KernelScan

Connect Remote server

claude mcp add --transport http kernelscan https://kernelscan.io/mcp/ --header "Authorization: Bearer <YOUR_API_KEY>"

{
  "mcpServers": {
    "kernelscan": {
      "url": "https://kernelscan.io/mcp/",
      "headers": {
        "Authorization": "Bearer <YOUR_API_KEY>"
      }
    }
  }
}

{
  "servers": {
    "kernelscan": {
      "type": "http",
      "url": "https://kernelscan.io/mcp/",
      "headers": {
        "Authorization": "Bearer <YOUR_API_KEY>"
      }
    }
  }
}

Settings > Connectors > Add custom connector
URL: https://kernelscan.io/mcp/

Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.

Tools 11 found in our last check

• search_cves

  Search Linux kernel CVEs. No API key required: keyless callers get the free public tier — recent high-severity Linux kernel CVEs (capped at 25 results). Free *keyed* callers see only CVEs published in the last 60 days; basic+ keyed callers get the full corpus. ``query`` matches…

• get_cve

  Fetch a single Linux kernel CVE by ID (e.g. ``CVE-2024-12345``). No API key required: keyless callers get the public representation of a CVE, but only for CVEs in the public set (recent high-severity); any other id returns ``not found``. Free *keyed* callers get a 404 for CVEs p…

• list_products

  List the calling user's products with denormalized analysis stats. Paid plans only (basic / pro / enterprise). Free callers get a clear upgrade message.

• get_product

  Fetch one product owned by the caller, including the CVE breakdown. Returns 404 (not 403) if the product belongs to another user, so product existence isn't leaked across accounts.

• get_product_vex

  Return the VEX MANIFEST for one of the caller's products — metadata, not the document. Multi-megabyte CycloneDX documents (up to 8,000+ vulnerability entries) are not safe model-context payloads, so this tool returns a bounded manifest: CycloneDX format/spec version, product id,…

• list_product_vex_entries

  Page through the VEX vulnerability entries of one of the caller's products. Returns COMPLETE CycloneDX vulnerability objects for one bounded page — never the root document, never all entries — plus ``returned``, ``total_matching``, and a ``next_cursor`` to continue with. Every r…

• create_product

  Create a new product, run analysis, and return its initial stats. ``config_upload_id`` references a previously-staged .config that the caller POSTed to ``/api/configs/uploads`` over plain HTTP — the LLM does NOT emit the config text itself (a real kernel .config is ~100–200 KB a…

• update_product

  Update a product owned by the caller. Re-runs analysis if the kernel_version, arch, or referenced .config changed. To change the .config, first POST the new file to ``/api/configs/uploads`` (see ``create_product`` for the curl recipe) and pass the returned ``config_upload_id`` h…

• whoami

  Return the caller's identity, plan, and quota state. Works without an API key: keyless callers get a lightweight public-tier payload (no account) describing how to request access.

• request_access

  Explain how to get a KernelScan account (no API key needed). Self-registration is open — there is no invitation to wait for and no admin in the loop. The user signs up on kernelscan.io themselves (email + password, accepting the terms), confirms the verification mail, and mints…

• submit_support_report

  Send a support / dispute report to KernelScan staff. Use this when an automated CVE or factor assessment looks wrong, or when you need to hand human-needed context back to the team. The caller's API-key user is attached automatically (id, email, plan) so support can look the acc…

Headers

Details

More data and analytics servers See all

• topo^alpin

  Avalanche bulletins, mountain weather, stations, huts, ski and snowshoe tours in the Alps.

• MedBillAnalyzer

  Compares a medical bill with the insurer's Explanation of Benefits and lists where they disagree.

• Brush Pack

  Paint and wallpaper amounts, weather checks and lead paint safety for UK decorators' AI

• Ridge Pack

  Roof take-offs, weather windows, building regs and storm triage for UK roofers' AI assistants

• Agent Data Tools: Everyday data

  29 tools: weather, time zones, sun and moon, earthquakes, countries. 25 free calls.

• Agent Data Tools: Utilities

  105 tools: JSON repair, CSV, hashes, cron, dates, units, validators. 25 free calls.