KitScout

Categories › Security › Code & dependency scanning

KernelScan

MCP serverVerified domain · kernelscan.ioRemote● LiveAPI key needed

Linux kernel CVE analyzer: upload a .config, get a CycloneDX VEX report of affecting CVEs.

Install

Remote server: your requests and data go to kernelscan.io. Claude Code: claude mcp add --transport http kernelscan https://kernelscan.io/mcp/ · Claude app: Settings → Connectors → Add custom connector.

What it can do

The tools this server listed when we connected to it, in its own words.

  • search_cves — Search Linux kernel CVEs. No API key required: keyless callers get the free public tier — recent high-severity Linux kernel CVEs (capped at
  • get_cve — Fetch a single Linux kernel CVE by ID (e.g. ``CVE-2024-12345``). No API key required: keyless callers get the public representation of a CVE
  • list_products — List the calling user's products with denormalized analysis stats. Paid plans only (basic / pro / enterprise). Free callers get a clear upgr
  • get_product — Fetch one product owned by the caller, including the CVE breakdown. Returns 404 (not 403) if the product belongs to another user, so product
  • get_product_vex — Return the VEX MANIFEST for one of the caller's products — metadata, not the document. Multi-megabyte CycloneDX documents (up to 8,000+ vuln
  • list_product_vex_entries — Page through the VEX vulnerability entries of one of the caller's products. Returns COMPLETE CycloneDX vulnerability objects for one bounded
  • create_product — Create a new product, run analysis, and return its initial stats. ``config_upload_id`` references a previously-staged .config that the calle
  • update_product — Update a product owned by the caller. Re-runs analysis if the kernel_version, arch, or referenced .config changed. To change the .config, fi
  • whoami — Return the caller's identity, plan, and quota state. Works without an API key: keyless callers get a lightweight public-tier payload (no acc
  • request_access — Explain how to get a KernelScan account (no API key needed). Self-registration is open — there is no invitation to wait for and no admin in
  • submit_support_report — Send a support / dispute report to KernelScan staff. Use this when an automated CVE or factor assessment looks wrong, or when you need to ha

KitScout test notes

Not tested by KitScout yet. When our harness runs it, pros, cons and the tasks we tried appear here, with the date and evidence.

Similar tools