KernelScan MCP MCP server

KernelScan provides a Model Context Protocol endpoint that allows AI agents to analyze Linux kernel configurations (.config files) for security vulnerabilities. By uploading a configuration, agents can retrieve CycloneDX VEX reports detailing affecting CVEs, helping developers and manufacturers comply with regulations like the EU Cyber Resilience Act by identifying risks in embedded Linux products.

Endpoint and access

No sign-in: your client connects and lists tools immediately, with no account or key.

No sign-inEndpoint checked 2026-10-05Operated by KernelScan

MCP endpoint (Streamable HTTP)

https://kernelscan.io/mcp/

Vendor documentation

What you can do with it

Analyze Linux kernel .config files for CVEs
Generate CycloneDX VEX reports for compliance
Check product vulnerability status via API
Integrate kernel security checks into CI/CD pipelines

Tools advertised by the last live check:

search_cves
get_cve
list_products
get_product
get_product_vex
list_product_vex_entries
create_product
update_product
whoami
request_access
submit_support_report

Connect from your client

Each snippet registers the same endpoint; pick the client you use.

This server is operated by the named third party. Listing and endpoint checks are not an endorsement or a security audit. Review the operator's permissions, terms, and data handling before connecting. How listings are checked and corrected.

Claude Code

Run this once in a terminal. It registers a Streamable HTTP server. Use --scope project to write .mcp.json for the repo.

Claude Code configuration

claude mcp add --transport http kernelscan-mcp https://kernelscan.io/mcp/

Codex

Run this once. Codex stores MCP servers in ~/.codex/config.toml (or .codex/config.toml in a trusted project).

Codex configuration

codex mcp add kernelscan-mcp --url https://kernelscan.io/mcp/

Cursor

Merge this server into .cursor/mcp.json in your project, then enable kernelscan-mcp in your MCP settings.

Cursor configuration

{
  "mcpServers": {
    "kernelscan-mcp": {
      "url": "https://kernelscan.io/mcp/"
    }
  }
}

Cline

Merge this into cline_mcp_settings.json (Cline → MCP Servers → Configure). The type must be streamableHttp for a remote HTTP server.

Cline configuration

{
  "mcpServers": {
    "kernelscan-mcp": {
      "type": "streamableHttp",
      "url": "https://kernelscan.io/mcp/",
      "disabled": false
    }
  }
}

VS Code

Merge this server into .vscode/mcp.json. Use MCP: List Servers to start kernelscan-mcp and inspect its tools.

VS Code configuration

{
  "servers": {
    "kernelscan-mcp": {
      "type": "http",
      "url": "https://kernelscan.io/mcp/"
    }
  }
}

Gemini CLI

Run this once. It writes .gemini/settings.json in the current project; pass --scope user for ~/.gemini/settings.json.

Gemini CLI configuration

gemini mcp add --transport http kernelscan-mcp https://kernelscan.io/mcp/

Claude Desktop

Merge this into claude_desktop_config.json (macOS: ~/Library/Application Support/Claude/, Windows: %APPDATA%\Claude\), then restart Claude Desktop.

Claude Desktop configuration

{
  "mcpServers": {
    "kernelscan-mcp": {
      "url": "https://kernelscan.io/mcp/"
    }
  }
}

Windsurf

Merge this into ~/.codeium/windsurf/mcp_config.json, then refresh MCP in Cascade. Windsurf remote servers use serverUrl, not url.

Windsurf configuration

{
  "mcpServers": {
    "kernelscan-mcp": {
      "serverUrl": "https://kernelscan.io/mcp/"
    }
  }
}

See all 957

Do you run KernelScan MCP?

Prove ownership with a DNS record, a well-known file, or your Official MCP Registry entry, and your edits publish immediately. Proofs are re-checked weekly; admins can still hide or remove a listing.

Claim this listing