Use Kevscope MCP with Gemini CLI
CVE patch-priority API + MCP: CISA KEV, EPSS, CVSS, SSVC. Keys $19/mo; 200 free calls/day.
Remote MCP server (Streamable HTTP), nothing to install. Free: 200 free calls/day · Paid: Keys $19/mo
Set it up
- Run the command, or add the server to settings.json under "mcpServers".
- Start Gemini CLI and run /mcp to list the server and its tools.
- Ask a question the tools can answer.
Run:
gemini mcp add --transport http kevscope-api 'https://kevscope-api.cybermaxtools.com/mcp?via=use-with-gemini-cli'Or add it to settings.json yourself::
{
"mcpServers": {
"kevscope-api": {
"httpUrl": "https://kevscope-api.cybermaxtools.com/mcp?via=use-with-gemini-cli"
}
}
}With a paid key:
gemini mcp add --transport http --header "x-api-key: YOUR_KEY" kevscope-api 'https://kevscope-api.cybermaxtools.com/mcp?via=use-with-gemini-cli'Use the project file only if it is not committed with the key in it.
- ~/.gemini/settings.json (user)
- .gemini/settings.json (project, the default for the add command)
Tools you get
Endpoint checked 2026-10-09: https://kevscope-api.cybermaxtools.com/mcp answered an MCP initialize (protocol 2025-06-18) and tools/list with 3 tools, all marked read-only. No key was used and no tool was called.
| Tool | What it does | Required inputs |
|---|---|---|
cve_priority | Patch-priority verdict for 1-20 CVE IDs with evidence: CISA KEV status (date added, due date, ransomware use), FIRST EPSS probability, CVSS (CNA or CISA-ADP), CISA SSVC exploitation/automatable/impact, vendor, product and links. Sorted most urgent first. | cves |
kev_recent | CVEs added to the CISA Known Exploited Vulnerabilities catalog in the last N days, newest first, with due date, ransomware use and EPSS. Optional vendor/product text filter. | none |
epss_watchlist | The highest-EPSS CVEs (most likely to be exploited in 30 days) that are not in CISA KEV yet. Defaults to this year's CVE IDs. | none |
Test the endpoint from a terminal
This lists the tools without a key and without calling any of them:
curl -s https://kevscope-api.cybermaxtools.com/mcp \
-H 'content-type: application/json' \
-H 'accept: application/json, text/event-stream' \
-d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'If it does not work
- Use "httpUrl" for Streamable HTTP; "url" is for the older SSE transport.
- The docs note that for unpaid-tier and Google One users, Gemini CLI was replaced by Antigravity CLI on 18 June 2026.
- The free tier has a daily limit (see the pricing line above); a paid key raises it.
Kevscope in other clients
CursorVS Code (GitHub Copilot)Claude CodeClaude Desktop and claude.aiWindsurf (Devin Desktop)ClineOpenAI Codex CLI
More MCP servers for Gemini CLI
AfterwrenAwardtide Recompete RadarBonafido: Business Domain Verification APICitewrenCommonkite: Free Image Search API, Creative Commons & CC0CyberMax DataDomainDNADutyfinchFeedpeck: RSS Feed Finder & Reader by WebsiteFieldwrightFigurewellHaulrollHireHeatInsidewellLeafmeltLinkheftLogolark: Company Logo API & Favicon Finder by DomainMailvett: Email Validation API for AI AgentsNamewhereOrbitwrenPinloft: Batch Geocoder — Address to Lat/Long + Census FIPSPricewickPrintwren: HTML to PDF and URL to PDF (real Chrome)RecallrollShiftmoorSumbloomSwellmeter TrendingZiplore: US ZIP Code API (county, time zone, demographics, radius)