Use Kevscope MCP with Cline

CVE patch-priority API + MCP: CISA KEV, EPSS, CVSS, SSVC. Keys $19/mo; 200 free calls/day.

Remote MCP server (Streamable HTTP), nothing to install. Free: 200 free calls/day · Paid: Keys $19/mo

Set it up

Click the MCP Servers icon in Cline's toolbar, open Configure and click Configure MCP Servers.
Add the server under "mcpServers" with "type": "streamableHttp" and save.
Check that the server is enabled and lists its tools.
Every tool here is read-only, so you can add tool names to "autoApprove" if you want Cline to run them without asking.

Add to cline_mcp_settings.json::

{
  "mcpServers": {
    "kevscope-api": {
      "type": "streamableHttp",
      "url": "https://kevscope-api.cybermaxtools.com/mcp?via=use-with-cline",
      "disabled": false,
      "autoApprove": []
    }
  }
}

With a paid key:

{
  "mcpServers": {
    "kevscope-api": {
      "type": "streamableHttp",
      "url": "https://kevscope-api.cybermaxtools.com/mcp?via=use-with-cline",
      "headers": {
        "x-api-key": "YOUR_KEY"
      },
      "disabled": false,
      "autoApprove": []
    }
  }
}

The settings file is local to your machine; do not paste it into a shared repository with the key in it.

Where it goes:

cline_mcp_settings.json: in the IDE, click the MCP Servers icon › Configure › Configure MCP Servers
CLI: ~/.cline/data/settings/cline_mcp_settings.json

Config format checked 2026-10-09 against Cline's MCP documentation.

Tools you get

Endpoint checked 2026-10-09: https://kevscope-api.cybermaxtools.com/mcp answered an MCP initialize (protocol 2025-06-18) and tools/list with 3 tools, all marked read-only. No key was used and no tool was called.

Tool	What it does	Required inputs
`cve_priority`	Patch-priority verdict for 1-20 CVE IDs with evidence: CISA KEV status (date added, due date, ransomware use), FIRST EPSS probability, CVSS (CNA or CISA-ADP), CISA SSVC exploitation/automatable/impact, vendor, product and links. Sorted most urgent first.	`cves`
`kev_recent`	CVEs added to the CISA Known Exploited Vulnerabilities catalog in the last N days, newest first, with due date, ransomware use and EPSS. Optional vendor/product text filter.	none
`epss_watchlist`	The highest-EPSS CVEs (most likely to be exploited in 30 days) that are not in CISA KEV yet. Defaults to this year's CVE IDs.	none

Test the endpoint from a terminal

This lists the tools without a key and without calling any of them:

curl -s https://kevscope-api.cybermaxtools.com/mcp \
  -H 'content-type: application/json' \
  -H 'accept: application/json, text/event-stream' \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

If it does not work

The field is "type" (not "transportType") and the approval list is "autoApprove".
Set "type": "streamableHttp" explicitly; "sse" is the legacy transport.
The free tier has a daily limit (see the pricing line above); a paid key raises it.

Kevscope in other clients

Cursor VS Code (GitHub Copilot)Claude Code Claude Desktop and claude.ai Windsurf (Devin Desktop)OpenAI Codex CLI Gemini CLI

More MCP servers for Cline

All Kevscope setups · All Cline setups · All