# OSV (Open Source Vulnerabilities) API

> OSV (Open Source Vulnerabilities) API on Apizie: 2 endpoints (Query package, Vulnerability) returned as clean JSON through one API key. 2 endpoints are live now. Call it over REST at https://apizie.tech/v1/security:osv/{endpoint} or from Claude, ChatGPT and Cursor through the Apizie MCP server. Free plan: 1,000 requests a month.

- Project key: `security:osv`
- Category: Security
- Status: live
- Source: https://google.github.io/osv.dev/api/
- Page: https://apizie.tech/api/security/osv
- OpenAPI: https://apizie.tech/api/security/osv/openapi.json

Google's distributed vulnerability database for open-source packages.

## Endpoints

### Query package
`POST https://apizie.tech/v1/security:osv/query`

| Parameter | Type | Required | Description |
|---|---|---|---|
| ecosystem | string | yes |  |
| name | string | yes |  |
| version | string | no |  |

### Vulnerability
`GET https://apizie.tech/v1/security:osv/vuln`

| Parameter | Type | Required | Description |
|---|---|---|---|
| id | string | yes |  |

## Example
```
curl "https://apizie.tech/v1/security:osv/query" \
  -H "x-api-key: $APIZIE_KEY"
```

## FAQ

### How do I call the OSV (Open Source Vulnerabilities) API?
Create a free Apizie key, then send POST https://apizie.tech/v1/security:osv/query with the header x-api-key. Every endpoint returns { project, data, timestamp }.

### Is the OSV (Open Source Vulnerabilities) API free on Apizie?
Yes. The Free plan includes 1,000 requests a month at 100 requests a minute, no credit card.

### Can AI agents use the OSV (Open Source Vulnerabilities) API?
Yes. Add the Apizie MCP server (https://apizie.tech/mcp) to Claude, ChatGPT, Cursor or VS Code, then ask in plain language. The agent calls run_scraper with project key security:osv.

### What is the status of the OSV (Open Source Vulnerabilities) API?
Live: works with just an Apizie key