{"openapi":"3.1.0","info":{"title":"api-cveintel","version":"0.1.0","description":"One merged, agent-ready record per CVE: CVE List (CNA and CISA-ADP), CISA KEV, EPSS, exploit evidence links, NVD status and OSV fixed versions.","contact":{"email":"support@elysianintelligence.com","url":"https://elysianintelligence.com"}},"servers":[{"url":"https://api.elysianintelligence.com/cve"}],"components":{"securitySchemes":{"ApiKey":{"type":"http","scheme":"bearer","description":"Send 'x-api-key: <key>' instead if you prefer."}},"schemas":{},"parameters":{}},"paths":{"/status":{"get":{"summary":"Dataset freshness","responses":{"200":{"description":"When each dataset last updated","content":{"application/json":{"schema":{"type":"object","properties":{"api":{"type":"string"},"version":{"type":"string"},"datasets":{"type":"array","items":{"type":"object","properties":{"name":{"type":"string"},"last_success_at":{"type":["string","null"]},"row_count":{"type":["number","null"]},"last_error":{"type":["string","null"]}},"required":["name","last_success_at","row_count","last_error"]}},"notes":{"type":"array","items":{"type":"string"}}},"required":["api","version","datasets"]}}}}}}},"/v1/keys":{"post":{"summary":"Get a free API key","description":"The key is shown once. Store it; only a hash is kept. Sign up on https://elysianintelligence.com/signup/, which solves the bot check (Cloudflare Turnstile) for you.","requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","properties":{"email":{"type":"string","maxLength":254},"turnstile_token":{"type":"string","maxLength":2048},"accept_terms":{"type":"string","maxLength":16,"description":"The version of the API Terms of Service (https://elysianintelligence.com/terms/) you accept. Must be \"1.0\"."},"certify_tradecheck":{"type":"string","maxLength":32,"description":"Send \"tradecheck-fcra-v1\" to certify that you will use TradeCheck data only for permitted purposes and never as a factor in eligibility for credit, insurance, employment, housing or any purpose under 15 U.S.C. § 1681b (FCRA). TradeCheck serves no data without it."}},"required":["email"]}}}},"responses":{"201":{"description":"Key created","content":{"application/json":{"schema":{"type":"object","properties":{"key":{"type":"string"},"prefix":{"type":"string"},"plan":{"type":"string","enum":["free","starter","pro","payg","lapsed"]}},"required":["key","prefix","plan"]}}}}}}},"/v1/keys/rotate":{"post":{"security":[{"ApiKey":[]}],"summary":"Rotate your API key","description":"Makes a new key for the same account and revokes the key you send, in one step. The plan, prepaid calls, subscription, usage, terms acceptance and TradeCheck certification move to the new key. The new key is shown once. Apps connected over OAuth must sign in again with the new key. We email the account about every rotation.","responses":{"201":{"description":"Key rotated","content":{"application/json":{"schema":{"type":"object","properties":{"key":{"type":"string"},"prefix":{"type":"string"},"plan":{"type":"string","enum":["free","starter","pro","payg","lapsed"]}},"required":["key","prefix","plan"]}}}}}}},"/v1/keys/revoke":{"post":{"security":[{"ApiKey":[]}],"summary":"Revoke your API key","description":"Stops the key you send at once, for good. A key with a live subscription or prepaid calls left cannot be revoked: rotate it instead, so they move to a new key. We email the account about every revoke. After the last key of an account is revoked, a new key needs a new sign-up or a request to support.","requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","properties":{"confirm":{"type":"string","maxLength":32,"description":"Send \"revoke\" to confirm. This cannot be undone."}},"required":["confirm"]}}}},"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"type":"object","properties":{"revoked":{"type":"boolean","enum":[true]},"active_keys_left":{"type":"integer"},"message":{"type":"string"}},"required":["revoked","active_keys_left","message"]}}}}}}},"/v1/keys/close-account":{"post":{"security":[{"ApiKey":[]}],"summary":"Close your account","description":"Revokes every key of the account (the email of the key you send) and closes the account. Cancel any subscription first. Prepaid calls that are left end with the account. We email the account, delete its email address and key records 30 days after closure, and keep billing records for seven years without the email address, as the privacy policy (https://elysianintelligence.com/privacy/) says.","requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","properties":{"confirm":{"type":"string","maxLength":32,"description":"Send \"close-account\" to confirm. This cannot be undone."}},"required":["confirm"]}}}},"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"type":"object","properties":{"closed":{"type":"boolean","enum":[true]},"keys_closed":{"type":"integer"},"message":{"type":"string"}},"required":["closed","keys_closed","message"]}}}}}}},"/v1/keys/accept-terms":{"post":{"security":[{"ApiKey":[]}],"summary":"Accept the API Terms of Service","description":"For a key made before the terms, or before their current version. Billing sells nothing to a key until it accepts the current version.","requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","properties":{"accept_terms":{"type":"string","maxLength":16,"description":"The version of the API Terms of Service (https://elysianintelligence.com/terms/) you accept. Must be \"1.0\"."