OSV data API

3 endpoints for OSV: vuln, vulnerabilities, batch. One API key, one JSON schema, as MCP tools or REST.

Endpoints

Call any of them over MCP with call_endpoint and its path, or over REST.

Endpoint	Returns	Credits	Cache
vulnGET /v1/osv/vuln	One OSV vulnerability: summary, affected packages and versions, CVSS vectors, CWE ids and references.	5	10 min
vulnerabilitiesGET /v1/osv/vulnerabilities	Known OSV advisories for one package, newest id first, with the fixed versions.	5	2 min
batchGET /v1/osv/batch	Advisories for a batch of packages in one call, each row with summary, severity and fixed versions.	5	2 min

Connect your agent over MCP

Remote MCP server: https://data.openkrill.app/mcp with your key in the x-api-key header.

Claude Code · Run in a terminal

claude mcp add --transport http krilldata \
  https://data.openkrill.app/mcp \
  --header "x-api-key: YOUR_API_KEY"

Cursor · Add to ~/.cursor/mcp.json

{
  "mcpServers": {
    "krilldata": {
      "url": "https://data.openkrill.app/mcp",
      "headers": {
        "x-api-key": "YOUR_API_KEY"
      }
    }
  }
}

Claude Desktop · Add to claude_desktop_config.json

{
  "mcpServers": {
    "krilldata": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-remote",
        "https://data.openkrill.app/mcp",
        "--header",
        "x-api-key:${API_KEY}"
      ],
      "env": {
        "API_KEY": "YOUR_API_KEY"
      }
    }
  }
}