---
title: "OSV integration for LuumenAI"
url: "https://www.luumen.ai/integrations/osv/"
entity: SoftwareIntegration
category: "Source control & CI/CD"
audience: "SRE, DevOps, platform engineering, IT operations"
---

# OSV integration for LuumenAI

Check packages, versions, and commits against the open vulnerability database

## What LuumenAI can do with OSV

LuumenAI connects to OSV without a credential of its own and exposes 5 tools (5 read-only). Every tool is read-only, so it can answer questions from OSV but cannot change anything in it.

## Key facts

- Authentication: none required
- Tools available: 5 tools (5 read-only)
- Plan: available on all plans
- Category: Source control & CI/CD

## About OSV with LuumenAI

Ask what a package or commit is exposed to and get the answer in the terminal. OSV_QUERY_VULNERABILITIES covers one package, version, package URL, or commit; OSV_QUERY_VULNERABILITIES_BATCH checks up to 1,000 in one request. OSV_GET_VULNERABILITY returns the full record for an ID. Read-only, and no credential to configure.

## Example tools

Read-only (5 in total):

- `OSV_DETERMINE_VERSION` — Experimentally rank probable versions of an OSS-Fuzz C/C++ library from relative source-file paths and base64-encoded MD5 hashes.
- `OSV_GET_IMPORT_FINDINGS` — Experimentally list OSV records from one exact import source that failed import-time quality checks; intended for OSV source maintainers and may return no records.
- `OSV_GET_VULNERABILITY` — Return the complete OSV record for one case-sensitive vulnerability ID, including affected versions, ranges, severity, references, and aliases.
- `OSV_QUERY_VULNERABILITIES` — Find full OSV vulnerability records affecting one package, package version, package URL, or commit.
- `OSV_QUERY_VULNERABILITIES_BATCH` — Check up to 1,000 packages, package versions, package URLs, or commits in one request and return position-matched compact vulnerability IDs.

## Frequently asked questions

### How does LuumenAI connect to OSV?

OSV needs no credential of its own, so there is nothing to authorize. Access is still granted per agent, skill, and team inside Luumen, and every call is logged.

### Can LuumenAI change things in OSV on its own?

No. Every one of the 5 tools is read-only, so LuumenAI can answer questions from OSV but cannot change anything in it.

### Is there an audit trail?

Every call to OSV is recorded with the actor, the input, and the result.

Full page: https://www.luumen.ai/integrations/osv/