MCP server

KernelScan Official

io.kernelscan/kernelscan

Checked 26 Oct 2026, 08:29 UTC · Connected to it and listed its tools

Linux kernel CVE analyzer: upload a .config, get a CycloneDX VEX report of affecting CVEs.

Website

At a glance

Type

MCP server

Publisher

kernelscan.io (verified by the MCP Registry)

Status

Working at last check

Tools

11

Token cost

About 4,217 tokens per request

Sets up in

Claude Code, Claude Desktop, Codex, Gemini CLI, Cursor, VS Code, Antigravity, ChatGPT, OpenAI API, Grok

Last checked

26 Oct 2026, 08:29 UTC

Connect it to your agent

Add to CursorAdd to VS CodeVS Code Insiders

Opens the app, which shows the server and asks you to confirm. For other apps, copy the setup below.

Claude Code

claude mcp add --transport http kernelscan https://kernelscan.io/mcp/

Claude Desktop

Settings → Connectors → Add custom connector, and paste the URL.

Codex (config.toml)

[mcp_servers.kernelscan]
url = "https://kernelscan.io/mcp/"

Gemini CLI

{"mcpServers":{"kernelscan":{"httpUrl":"https://kernelscan.io/mcp/"}}}

Cursor

{"mcpServers":{"kernelscan":{"url":"https://kernelscan.io/mcp/"}}}

VS Code

{"servers":{"kernelscan":{"type":"http","url":"https://kernelscan.io/mcp/"}}}

Antigravity

agy mcp add kernelscan https://kernelscan.io/mcp/

ChatGPT

Settings → Apps & Connectors → Advanced settings: turn on Developer mode, then Create a connector and paste the URL. Which plans can do this varies.

OpenAI API (Responses tools)

{"type":"mcp","server_label":"kernelscan","server_url":"https://kernelscan.io/mcp/","require_approval":"always"}

Grok (xAI API tools)

{"type":"mcp","server_label":"kernelscan","server_url":"https://kernelscan.io/mcp/"}

Tools

• create_product ~757 tokens
  Create a new product, run analysis, and return its initial stats. ``config_upload_id`` references a previously-staged .config that the caller POSTed to ``/api/configs/uploads`` over plain HTTP — the LLM does NOT emit the config text itself (a real kernel .config is ~
• get_cve ~198 tokens
  Fetch a single Linux kernel CVE by ID (e.g. ``CVE-2024-12345``). No API key required: keyless callers get the public representation of a CVE, but only for CVEs in the public set (recent high-severity); any other id returns ``not found``. Free *keyed* callers get a 404 for CV
• get_product ~116 tokens
  Fetch one product owned by the caller, including the CVE breakdown. Returns 404 (not 403) if the product belongs to another user, so product existence isn't leaked across accounts.
• get_product_vex ~416 tokens
  Return the VEX MANIFEST for one of the caller's products — metadata, not the document. Multi-megabyte CycloneDX documents (up to 8,000+ vulnerability entries) are not safe model-context payloads, so this tool returns a bounded manifest: CycloneDX format/spec version,
• list_product_vex_entries ~777 tokens
  Page through the VEX vulnerability entries of one of the caller's products. Returns COMPLETE CycloneDX vulnerability objects for one bounded page — never the root document, never all entries — plus ``returned``, ``total_matching``, and a ``next_cursor`` to continue with. Eve
• list_products ~88 tokens
  List the calling user's products with denormalized analysis stats. Paid plans only (basic / pro / enterprise). Free callers get a clear upgrade message.
• request_access ~295 tokens
  Explain how to get a KernelScan account (no API key needed). Self-registration is open — there is no invitation to wait for and no admin in the loop. The user signs up on kernelscan.io themselves (email + password, accepting the terms), confirms the verification mail, and
• search_cves ~351 tokens
  Search Linux kernel CVEs. No API key required: keyless callers get the free public tier — recent high-severity Linux kernel CVEs (capped at 25 results). Free *keyed* callers see only CVEs published in the last 60 days; basic+ keyed callers get the full corpus.
• submit_support_report ~390 tokens
  Send a support / dispute report to KernelScan staff. Use this when an automated CVE or factor assessment looks wrong, or when you need to hand human-needed context back to the team. The caller's API-key user is attached automatically (id, email, plan) so support can
• update_product ~738 tokens
  Update a product owned by the caller. Re-runs analysis if the kernel_version, arch, or referenced .config changed. To change the .config, first POST the new file to ``/api/configs/uploads`` (see ``create_product`` for the curl recipe) and pass the returned ``config_u
• whoami ~91 tokens
  Return the caller's identity, plan, and quota state. Works without an API key: keyless callers get a lightweight public-tier payload (no account) describing how to request access.

Browse

• Email
• Security scanning
• Calling other AI models
• Food and recipes

Related MCP servers

• Opencode Workbench
  Provision an OpenCode workbench and MCP stack on any Linux box, local or over SSH.
• Android Security Analyzer
  MCP server for static security analysis of Android source code
• Physical Capability Cloud
  Discover, hire, and verify real-world physical capability through MCP.
• CycloneDX component count, body discarded
  CycloneDX component count, body discarded
• BetaFinds
  Publish and update your startup on BetaFinds from an AI agent — listings, changelog, releases.
• Senzing
  Entity resolution — data mapping, SDK code generation, docs search, and error troubleshooting
• JMeter Docs
  Apache JMeter community documentation, conversion tools, linters, and calculators for AI agents.
• Wavedash
  Wavedash docs and workflow guidance for building and publishing browser games.

Badge for your README

[![AptLynx](https://aptlynx.net/badge/io.kernelscan/kernelscan.svg)](https://aptlynx.net/servers/io.kernelscan/kernelscan)

Listing text is written by the maker; AptLynx lists tools and does not vouch for them. Find another tool · Browse by topic · For agents