1. Conduid
  2. Data
  3. Osidb MCP
MCP server · Data

Osidb MCP

by · github.com/vdanen/osidb-mcp

An MCP server for the OSIDB open source flaw database

Unclaimed data
InstallView source
34Low

Scored a month ago · breakdown

About Osidb MCP

Osidb MCP is an MCP server published by vdanen in the Data category: an MCP server for the OSIDB open source flaw database.

The repository has 2 stars and 2 forks, with the last commit 4 months ago. Recent commit activity is the strongest signal that reported issues will get attention.

Install

From source
git clone https://github.com/vdanen/osidb-mcp

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Tools (24)

affect_cvss_scores_listPaginated **CVSS** rows for one affect (by affect uuid); optional allowlisted `extra_query`.

Parameters not published.

affect_getSingle **affect** by OSIDB uuid; optional field projection and `include_history`.

Parameters not published.

affects_listRows keyed by **affect** with `flaw__*` filters; scope flaw by **`flaw_cve_id`** / **`flaw_cve_id_in`** or **`flaw_uuid`** / **`flaw_uuid_in`** when there is no CVE.

Parameters not published.

flaw_acknowledgments_listPaginated **acknowledgments** for a flaw id (CVE or `uuid`).

Parameters not published.

flaw_comments_listPaginated **discussion comments** for a flaw id.

Parameters not published.

flaw_cvss_scores_listPaginated **CVSS score** rows (issuer/version/vector) for a flaw id.

Parameters not published.

flaw_getOne flaw by CVE id or internal **`uuid`**; optional `include_fields` / `exclude_fields`. Adds **`osidb_flaw_uuid`** at top level when there is no CVE yet.

Parameters not published.

flaw_labels_listPaginated flaw **collaborator labels** for a flaw id.

Parameters not published.

flaw_package_versions_listPaginated **package version** rows for a flaw id.

Parameters not published.

flaw_references_listPaginated **external references** (URLs, advisory refs, etc.) for a flaw id.

Parameters not published.

Show all 24 tools
flaws_countSame filter surface as `flaws_list` but returns **count** only (no flaw bodies).

Parameters not published.

flaws_listRaw list API: components, nested affects filters (`affects_ps_*`), workflow, impact, owner, embargo, dates, `search`, allowlisted `extra_query` (OSIDB v2 query keys); `limit` ≤ 100. Success responses include **`identifier_hint`** (CVE vs `uuid`).

Parameters not published.

flaws_searchFull-text search over flaws (`search` parameter); paginated like list APIs. Success responses include **`identifier_hint`**.

Parameters not published.

get_cve_summaryExecutive rollups: counts **by severity** and **by workflow** plus total under shared filters (`group_by`: `severity` \

Parameters not published.

get_flaw_detailsFull flaw plus **affects** and **trackers**; `flaw_id` is CVE or **`uuid`**. If no CVE, nested lists use **`flaw__uuid`** / **`affects__flaw__uuid`**.

Parameters not published.

get_pending_exploit_actions**[EXPERIMENTAL]** `GET /exploits/api/v1

Parameters not published.

labels_listPaginated **global** OSIDB labels (`GET /labels`); optional allowlisted `extra_query`.

Parameters not published.

osidb_statusOSIDB API health / status payload (good connectivity check).

Parameters not published.

osidb_whoamiCurrent authenticated user / profile from `GET /osidb/whoami`.

Parameters not published.

query_affects**Affect rows** by CVE (`flaw_cve_id` / `flaw_cve_id_in`) and/or flaw UUID (`flaw_uuid` / `flaw_uuid_in`); wrapper over `affects_list`.

Parameters not published.

search_componentFlaws whose flaw-level **components** intersect `components_in` (v2 flaws list); optional impact/workflow/date filters.

Parameters not published.

search_flawsHigh-level search: keyword and/or CVE ids, severity (`severity` / `severities`), changed-date range (`date_from` / `date_to`), PS `product_modules` / `product_components`, workflow, embargo, owner; keyword-only uses OSIDB full-text search.

Parameters not published.

tracker_getSingle **tracker filing** by uuid; optional field projection / `include_meta_attr`.

Parameters not published.

trackers_listTracker filings; scope by **`affects_flaw_cve_id`** (or `_in`) or **`affects_flaw_uuid`** (or `_in`) when there is no CVE; optional PS filters and `tracker_type`.

Parameters not published.

Ask AI

✦

Ask AI about Osidb MCP

Powered by Claude · Grounded in docs

I know everything about Osidb MCP. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Questions

About Osidb MCP

How do I install Osidb MCP?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Osidb MCP safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Osidb MCP still maintained?

Yes — the last commit was 4 months ago. The repository has 2 stars and 2 forks.