io.kernelscan/kernelscan
up checked
Unclaimed · Unverified
Agent searches it appeared in, last 30 days: 0. Run this server? Claim the listing: verified label, uptime alerts and analytics.
Publisher-provided title
KernelScan
Publisher-provided description
Linux kernel CVE analyzer: upload a .config, get a CycloneDX VEX report of affecting CVEs.
Summary by lookupd
Analyzes uploaded Linux kernel configs against known CVEs and returns CycloneDX VEX reports, with CVE lookup and search.
Install
Claude Code, remote (streamable-http)
claude mcp add --transport http kernelscan https://kernelscan.io/mcp/
Codex, remote (streamable-http)
codex mcp add kernelscan --url https://kernelscan.io/mcp/
Cursor, remote (streamable-http) → .cursor/mcp.json
{
"mcpServers": {
"kernelscan": {
"url": "https://kernelscan.io/mcp/"
}
}
}Other clients: docs. Or tell your agent: Set up lookupd for me: read https://lookupd.com/agent.md and follow it.
Tools (11 tools)
Publisher-provided text
search_cvesSearch Linux kernel CVEs. No API key required: keyless callers get the free public tier — recent high-severity Linux kernel CVEs (capped at 25get_cveFetch a single Linux kernel CVE by ID (e.g. ``CVE-2024-12345``). No API key required: keyless callers get the public representation of a CVE, blist_productsList the calling user's products with denormalized analysis stats. Paid plans only (basic / pro / enterprise). Free callers get a clear upgradeget_productFetch one product owned by the caller, including the CVE breakdown. Returns 404 (not 403) if the product belongs to another user, so product exget_product_vexReturn the VEX MANIFEST for one of the caller's products — metadata, not the document. Multi-megabyte CycloneDX documents (up to 8,000+ vulneralist_product_vex_entriesPage through the VEX vulnerability entries of one of the caller's products. Returns COMPLETE CycloneDX vulnerability objects for one bounded pagecreate_productCreate a new product, run analysis, and return its initial stats. ``config_upload_id`` references a previously-staged .config that the caller Pupdate_productUpdate a product owned by the caller. Re-runs analysis if the kernel_version, arch, or referenced .config changed. To change the .config, firstwhoamiReturn the caller's identity, plan, and quota state. Works without an API key: keyless callers get a lightweight public-tier payload (no accounrequest_accessExplain how to get a KernelScan account (no API key needed). Self-registration is open — there is no invitation to wait for and no admin in thesubmit_support_reportSend a support / dispute report to KernelScan staff. Use this when an automated CVE or factor assessment looks wrong, or when you need to hand
Details
- Version: 1.0.0
- Transports: streamable-http
- Uptime (7 days): 100%
- Median latency: 807 ms
- First indexed:
- Last seen in registry:
- Website: https://kernelscan.io
Badge for your README
Shows this live status and links here; updates hourly.
[](https://lookupd.com/servers/io.kernelscan/kernelscan)
- 62071 servers
- Last crawl: 2026-11-11T16:39:06.253Z
- API base:
https://api.lookupd.com - MCP URL:
https://api.lookupd.com/mcp