Kodus OSV

Created at 13 days ago

by Kodus

starstarstarstarstar

Kodus MCP HTTP server exposing OSV (v1) for open source vulnerability lookup via osv_query/osv_query_batch tools.

Categories

research-and-data

Tags

devtools

security

code-quality

code-review

What is Kodus OSV?

Kodus OSV is a Remote Model Context Protocol (MCP) HTTP server that provides an interface for open-source vulnerability lookups using the OSV v1 API.

How to use Kodus OSV?

To use Kodus OSV, install Bun, set the required environment variables, and run the server. You can then access the MCP endpoint to perform vulnerability queries.

Key features of Kodus OSV?

  • Streamable HTTP MCP endpoint at /mcp.
  • Tools for querying vulnerabilities: osv_query for single targets and osv_query_batch for multiple targets.
  • Configurable base URL for the OSV API.
  • Clear schemas and validation to assist in querying.

Use cases of Kodus OSV?

  1. Performing vulnerability lookups for specific packages in various ecosystems.
  2. Integrating with development tools for real-time vulnerability assessment.
  3. Batch querying for multiple packages to streamline security audits.

FAQ from Kodus OSV?

  • What is the purpose of Kodus OSV?

Kodus OSV helps developers and security teams quickly identify vulnerabilities in open-source packages.

  • How do I set up Kodus OSV?

Follow the quick start guide to install Bun, configure environment variables, and run the server.

  • Can I use Kodus OSV for multiple programming ecosystems?

Yes! Kodus OSV supports various ecosystems like npm, PyPI, and more.

View More