AI Atlas

Developer Tools · Security

MCP Osv logo

MCP Osv

gleicon/mcp-osv

A Model Context Protocol (MCP) server providing comprehensive security analysis capabilities through integration with OSV.dev vulnerability database and native Go-based code analysis and secret detection engines.

View on GitHub7

Install

Client configuration

{
  "mcpServers": {
    "security_analyst": {
      "command": "/usr/local/bin/mcp-osv"
    }
  }
}
GitHub stars
7
Author
@gleicon
Category
Developer Tools, Security
License
MIT
Updated
Oct 6, 2026

Features

  • Supply Chain Vulnerability Analysis: Integration with OSV.dev API for dependency vulnerability assessment

  • Secret Detection: Gitleaks v8 integration with 100+ built-in detection rules for credentials and API keys

  • Static Code Analysis: AST-based Go code analysis for security anti-patterns

  • Pattern Matching: Regex-based detection for common security vulnerabilities

  • MCP Protocol Support: Standard protocol implementation for AI assistant integration

  • Community-Vetted Rules: Gitleaks patterns maintained by the security community

Tools (3)

  • check_vulnerabilities

    Query OSV.dev database for known vulnerabilities in specific package versions.

  • analyze_security

    Comprehensive security analysis combining multiple detection engines.

  • scan_secrets

    Dedicated secret detection using Gitleaks v8 with 100+ community-maintained detection rules.

Details on this page are taken from the project's README. Open README

Supported clients

Clients mentioned in this server's README:

View all
Claude Desktop logo

Claude Desktop

Desktop · Freemium · Proprietary

Anthropic's official Claude AI desktop application. Supports MCP servers to extend functionality.

WindowsMacOS
Cursor logo

Cursor

Desktop · Freemium · Proprietary

The first agentic IDE. The Cursor editor truly merges how developers and AI work together, delivering a magical coding experience.

WindowsMacOSLinux

Related MCP servers

More servers
Playwright logo

Playwright

microsoft/playwright

72.2k

Playwright is a framework for web automation and testing. It drives Chromium, Firefox, and WebKit with a single API — in your tests, in your scripts, and as a tool for AI agents.

Developer Tools
repomix logo

repomix

yamadashy/repomix

15.2k

Repomix is a tool that packs a codebase into an AI-friendly format, supporting local and remote repository processing and providing code compression, security checks and multiple output formats.

Developer Tools
UI-TARS-desktop logo

UI-TARS-desktop

bytedance/UI-TARS-desktop

12.9k

TARS is ByteDance's multimodal AI agent stack, shipping two projects: Agent TARS (a CLI and Web UI agent built on MCP) and UI-TARS-desktop (a desktop GUI agent).

Developer Tools
blender logo

blender

ahujasid/blender-mcp

10.6k

formerly blender-mcp — the PyPI package is now mcp-for-blender. Existing setups keep working; no config change is required. Read more.

Developer Tools
Playwright Browser Automation logo

Playwright Browser Automation

microsoft/playwright-mcp

9.2k

A Model Context Protocol (MCP) server that provides browser automation capabilities using Playwright. This server enables LLMs to interact with web pages through structured accessibility snapshots, bypassing the need for screenshots or visually-tuned models.

Developer Tools
2344 logo

2344

comet-ml/opik

7k

Opik is the open-source LLM observability and evaluation platform for AI agent tracing, LLM evaluation, prompt management, and production monitoring. Built by Comet. Apache-2.0 licensed, free to self-host the full platform, with 20,000+ GitHub stars.

Developer Tools