1. Conduid
  2. Developer Tools
  3. Kcve
MCP server · Developer Tools

Kcve

by · github.com/mattfoster/kcve

MCP server which reads info on Linux Kernel CVES

Unclaimed last commit a year ago devtools
InstallView source
41Fair

Scored 5 months ago · breakdown

About Kcve

Kcve is an MCP server published by mattfoster in the Developer Tools category: mCP server which reads info on Linux Kernel CVES.

The repository has 1 stars and 0 forks, with the last commit a year ago. Six months or more without a commit doesn't mean the server is broken, but check the open issues before depending on it in production.

Install

From source
git clone https://github.com/mattfoster/kcve

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Kcve

Powered by Claude · Grounded in docs

I know everything about Kcve. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

Static checks derived from the repository 7 days ago. Heuristics on the source, not an audit.

  • ✓README presentThe repository ships documentation.
  • !License declaredNo license file. Legally you have no right to use it in a product.
  • ✓Tests presentA test suite exists in the repository.
  • ✓Dependencies pinnedA lockfile pins dependency versions.
  • ✓No dynamic code executionSource scan found no eval, dynamic Function, or shell execution.
  • !Scoped permissionsDoesn't declare a permission scope. Assume it can do anything its process can.

README

Kernel CVE MCP Server

This clones the linux kernel CVE List git repo, into an sqlite database and then allows querying this DB with a really basic MCP server.

See: https://lore.kernel.org/linux-cve-announce/_/text/mirror/ for details.

Commands

  • kernel-list-to-sqlite - Download the Kernel CVE list into a temporary dir and save the contents into an sqlite database.
  • stio-mcp - stdio MCP server which provides the get_kernel_cve_info and search_kernel_cve_info tools.

Config

You need to specify the location of the DB file, so use something like this:

 {
  "mcpServers": {
    "kernel-cve-info": {
      "command": "/Users/mpf/Projects/kcve/stdio-mcp",
      "args": ["-db", "/Users/mpf/Projects/kcve/commits.db"]
    }
  }
}

README fetched from the repository 7 days ago. The original is authoritative.

Questions

About Kcve

How do I install Kcve?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Kcve safe to use with an AI agent?

Its trust score is 41 out of 100 (fair). It passes 4 of the 6 static security checks run so far; the failures are listed above. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Kcve still maintained?

The last commit was a year ago. That's long enough that you should check whether the maintainer is responding to issues before depending on it.