Kodus OSV

Remote Model Context Protocol (MCP) HTTP server that wraps the OSV v1 API for on-demand open-source vulnerability lookups (example feed:https://osv.dev/list?q=%40NESTJS%2FCORE&ecosystem=npm). Exported as MCP tools so agents can query OSV directly.

bun install PORT=3000 HOST=0.0.0.0 OSV_API_URL=https://api.osv.dev/v1 bun run index.ts

{ "commit": "sha OR", "version": "version string OR", "package": { "name": "required with ecosystem if not using purl", "ecosystem": "required with name if not using purl", "purl": "pkg:pypi/jinja2 // purl OR name+ecosystem; if version is present, omit @version here" }, "pageToken": "optional pagination token from previous OSV response" }

{ "queries": [ { "commit": "sha OR", "version": "version string OR", "package": { "name": "pkg name", "ecosystem": "ecosystem", "purl": "pkg:ecosys/name" }, "pageToken": "optional" } ] }

Rules: each item follows the same rules asosv_query.

- PyPI version:{"package":{"purl":"pkg:pypi/jinja2"},"version":"3.1.4"}
- npm with name+ecosystem:{"package":{"name":"@nestjs/core","ecosystem":"npm"},"version":"10.2.10"}
- Commit lookup:{"commit":"<sha>","package":{"ecosystem":"Go","name":"github.com/foo/bar"}}

- Server log:OSV MCP server listening on http://<host>:<port>/mcp
- Curl init:curl -H "content-type: application/json" -H "accept: application/json, text/event-stream" -d '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2025-03-26","clientInfo":{"name":"curl","version":"0.0.0"},"capabilities":{}}}' http://localhost:3000/mcp
- List tools: same endpoint with{"jsonrpc":"2.0","id":2,"method":"tools/list","params":{}}

This is a web browser that enables your coding agent, such as Claude Code, to visit websites on your behalf and assist you in identifying bugs or creating UI test cases.

A FastAPI microservice for health-related operations, featuring JWT authentication and a PostgreSQL database with Alembic migrations.

MCP security gateway with DLP scanning (PII, secrets, API keys), prompt injection protection, Memory Vault, Bug Vault (295k+ patterns), and unified audit logging. Two endpoints: free bug search at /mcp and authenticated hub at /hub_mcp.

Interact with your product security findings using natural language.

The official developer experience MCP Server for Amazon DynamoDB. This server provides DynamoDB expert design guidance and data modeling assistance.

Boost security in your dev lifecycle via SAST, SCA, Secrets & IaC scanning with Cycode.

Model Context Protocol Servers Repository for OpenZeppelin Products

Enable AI agents to secure code with Semgrep.

Model Context Protocol server for Skycloak managed Keycloak. Manage clusters, realms, applications, SSO and users from any MCP client.

Dependency intelligence for AI agents. CVE scanning, health checks, upgrade planning.

An MCP server for interacting with SAP systems using ABAP Development Tools (ADT).