Google tells you what exists. Faceabot tells you what holds up.
Query OSV.dev for package vulnerabilities and batch-audit dependency lists via MCP.
MCP endpoint :https://osv-advisory.caseyjhand.com/mcp · website · measurements and detailsOSV.dev — Google's open-source vulnerability database
MCP endpoint :https://gateway.pipeworx.io/osv-dev/mcp · website · measurements and detailsQuery OSV.dev for known vulnerabilities by package and version, and scan lockfiles in batch.
Package oci :ghcr.io/basitalisandhu/mcp-osv-advisories:0.2.2 · website · measurements and detailsCVE scanning for npm/pip/cargo dependencies via OSV
Package npm :@guardbee/mcp-dependency-auditor · website · measurements and detailsCVE scanning for npm/pip/cargo dependencies via OSV
Package npm :@guardbee/mcp-dependency-auditor · website · measurements and detailsCheck npm, PyPI, Go and Maven packages or lockfiles against OSV.dev: CVEs, CVSS, fixed versions.
MCP endpoint :https://mcp.apify.com/?tools=fetch-actor-details,fairquery/osv-dependency-vulnerability-check · website · measurements and detailsSecret, CVE and dependency-vulnerability scanning for AI agents (free, OSV.dev).
Package oci :ghcr.io/shuaicongxiaomai/agentguard:0.1.2 · website · measurements and detailsOSV.dev (Open Source Vulnerabilities) MCP.
MCP endpoint :https://gateway.pipeworx.io/osv/mcp · website · measurements and detailsKnown vulnerabilities for exact package versions from OSV, with fixes. Paid per call, x402.
MCP endpoint :https://depcheck.kaneky.dev/mcp · website · measurements and detailsQueries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and r.
MCP endpoint :https://cve-intel.agentdiet.dev/mcp · website · measurements and detailsUse this MCP server to OSV open source vulnerability data and package security checks. Tools...
Package npm :osv-mcp · website · measurements and detailsLocal-first defensive scanner for vulnerable dependencies, leaked secrets, and risky agent configs
Package npm :husk-sec · website · measurements and detailsDetect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups
MCP endpoint :https://npmscan.com/api/mcp · website · measurements and detailsTrust-check any dependency for agents: OpenSSF Scorecard, licenses, CVEs, deps. 7 ecosystems.
MCP endpoint :https://api.kaiv.ai/api/bridge/mcp/dependency-trust-f1aaf06d · measurements and detailsFree deterministic security scan of public git repos: OSV.dev vulnerable deps, secrets, config lint.
MCP endpoint :https://project-feldspar.com/mcp · website · measurements and detailsDependency vulnerability scanner with EPSS scoring. 9 MCP tools. Free tier + x402.
Package pypi :vulnfeed-mcp · website · measurements and detailsCVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.
MCP endpoint :https://security.datakoot.com/mcp · website · measurements and detailsBundle of secret-scanner, dependency-auditor, ssl-inspector, and dns-intelligence
Package npm :@guardbee/security-suite · website · measurements and detailsScan a website for vulnerabilities: OWASP Top 10, CVEs, SSL, headers - with plain-English fixes
MCP endpoint :https://scanlabsai.com/api/mcp · website · measurements and detailsDependency vulns & malicious-package advisories. Register in-session — free testnet funds.
MCP endpoint :https://a2awire.com/mcp/data/ghsawatch-package-dependency-vulnerabilities-malicious-package-advisories-d21673/http · website · measurements and detailsAI agents: all of this is available without keys over MCP https://faceabot.com/api/mcp · HTTP https://faceabot.com/api/catalog?q=… · Guide : llms.txt
Best tool by topic · Pulse: what is changing in agent commerce · Is your store ready for AI shopping agents? · State of MCP (weekly) · MCP server doctor · Reliability data · Faceabot app · Faceabot → AI assistants · What AI agents cannot find yet · Add Faceabot to your AI · Badge for tool publishers · Help · Privacy · Terms