev: CVEs, CVSS, fixed versions.

Source code Website

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

Remote (streamable-http)
Claude Code 
claude mcp add --transport http osv-dependency-vulnerability-check 'https://mcp.apify.com/?tools=fetch-actor-details,fairquery/osv-dependency-vulnerability-check' --header 'Authorization: <Bearer <your Apify API token>. Optional for clients that support Apify OAuth. Runs are billed to your own Apify account (pay per event).>'
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "osv-dependency-vulnerability-check": {
            "type": "http",
            "url": "https://mcp.apify.com/?tools=fetch-actor-details,fairquery/osv-dependency-vulnerability-check",
            "headers": {
                "Authorization": "<Bearer <your Apify API token>. Optional for clients that support Apify OAuth. Runs are billed to your own Apify account (pay per event).>"
            }
        }
    }
}

Frequently asked questions

What is OSV Dependency Vulnerability Check?

Check npm, PyPI, Go and Maven packages or lockfiles against OSV.dev: CVEs, CVSS, fixed versions.

How do I install OSV Dependency Vulnerability Check?

It runs as a remote server. In Claude Code: claude mcp add --transport http osv-dependency-vulnerability-check 'https://mcp.apify.com/?tools=fetch-actor-details,fairquery/osv-dependency-vulnerability-check' --header 'Authorization: <Bearer <your Apify API token>. Optional for clients that support Apify OAuth. Runs are billed to your own Apify account (pay per event).>'. For other clients, paste the JSON configuration from this page into their MCP settings.

Does OSV Dependency Vulnerability Check need an API key?

Yes. It expects Authorization, which you set in its configuration.

Is OSV Dependency Vulnerability Check open source?

Its code is public on GitHub, but the repository does not declare a standard license.

Who maintains OSV Dependency Vulnerability Check?

It is published by fairquery. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.