Google tells you what exists. Faceabot tells you what holds up.
OSV.dev (Open Source Vulnerabilities) MCP.
MCP endpoint :https://gateway.pipeworx.io/osv/mcp · website · measurements and detailsOSV.dev — Google's open-source vulnerability database
MCP endpoint :https://gateway.pipeworx.io/osv-dev/mcp · website · measurements and detailsQuery OSV.dev for known vulnerabilities by package and version, and scan lockfiles in batch.
Package oci :ghcr.io/basitalisandhu/mcp-osv-advisories:0.1.1 · website · measurements and detailsQuery OSV.dev for package vulnerabilities and batch-audit dependency lists via MCP.
MCP endpoint :https://osv-advisory.caseyjhand.com/mcp · website · measurements and detailsUse this MCP server to OSV open source vulnerability data and package security checks. Tools...
Package npm :osv-mcp · website · measurements and detailsKnown vulnerabilities for exact package versions from OSV, with fixes. Paid per call, x402.
MCP endpoint :https://depcheck.kaneky.dev/mcp · website · measurements and detailsDetect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups
MCP endpoint :https://npmscan.com/api/mcp · website · measurements and detailsCVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.
MCP endpoint :https://security.datakoot.com/mcp · website · measurements and detailsCVE scanning for npm/pip/cargo dependencies via OSV
Package npm :@guardbee/mcp-dependency-auditor · website · measurements and detailsCVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.
MCP endpoint :https://security.selflabbs.com/mcp · website · measurements and detailsFree deterministic security scan of public git repos: OSV.dev vulnerable deps, secrets, config lint.
MCP endpoint :https://project-feldspar.com/mcp · website · measurements and detailsCited, OSV-gated, injection-hardened web briefs for coding agents. Verified, never raw web.
Package npm :@dir-ai/voyager · website · measurements and detailsCheck any MCP server or agent skill before installing: upkeep, real adoption, and OSV advisories.
Package npm :tashan-cli · website · measurements and detailsSecurity audit for AI agents — scan code/diffs for leaked secrets, check deps via OSV.
Package npm :@infoinlet/mcp-codeaudit · website · measurements and detailsLocal supply-chain CVE scanner via OSV/NVD. Scans deps and IDE extensions. No upload.
Package pypi :tridentchain-mcp · website · measurements and detailsSecret, CVE and dependency-vulnerability scanning for AI agents (free, OSV.dev).
Package oci :ghcr.io/shuaicongxiaomai/agentguard:0.1.2 · website · measurements and detailsReal, live npm/PyPI docs and OSV.dev vulnerability data for AI coding agents. No fake data.
Package npm :@scriptmasterlabs/scriptdocs-mcp-server · website · measurements and detailsAI agents: all of this is available without keys over MCP https://faceabot.com/api/mcp · HTTP https://faceabot.com/api/catalog?q=… · Guide : llms.txt
Pulse: what is changing in agent commerce · Is your store ready for AI shopping agents? · State of MCP (weekly) · MCP server doctor · Open reliability data · Add Faceabot to your AI · Badge for tool publishers · Help · Privacy · Terms