Skip to content
MCPpedia
Submit
MCP server
RegistryRemote

Dependency Vulnerability Check (OSV) MCP Server

Known vulnerabilities and fixed versions for npm, PyPI, Go, Maven packages from OSV.dev via Apify.

Dependency Vulnerability Check (OSV) scores 52 (Fair), with no SPDX license recorded. It can be reached as a remote MCP endpoint. It does not declare tools yet. Filed under Web scraping, Security. Install configs are generated for 10 clients. Being listed in the registry is not the same as being vendor-official.

by brunckelNo license
Install
Trust score
52Fair
Trust score 52 of 100, Fair

Fair trust

52 of 100 from six public signals. Nobody can buy a point.

  • Listed in the official MCP registry.
  • No license recorded.
How we score trust
Scorecard

License, quality and maintenance

How grades work
Trust breakdown

Where the 52 comes from

22 + 20 + 0 + 0 + 7 + 3 = 52. Each factor is capped, so no single signal can carry a listing.

Registry22 / 30

Active in the official MCP registry, plus a known vendor namespace.

Registry: 22 of 30 points.
Maintenance20 / 20

How recently the repository saw a commit or release.

Maintenance: 20 of 20 points.
Popularity0 / 20

GitHub stars and weekly downloads, on a log scale.

Popularity: 0 of 20 points.
License0 / 10

A clear, OSI-style open-source license.

License: 0 of 10 points.
Security7 / 10

Not archived, a secure install path, a pinned version.

Security: 7 of 10 points.
Docs3 / 10

A real summary, a README with depth, listed tools.

Docs: 3 of 10 points.

Install

Pick your client, copy the config, paste it in.

Remote auth: API key required. Get a key or token from the provider first, then add it as a header in your client config. How remote auth works

Add to Cursor: Dependency Vulnerability Check (OSV)Install in VS Code: Dependency Vulnerability Check (OSV)Install in VS Code Insiders: Dependency Vulnerability Check (OSV)

Needs Cursor or VS Code installed on this device. The button opens the app and asks you to confirm before it adds the server.

~/Library/Application Support/Claude/claude_desktop_config.json
{  "mcpServers": {    "brunckel-dependency-vuln-check": {      "url": "https://mcp.apify.com/?tools=implementable_antler/dependency-vuln-check"    }  }}
Install guide

Environment variables

This server does not declare environment variables.

Tools

All capabilities

Tools show up when the registry metadata or the repository README lists them. Public READMEs are read directly. A GitHub token is used only when one is already configured.

About

Known vulnerabilities and fixed versions for npm, PyPI, Go, Maven packages from OSV.dev via Apify.

Frequently asked questions

What is Dependency Vulnerability Check (OSV) MCP Server?

Known vulnerabilities and fixed versions for npm, PyPI, Go, Maven packages from OSV.dev via Apify.

How do I install Dependency Vulnerability Check (OSV) MCP Server in Claude Desktop, Cursor, or VS Code?

Pick your client in the Install section on this page and copy the generated config into the client's config file. Step-by-step guides: Claude Desktop, Cursor, and VS Code. Dependency Vulnerability Check (OSV) MCP Server connects to the remote endpoint https://mcp.apify.com/?tools=implementable_antler/dependency-vuln-check, so there is nothing to install locally.

Does Dependency Vulnerability Check (OSV) MCP Server support remote (HTTP) connections?

Yes. Dependency Vulnerability Check (OSV) MCP Server offers a hosted endpoint over Streamable HTTP, so HTTP-capable clients can connect to it without running anything locally.

How is Dependency Vulnerability Check (OSV) MCP Server's trust score calculated?

Dependency Vulnerability Check (OSV) MCP Server scores 52 out of 100 (Fair). The score adds six capped public signals: registry status, maintenance, popularity, license, documentation, and security. Nobody can pay for points. Read the methodology for the full formula.

Reviews

No reviews yet

—Be the first to review

5 star0 reviews at 5 stars
4 star0 reviews at 4 stars
3 star0 reviews at 3 stars
2 star0 reviews at 2 stars
1 star0 reviews at 1 stars

No published reviews yet. Used it? Tell the next person how it went.

Add badge to your README

Paste either snippet into the repository README. The image links to this listing.

Listed on MCPpedia

Top 5 MCP servers

Daily or weekly. Confirm by email, unsubscribe any time.

How often

Manage this listing

Claim this server
Same category
All alternatives
Scrapling MCP Server logo
Trust score 77 of 100, Good

Web scraping with stealth HTTP, real browsers, and Cloudflare bypass. CSS selectors supported.

Registry
LicenseQualityMaintenanceLicense: A. BSD-3-Clause is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 22 days ago.
88K stars—/wk weekly downloads— tools
mobile-mcp logo
Trust score 77 of 100, Good

mobile-mcp

by mobile-next · TypeScript

MCP server for iOS and Android Mobile Development, Automation and Testing

Registry
LicenseQualityMaintenanceLicense: A. Apache-2.0 is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 13 days ago.
10K stars—/wk weekly downloads— tools
Trust score 77 of 100, Good

Firecrawl, the context API for AI agents: search, scrape, interact with the web, plus paper search.

RegistryRemote
LicenseQualityMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 13 days ago.
7.7K stars—/wk weekly downloads— tools
Trust score 76 of 100, Good

virustotal

by burtthecoder · TypeScript

MCP server for querying VirusTotal API with comprehensive security analysis tools.

Registry
LicenseQualityMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 15 days ago.
151 stars403/wk weekly downloads— tools
Trust score 76 of 100, Good

shodan

by burtthecoder · TypeScript

MCP server for Shodan API — device search, IP and domain recon, DNS, and CVE/CPE queries.

Registry
LicenseQualityMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 19 days ago.
178 stars344/wk weekly downloads— tools
Xquik MCP Server logo
Trust score 74 of 100, Good

Xquik MCP Server

by xquik-dev · JavaScript

Xquik is the world's fastest and cheapest X (Twitter) data API with the most complete X data.

RegistryRemote
LicenseQualityMaintenanceLicense: A. MIT is a permissive open source license.Quality: Not graded. No README or tool list has been captured yet.Maintenance: A. Last commit or release 19 days ago.
214 stars367/wk weekly downloads— tools