Use Kevscope MCP with Cursor

CVE patch-priority API + MCP: CISA KEV, EPSS, CVSS, SSVC. Keys $19/mo; 200 free calls/day.

Remote MCP server (Streamable HTTP), nothing to install. Free: 200 free calls/day · Paid: Keys $19/mo

Set it up

Open or create the mcp.json file (global or per project).
Add the server under "mcpServers" as shown and save.
Open Cursor's settings, find the MCP section and check that the server is enabled and lists its tools.
Ask the agent a question the tools can answer and approve the tool call.

Add to ~/.cursor/mcp.json:

{
  "mcpServers": {
    "kevscope-api": {
      "url": "https://kevscope-api.cybermaxtools.com/mcp?via=use-with-cursor"
    }
  }
}

With a paid key:

{
  "mcpServers": {
    "kevscope-api": {
      "url": "https://kevscope-api.cybermaxtools.com/mcp?via=use-with-cursor",
      "headers": {
        "x-api-key": "${env:CYBERMAX_API_KEY}"
      }
    }
  }
}

Cursor fills ${env:CYBERMAX_API_KEY} from your environment, so the key never sits in the file.

Where it goes:

~/.cursor/mcp.json (every project)
.cursor/mcp.json (this project only)

Config format checked 2026-10-09 against Cursor's MCP documentation.

Tools you get

Endpoint checked 2026-10-09: https://kevscope-api.cybermaxtools.com/mcp answered an MCP initialize (protocol 2025-06-18) and tools/list with 3 tools, all marked read-only. No key was used and no tool was called.

Tool	What it does	Required inputs
`cve_priority`	Patch-priority verdict for 1-20 CVE IDs with evidence: CISA KEV status (date added, due date, ransomware use), FIRST EPSS probability, CVSS (CNA or CISA-ADP), CISA SSVC exploitation/automatable/impact, vendor, product and links. Sorted most urgent first.	`cves`
`kev_recent`	CVEs added to the CISA Known Exploited Vulnerabilities catalog in the last N days, newest first, with due date, ransomware use and EPSS. Optional vendor/product text filter.	none
`epss_watchlist`	The highest-EPSS CVEs (most likely to be exploited in 30 days) that are not in CISA KEV yet. Defaults to this year's CVE IDs.	none

Test the endpoint from a terminal

This lists the tools without a key and without calling any of them:

curl -s https://kevscope-api.cybermaxtools.com/mcp \
  -H 'content-type: application/json' \
  -H 'accept: application/json, text/event-stream' \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

If it does not work

Cursor uses the top-level key "mcpServers" (VS Code uses "servers"); a file copied from VS Code will not load.
After editing the file, toggle the server off and on in settings if the tools do not appear.
The free tier has a daily limit (see the pricing line above); a paid key raises it.

Kevscope in other clients

VS Code (GitHub Copilot)Claude Code Claude Desktop and claude.ai Windsurf (Devin Desktop)Cline OpenAI Codex CLI Gemini CLI

More MCP servers for Cursor

All Kevscope setups · All Cursor setups · All