Osv Scanner MCP Server

by tedorigawa001

MCP server that wraps Google's OSV-Scanner to scan Java projects for known vulnerabilities

0Node.jsstdio

context tax

pending

security

pending

cold start

pending

freshness

pending

Our reading of Osv Scanner, from the data

Osv Scanner is a security MCP server from tedorigawa001.

We haven't measured its tool list yet, so its token cost is unknown.

With 0 GitHub stars it ranks #579 of 1,263 security servers we index.

It runs locally on your machine over stdio.

Install Osv Scanner MCP server

claude mcp add osv-scanner -- npx -y osv-scanner-mcp

{
  "mcpServers": {
    "osv-scanner": {
      "command": "npx",
      "args": [
        "-y",
        "osv-scanner-mcp"
      ]
    }
  }
}

Add to ~/.cursor/mcp.json (global) or .cursor/mcp.json (project).

{
  "mcpServers": {
    "osv-scanner": {
      "command": "npx",
      "args": [
        "-y",
        "osv-scanner-mcp"
      ]
    }
  }
}

Settings → Developer → Edit Config (claude_desktop_config.json), then restart.

{
  "servers": {
    "osv-scanner": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "osv-scanner-mcp"
      ]
    }
  }
}

Add to .vscode/mcp.json in your workspace.

{
  "mcpServers": {
    "osv-scanner": {
      "command": "npx",
      "args": [
        "-y",
        "osv-scanner-mcp"
      ]
    }
  }
}

Add to ~/.codeium/windsurf/mcp_config.json.

Freshness

Not enough public signals yet to judge maintenance.

Last commit (default branch)
2026-10-17 · 1d ago · GitHub
Latest release
2026-10-07 · 11d ago · GitHub · v0.7.1
Package published
no data · npm/PyPI
Registry entry updated
no data · official registry

How it compares in Security

Against the most-starred security servers we index. Token cost is per model turn, measured from each server's live tool list.

Server	Stars	Tools	Tokens / turn	Freshness	Runs
Osv Scanner (this)	0	—	not measured	—	local
Semgrep	17,123	—	not measured	Active	—
Ida Pro	13,002	—	not measured	Active	—
Ghidra	11,390	—	not measured	Abandoned	—
Robin: AI-Powered Dark Web OSINT	7,591	—	not measured	Active	local
Claude Code Ultimate Guide	6,196	—	not measured	Active	local

All security MCP servers

FAQ

›How do I install the Osv Scanner MCP server in Claude Code?

Run: claude mcp add osv-scanner -- npx -y osv-scanner-mcp. For Cursor, VS Code, Claude Desktop and Windsurf, use the install tabs above.

›Does Osv Scanner require an API key?

No required environment variables are declared in its published metadata.

›Can I use Osv Scanner as a remote (hosted) MCP server?

No hosted endpoint is published; it runs locally over stdio.

›Is Osv Scanner in the official MCP registry?

No. It was indexed from npm.

Sources and method

GitHub repository: fetched 2026-10-19
Package registry (npm / PyPI): listed
Last checked against all sources: 2026-10-19

The description, packages and links come from the maintainer's own published metadata. Token cost, security signals, freshness and the reading above are MCPSkillHub's own measurements; see the methodology. Spot an error? Request a correction or claim the listing.