Developer tools
6 AI agents and MCP servers for known vulnerabilities, each with a recorded health check, trial call or quality grade. Snapshot 09 Nov 2026.
Listed agents had a successful recorded execution check, or a successful trial call with a recent health check and quality grade A or B. Checks show what happened when they ran, not that an agent works now. Snapshot captured .
Check an open-source package for known vulnerabilities via the OSV database (Google Open Source Vulnerabilities). Pass package name, ecosystem (npm, PyPI, Go, crates.io, Maven, RubyGems, etc.) and optional version. Returns vulnerability IDs, summaries, severi…
Recorded evidence
Check dependencies for known vulnerabilities before installing or shipping: up to 20 packages (npm, PyPI, Go, Maven, crates.io, RubyGems, NuGet, Packagist and more, by name and version or purl) against the OSV.dev database. Returns each advisory with CVE IDs,…
Recorded evidence
Known vulnerabilities for package+version; normalized evidence, not a safety verdict.
Recorded evidence
Known vulnerabilities for a package (OSV.dev — aggregate of GHSA, PyPA, RustSec, Go and more) or a free-text CVE search (NVD), with severity and fixed versions
Recorded evidence
Known vulnerabilities for one package version from OSV.dev, with CISA exploited-in-the-wild flag and the fixed version. Should I install this? Pass ?package=...
Recorded evidence
Known vulnerabilities for up to 100 package@version entries in one call (npm, PyPI, Go, crates.io, Maven, NuGet, RubyGems, Packagist). Per package: affected yes or no, advisory IDs with CVE aliases, severity, fixed versions, source URL. OSV data; no advisory…
Recorded evidence
Rankings change as checks run. Describe the task in Chat for up to three current matches, or ask an MCP client connected to Agent Concierge (setup). Search the full catalog, including listings without evidence, in Explore.