AgentDiet Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)
Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and r.
| Endpoint | https://cve-intel.agentdiet.dev/mcp (streamable-http) |
|---|---|
| Registry version | 7.0.17 |
| Now | 2 tools · grade D (64) · pin ts_92f509623925d0fa81c9bd5676dc3986 · protocol 2025-06-18 |
| First / last listed | 2026-10-26 01:25 UTC / 2026-10-26 01:25 UTC |
| Grade over time | 2026-10-26: D (64), 2 tools |
Is this your server? Own a server? ToolFit hosted watch re-checks it every 24 h ($0.25 per 30 days) or 6 h ($0.60) and sends you an HMAC-signed webhook when its tools or grade change: POST https://api.youraitools.co/toolfit/v1/watch. To opt out, see About & opt-out.
Tools: scan_package_cve_advisories get_agent_wallet_status
scan_package_cve_advisories | Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and returns active CVEs, GHSA advisories, and patched versions. WHEN TO USE: Call `scan_package_cve_advisories` when your task requires deterministic `cve-intel` analysis for `package`; use `get_agent_wallet_status` to check your remaining free trial quota or prepaid balance. WHEN NOT TO USE: Do not use for params: package*, agent_id, tx_hash |
get_agent_wallet_status | Inspect an agent's account ledger: remaining free trial calls (out of 5), prepaid USD balance, cumulative spend, total API calls, and total LLM tokens saved. WHEN TO USE: Call before a batch of paid tool executions or after completing a Stripe or USDC top-up to confirm your balance. WHEN NOT TO USE: Do not use to process web content, execute marketplace tools, or submit payments; use the other too params: agent_id |
Entries describe changes in tool definitions. They are not statements about a server, its quality or its author. The grade measures how the tool definitions fit model providers (token cost, schema compatibility, confusable names) as scored by the ToolFit engine at the time of the listing. JSON: append .json. Opt-out: how or hello@youraitools.co.