Linux kernel CVE analyzer: upload a .config, get a CycloneDX VEX report of affecting CVEs.
Abgeleitet aus den Transporten, die dieser Eintrag deklariert (streamable-http). Ein Client, der hier nicht steht, ist damit nicht ausgeschlossen — Forge kann ihn nur nicht bestätigen.
Die Verifizierung bestätigt die Identität des Publishers (die Inhaberschaft am Repo), nicht die Sicherheit des Codes. Der Sicherheits-Scan deckt bekannte CVEs und verdächtige Installationsskripte ab.
Aus einem echten MCP-Handshake initialize → tools/list gegen den deklarierten Endpunkt gelesen. Es wurde nie ein Tool aufgerufen — tools/list ist der lesende Introspektionsaufruf, den das Protokoll dafür vorsieht. Es spiegelt wider, was der Server in diesem Moment angeboten hat; ein gehosteter Endpunkt ist an keine Version gebunden und kann sich ohne Ankündigung ändern.
https://kernelscan.io/mcp/10 Tools · 980 mssearch_cvesSearch Linux kernel CVEs.
No API key required: keyless callers get the free public tier — recent
high-severity Linux kernel CVEs (capped at 25 results). Free *keyed*
callers see only CVEs published in the last 60 days; basic+ keyed
callers get the full corpus.
``query`` matches against CVE id…Search Linux kernel CVEs. No API key required: keyless callers get the free public tier — recent high-severity Linux kernel CVEs (capped at 25 results). Free *keyed* callers see only CVEs published in the last 60 days; basic+ keyed callers get the full corpus. ``query`` matches against CVE id…
| Parameter | Typ | Beschreibung |
|---|---|---|
| query | — | — |
| severity | — | — |
| cvss_min | — | — |
| published_after | — | — |
| limit | integer | — |
get_cveFetch a single Linux kernel CVE by ID (e.g. ``CVE-2024-12345``).
No API key required: keyless callers get the public representation of a
CVE, but only for CVEs in the public set (recent high-severity); any
other id returns ``not found``. Free *keyed* callers get a 404 for CVEs
published more t…Fetch a single Linux kernel CVE by ID (e.g. ``CVE-2024-12345``). No API key required: keyless callers get the public representation of a CVE, but only for CVEs in the public set (recent high-severity); any other id returns ``not found``. Free *keyed* callers get a 404 for CVEs published more t…
| Parameter | Typ | Beschreibung |
|---|---|---|
| cve_id* | string | — |
list_productsList the calling user's products with denormalized analysis stats.
Paid plans only (basic / pro / enterprise). Free callers get a clear
upgrade message.List the calling user's products with denormalized analysis stats. Paid plans only (basic / pro / enterprise). Free callers get a clear upgrade message.
Für dieses Tool wurde kein Eingabeschema veröffentlicht.
get_productFetch one product owned by the caller, including the CVE breakdown.
Returns 404 (not 403) if the product belongs to another user, so
product existence isn't leaked across accounts.Fetch one product owned by the caller, including the CVE breakdown. Returns 404 (not 403) if the product belongs to another user, so product existence isn't leaked across accounts.
| Parameter | Typ | Beschreibung |
|---|---|---|
| product_id* | string | — |
get_product_vexReturn the CycloneDX 1.6 VEX document for one of the caller's products.
Reads from the 24h ProductVexCache; if the cache is empty/expired the
next call to ``get_product`` (or the REST endpoint) will regenerate it.
Carries the same ``kernelscan.io:exploit_maturity`` /
``kernelscan.io:kev`` prop…Return the CycloneDX 1.6 VEX document for one of the caller's products. Reads from the 24h ProductVexCache; if the cache is empty/expired the next call to ``get_product`` (or the REST endpoint) will regenerate it. Carries the same ``kernelscan.io:exploit_maturity`` / ``kernelscan.io:kev`` prop…
| Parameter | Typ | Beschreibung |
|---|---|---|
| product_id* | string | — |
create_productCreate a new product, run analysis, and return its initial stats.
