Use Kevscope MCP with Claude Code

CVE patch-priority API + MCP: CISA KEV, EPSS, CVSS, SSVC. Keys $19/mo; 200 free calls/day.

Remote MCP server (Streamable HTTP), nothing to install. Free: 200 free calls/day · Paid: Keys $19/mo

Set it up

Run the command in your terminal (add --scope user to use it in every project, or --scope project to write .mcp.json).
Start Claude Code and type /mcp to see the server and its tools.
Ask a question the tools can answer; Claude Code asks permission before each tool call unless you allow it.

Run:

claude mcp add --transport http kevscope-api 'https://kevscope-api.cybermaxtools.com/mcp?via=use-with-claude-code'

Or share it with your team in .mcp.json (project scope)::

{
  "mcpServers": {
    "kevscope-api": {
      "type": "http",
      "url": "https://kevscope-api.cybermaxtools.com/mcp?via=use-with-claude-code"
    }
  }
}

With a paid key:

claude mcp add --transport http kevscope-api 'https://kevscope-api.cybermaxtools.com/mcp?via=use-with-claude-code' \
  --header "x-api-key: YOUR_KEY"

In .mcp.json, ${CYBERMAX_API_KEY} is read from the environment so the key is not committed.

Where it goes:

stored by the CLI: local scope (default, you in this project), project scope (.mcp.json, shared), user scope (you, every project)

Config format checked 2026-10-09 against Claude Code's MCP documentation.

Tools you get

Endpoint checked 2026-10-09: https://kevscope-api.cybermaxtools.com/mcp answered an MCP initialize (protocol 2025-06-18) and tools/list with 3 tools, all marked read-only. No key was used and no tool was called.

Tool	What it does	Required inputs
`cve_priority`	Patch-priority verdict for 1-20 CVE IDs with evidence: CISA KEV status (date added, due date, ransomware use), FIRST EPSS probability, CVSS (CNA or CISA-ADP), CISA SSVC exploitation/automatable/impact, vendor, product and links. Sorted most urgent first.	`cves`
`kev_recent`	CVEs added to the CISA Known Exploited Vulnerabilities catalog in the last N days, newest first, with due date, ransomware use and EPSS. Optional vendor/product text filter.	none
`epss_watchlist`	The highest-EPSS CVEs (most likely to be exploited in 30 days) that are not in CISA KEV yet. Defaults to this year's CVE IDs.	none

Test the endpoint from a terminal

This lists the tools without a key and without calling any of them:

curl -s https://kevscope-api.cybermaxtools.com/mcp \
  -H 'content-type: application/json' \
  -H 'accept: application/json, text/event-stream' \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

If it does not work

If a project-scoped server does not load, Claude Code asks you to approve servers from .mcp.json the first time.
The free tier has a daily limit (see the pricing line above); a paid key raises it.

Kevscope in other clients

Cursor VS Code (GitHub Copilot)Claude Desktop and claude.ai Windsurf (Devin Desktop)Cline OpenAI Codex CLI Gemini CLI

More MCP servers for Claude Code

All Kevscope setups · All Claude Code setups · All