Use Kevscope MCP with Claude Desktop and claude.ai
CVE patch-priority API + MCP: CISA KEV, EPSS, CVSS, SSVC. Keys $19/mo; 200 free calls/day.
Remote MCP server (Streamable HTTP), nothing to install. Free: 200 free calls/day · Paid: Keys $19/mo
Set it up
- Open Customize › Connectors (on Team and Enterprise, an owner adds it under Organization settings › Connectors).
- Click + Add, then Add custom connector.
- Name it Kevscope and paste the server URL: https://kevscope-api.cybermaxtools.com/mcp?via=use-with-claude-desktop
- Under Authentication choose No sign in.
- For a paid key, add a request header named x-api-key with your key; leave it out for the free tier.
- Click Add, then enable the connector for your chat.
Claude stores fixed request headers encrypted. On Team and Enterprise plans everyone in the workspace shares that credential.
- no file: remote servers are added as custom connectors in Claude's settings
Tools you get
Endpoint checked 2026-10-09: https://kevscope-api.cybermaxtools.com/mcp answered an MCP initialize (protocol 2025-06-18) and tools/list with 3 tools, all marked read-only. No key was used and no tool was called.
| Tool | What it does | Required inputs |
|---|---|---|
cve_priority | Patch-priority verdict for 1-20 CVE IDs with evidence: CISA KEV status (date added, due date, ransomware use), FIRST EPSS probability, CVSS (CNA or CISA-ADP), CISA SSVC exploitation/automatable/impact, vendor, product and links. Sorted most urgent first. | cves |
kev_recent | CVEs added to the CISA Known Exploited Vulnerabilities catalog in the last N days, newest first, with due date, ransomware use and EPSS. Optional vendor/product text filter. | none |
epss_watchlist | The highest-EPSS CVEs (most likely to be exploited in 30 days) that are not in CISA KEV yet. Defaults to this year's CVE IDs. | none |
Test the endpoint from a terminal
This lists the tools without a key and without calling any of them:
curl -s https://kevscope-api.cybermaxtools.com/mcp \
-H 'content-type: application/json' \
-H 'accept: application/json, text/event-stream' \
-d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'If it does not work
- Custom connectors connect from Anthropic's cloud, not your computer; our servers are public, so no allowlisting is needed.
- Free plans can add one custom connector.
- To change the URL or header, remove the connector and add it again.
- The free tier has a daily limit (see the pricing line above); a paid key raises it.
Kevscope in other clients
More MCP servers for Claude Desktop and claude.ai
AfterwrenAwardtide Recompete RadarBonafido: Business Domain Verification APICitewrenCommonkite: Free Image Search API, Creative Commons & CC0CyberMax DataDomainDNADutyfinchFeedpeck: RSS Feed Finder & Reader by WebsiteFieldwrightFigurewellHaulrollHireHeatInsidewellLeafmeltLinkheftLogolark: Company Logo API & Favicon Finder by DomainMailvett: Email Validation API for AI AgentsNamewhereOrbitwrenPinloft: Batch Geocoder — Address to Lat/Long + Census FIPSPricewickPrintwren: HTML to PDF and URL to PDF (real Chrome)RecallrollShiftmoorSumbloomSwellmeter TrendingZiplore: US ZIP Code API (county, time zone, demographics, radius)
All Kevscope setups · All Claude Desktop and claude.ai setups · All