``config_upload_id`` references a previously-staged .config that the
caller POSTed to ``/api/configs/uploads`` over plain HTTP — the LLM
does NOT emit the config text itself (a real kernel .config is
~100–200 KB and exceeds a si…Create a new product, run analysis, and return its initial stats. ``config_upload_id`` references a previously-staged .config that the caller POSTed to ``/api/configs/uploads`` over plain HTTP — the LLM does NOT emit the config text itself (a real kernel .config is ~100–200 KB and exceeds a si…
| Parameter | Typ | Beschreibung |
|---|---|---|
| name* | string | — |
| kernel_version* | string | — |
| arch* | string | — |
| config_upload_id* | string | — |
| description | — | — |
| factor_ids | — | — |
update_productUpdate a product owned by the caller. Re-runs analysis if the
kernel_version, arch, or referenced .config changed.
To change the .config, first POST the new file to
``/api/configs/uploads`` (see ``create_product`` for the curl recipe)
and pass the returned ``config_upload_id`` here. Leave
``c…Update a product owned by the caller. Re-runs analysis if the kernel_version, arch, or referenced .config changed. To change the .config, first POST the new file to ``/api/configs/uploads`` (see ``create_product`` for the curl recipe) and pass the returned ``config_upload_id`` here. Leave ``c…
| Parameter | Typ | Beschreibung |
|---|---|---|
| product_id* | string | — |
| name | — | — |
| description | — | — |
| kernel_version | — | — |
| arch | — | — |
| config_upload_id | — | — |
| factor_ids | — | — |
whoamiReturn the caller's identity, plan, and quota state.
Works without an API key: keyless callers get a lightweight public-tier
payload (no account) describing how to request access.Return the caller's identity, plan, and quota state. Works without an API key: keyless callers get a lightweight public-tier payload (no account) describing how to request access.
Für dieses Tool wurde kein Eingabeschema veröffentlicht.
request_accessRequest an invitation to KernelScan from inside MCP (no API key needed).
Use this when a keyless caller wants the full service. It records an
invitation request and emails a confirmation; an admin reviews it and,
if approved, sends an invitation code. This tool does NOT create an
account or mi…Request an invitation to KernelScan from inside MCP (no API key needed). Use this when a keyless caller wants the full service. It records an invitation request and emails a confirmation; an admin reviews it and, if approved, sends an invitation code. This tool does NOT create an account or mi…
| Parameter | Typ | Beschreibung |
|---|---|---|
| email* | string | — |
| name | — | — |
| reason | — | — |
submit_support_reportSend a support / dispute report to KernelScan staff.
Use this when an automated CVE or factor assessment looks wrong, or
when you need to hand human-needed context back to the team. The
caller's API-key user is attached automatically (id, email, plan)
so support can look the account up.
``ca…Send a support / dispute report to KernelScan staff. Use this when an automated CVE or factor assessment looks wrong, or when you need to hand human-needed context back to the team. The caller's API-key user is attached automatically (id, email, plan) so support can look the account up. ``ca…
| Parameter | Typ | Beschreibung |
|---|---|---|
| category* | string | — |
| subject* | string | — |
| message* | string | — |
| cve_id | — | — |
| product_id | — | — |
| assessment_id | — | — |
10 von 10 Tools haben eine Beschreibung veröffentlicht.
Tool-Namen und -Beschreibungen stammen vom Publisher und werden wortgetreu als inerter Text angezeigt. Es sind die Zeichenketten, die ein MCP-Client an ein Modell übergibt, deshalb prüft Forge sie auf Prompt-Injection-Muster — jeder Befund erscheint oben beim Sicherheits-Scan. „Privilegiert“ ist ein Schlagwort-Treffer im Tool-Namen, keine Prüfung dessen, was das Tool tut: ein harmlos klingender Name kann trotzdem alles tun.
Linux kernel CVE analyzer: upload a .config, get a CycloneDX VEX report of affecting CVEs.
Verlinkte Namen öffnen den Forge-Index aller Einträge, bei denen dieses Tool beobachtet wurde. Alle indexierten Tools durchsuchen.
Dieser Eintrag veröffentlicht kein npm-Paket, daher hat Forge keinen Abhängigkeitsbaum dafür. Das ist eine Lücke in der Abdeckung — keine Aussage, dass er keine Abhängigkeiten hat.