{"uid":"cap_JG1JDD5Qjc2sLOzgNA1vM","slug":"mcp-security-agentdiet-dev-real-time-open-source-package-cve-ghsa-42b0195e","name":"Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)","description":"Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions. (Live x402 v2, IETF MPP & MCP endpoint at https://mcp-security.agentdiet.dev/v1/cargo-vuln-scan)","url":"https://mcp-security.agentdiet.dev/v1/cargo-vuln-scan?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["package"],"properties":{"package":{"type":"string","minLength":1,"description":"Package identifier in 'Ecosystem:name' or 'name' format (e.g. 'PyPI:requests', 'npm:lodash', 'Go:golang.org/x/net', 'crates.io:hyper')"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_BjVsSwSPnlD5kLbHPtpnI","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"mcp-security.agentdiet.dev","brandSlug":"mcp-security-agentdiet-dev-mpp","brandBaseUrl":"https://mcp-security.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Queries Google OSV.dev in real time to return active CVEs, GHSA advisories, and patched versions for PyPI, npm, Go, or Rust crate packages.","exampleAgentPrompt":"Can you check if the PyPI package 'requests' has any active CVEs or GHSA advisories right now, and tell me which versions have been patched?","exampleUseCases":[{"title":"Pre-deployment dependency audit","prompt":"Before we ship this release, can you scan 'npm:lodash' against OSV.dev and tell me if there are any known CVEs or security advisories I should be aware of, and what patched version I should upgrade to?"},{"title":"Rust supply chain security check","prompt":"I'm evaluating the 'hyper' Rust crate for my project — can you check OSV.dev for any active vulnerabilities or GHSA advisories against 'crates.io:hyper'?"},{"title":"CI pipeline vulnerability gate","prompt":"As part of our security review, check 'Go:golang.org/x/net' for any live CVEs or advisories on OSV.dev and list the affected version ranges and fixes."}],"resultDescription":"Returns a structured object containing active CVE identifiers, GHSA advisory references, affected version ranges, severity details, and patched/safe versions sourced live from Google OSV.dev for the queried package.","failureModes":["Package not found in any supported ecosystem returns empty or null advisory list","Malformed package identifier (missing ecosystem prefix or typo) may return no results or an error","OSV.dev upstream unavailability could cause timeouts or degraded responses","Packages in unsupported ecosystems (e.g. Maven, NuGet) may not return results","Payment failure (HTTP 402) if x402 micropayment is not properly handled"],"whenToPreferThis":"Choose this endpoint when you need real-time, live CVE and GHSA vulnerability data for open-source packages in PyPI, npm, Go, or Rust ecosystems, especially when building automated security pipelines, CI gates, or dependency auditing agents. It is preferable over static NVD snapshots when freshness matters or when querying Rust crates.io packages specifically.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T12:42:45.511Z","isFirstParty":false,"canonicalSlug":"mcp-security-agentdiet-dev-real-time-open-source-package-cve-ghsa-398bd891"}