Security & Testing

kernelscan.io

Manage and search Linux kernel CVEs and product vulnerability data.

1 endpoint10 known toolsFirst detected July 25, 2026Last detected August 29, 2026

ENDPOINT 1

https://kernelscan.io/mcp

No auth detected

MCP server metadata

Name: KernelScan
Version: 1.26.0

Capabilities

experimentalpromptsresourcestools

Server instructions

KernelScan exposes the Linux kernel CVE database and per-user product analyses (CycloneDX VEX) over MCP. No API key required to get started: keyless callers get a free public tier covering recent high-severity Linux kernel CVEs — browse it with search_cves and get_cve, and use request_access to ask for an invitation to the full service. Authenticate for everything else via `Authorization: Bearer ks_live_<key>` — manage keys at /api/auth/api-keys. A ks_live_ key unlocks the full CVE corpus (free keyed callers see CVEs published in the last 60 days; basic / pro / enterprise plans add the full feed plus product-analysis tools). create_product / update_product take a `config_upload_id` — kernel .config files are too large to emit as tool arguments, so ask the user to first POST the file to /api/configs/uploads (a normal HTTP multipart request, same ks_live_ Bearer auth) and pass the returned id here. These MCP tools are the canonical programmatic interface; the equivalent REST API is described by a public OpenAPI schema at https://kernelscan.io/openapi.json (no separate spec to discover).

Known tools 10

search_cves

Search Linux kernel CVEs.

Inferred read-only

get_cve

Fetch a single Linux kernel CVE by ID (e.

Inferred read-only

list_products

List the calling user's products with denormalized analysis stats.

Inferred read-only

get_product

Fetch one product owned by the caller, including the CVE breakdown.

Inferred read-only

get_product_vex

Return the CycloneDX 1.

Inferred read-only

create_product

Create a new product, run analysis, and return its initial stats.

Potential side effects

update_product

Update a product owned by the caller.

Potential side effects

whoami

Return the caller's identity, plan, and quota state.

Inferred read-only

request_access

Request an invitation to KernelScan from inside MCP (no API key needed).

Inferred read-only

submit_support_report

Send a support / dispute report to KernelScan staff.

Potential side effects

CONNECT WITH APPROVAL

Client installation

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.kernelscan]
url = "https://kernelscan.io/mcp"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "kernelscan": {
      "type": "http",
      "url": "https://kernelscan.io/mcp"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: kernelscan
Remote MCP URL: https://kernelscan.io/mcp

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "kernelscan": {
      "url": "https://kernelscan.io/mcp"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "kernelscan": {
      "type": "http",
      "url": "https://kernelscan.io/mcp"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "kernelscan",
  "transport": "streamable-http",
  "url": "https://kernelscan.io/mcp"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

TRUST AND VERIFICATION EVIDENCE

Trust Data Available

BuiltWith Trust API v2 evidence for kernelscan.io was fetched 2026-07-27T03:10:34.718Z and is being refreshed.

Trust status Neutral

kernelscan.io is assessed as Neutral: No suspicious signals found, but no strong positive signal either

Indexed

Evidence is source-attributed and does not guarantee that a third-party server is safe. Risk labels are conservative metadata heuristics.