}}}}}},"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"type":"object","properties":{"terms_version":{"type":"string"}},"required":["terms_version"]}}}}}}},"/v1/keys/certify-tradecheck":{"post":{"security":[{"ApiKey":[]}],"summary":"Certify the TradeCheck FCRA terms","description":"TradeCheck serves no data to a key until it certifies section 6.1(c) of the terms.","requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","properties":{"certify":{"type":"string","maxLength":32,"description":"Send \"tradecheck-fcra-v1\" to certify that you will use TradeCheck data only for permitted purposes and never as a factor in eligibility for credit, insurance, employment, housing or any purpose under 15 U.S.C. § 1681b (FCRA). TradeCheck serves no data without it."}}}}}},"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"type":"object","properties":{"tradecheck_certified":{"type":"boolean","enum":[true]}},"required":["tradecheck_certified"]}}}}}}},"/v1/cve/{id}":{"get":{"summary":"One merged record for a CVE: CNA and CISA-ADP severity, NVD status, CISA KEV, EPSS with 7-day change, exploit evidence links, affected products, OSV packages with fixed versions, and references.","tags":["get_cve"],"security":[{"ApiKey":[]}],"parameters":[{"schema":{"type":"string","pattern":"^CVE-\\d{4}-\\d{4,}$/i"},"required":true,"name":"id","in":"path"}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"object","properties":{"id":{"type":"string"},"state":{"type":"string","enum":["PUBLISHED","REJECTED"]},"published":{"type":["string","null"]},"updated":{"type":["string","null"]},"title":{"type":["string","null"]},"description":{"type":["string","null"]},"severity":{"type":"object","properties":{"cna":{"type":["object","null"],"properties":{"cvss3":{"type":["object","null"],"properties":{"score":{"type":"number"},"vector":{"type":"string"},"source":{"type":["string","null"],"description":"Only for NVD: who scored it, NVD itself or a CNA."}},"required":["score","vector"]},"cvss4":{"type":["object","null"],"properties":{"score":{"type":"number"},"vector":{"type":"string"},"source":{"type":["string","null"],"description":"Only for NVD: who scored it, NVD itself or a CNA."}},"required":["score","vector"]}},"required":["cvss3","cvss4"]},"cisa_adp":{"type":["object","null"],"properties":{"cvss3":{"type":["object","null"],"properties":{"score":{"type":"number"},"vector":{"type":"string"},"source":{"type":["string","null"],"description":"Only for NVD: who scored it, NVD itself or a CNA."}},"required":["score","vector"]},"cvss4":{"type":["object","null"],"properties":{"score":{"type":"number"},"vector":{"type":"string"},"source":{"type":["string","null"],"description":"Only for NVD: who scored it, NVD itself or a CNA."}},"required":["score","vector"]}},"required":["cvss3","cvss4"]},"nvd":{"type":["object","null"],"properties":{"cvss3":{"type":["object","null"],"properties":{"score":{"type":"number"},"vector":{"type":"string"},"source":{"type":["string","null"],"description":"Only for NVD: who scored it, NVD itself or a CNA."}},"required":["score","vector"]},"cvss4":{"type":["object","null"],"properties":{"score":{"type":"number"},"vector":{"type":"string"},"source":{"type":["string","null"],"description":"Only for NVD: who scored it, NVD itself or a CNA."}},"required":["score","vector"]}},"required":["cvss3","cvss4"],"description":"The score NVD shows: its own, or else the CNA's. Null when NVD has none, or when NVD could not be reached (see nvd_status)."}},"required":["cna","cisa_adp","nvd"]},"nvd_status":{"type":"string","enum":["analyzed","not_analyzed","not_found","unavailable"]},"ssvc":{"type":["object","null"],"properties":{"exploitation":{"type":["string","null"]},"automatable":{"type":["string","null"]},"technical_impact":{"type":["string","null"]}},"required":["exploitation","automatable","technical_impact"]},"cwes":{"type":"array","items":{"type":"string"}},"kev":{"type":"object","properties":{"listed":{"type":"boolean"},"date_added":{"type":["string","null"]},"due_date":{"type":["string","null"]},"known_ransomware_campaign_use":{"type":["string","null"]},"required_action":{"type":["string","null"]}},"required":["listed"]},"epss":{"type":["object","null"],"properties":{"score":{"type":"number"},"percentile":{"type":"number"},"delta_7d":{"type":["number","null"],"description":"Score now minus the score 7 days ago. Null when there is less than 7 days of history."},"changed_on":{"type":"string"}},"required":["score","percentile","delta_7d","changed_on"]},"exploit_evidence":{"type":"array","items":{"type":"object","properties":{"source":{"type":"string"},"url":{"type":"string"},"title":{"type":["string","null"]}},"required":["source","url","title"]}},"affected":{"type":"array","items":{"type":"object","properties":{"vendor":{"type":["string","null"]},"product":{"type":["string","null"]},"versions":{"type":"array","items":{"type":"object","additionalProperties":{}}}},"required":["vendor","product","versions"]}},"cpes":{"type":"array","items":{"type":"object","additionalProperties":{"type":"string"}}},"osv":{"type":"object","properties":{"status":{"type":"string","enum":["ok","unavailable"]},"packages":{"type":"array","items":{"type":"object","properties":{"ecosystem":{"type":"string"},"name":{"type":"string"},"purl":{"type":["string","null"]},"fixed_versions":{"type":"array","items":{"type":"string"}},"osv_ids":{"type":"array","items":{"type":"string"}}},"required":["ecosystem","name","purl","fixed_versions","osv_ids"]}}},"required":["status","packages"]},"references":{"type":"array","items":{"type":"object","properties":{"url":{"type":"string"},"tags":{"type":"array","items":{"type":"string"}}},"required":["url"]}},"enrichment_gap":{"type":"boolean","description":"True when NVD has not enriched the CVE: it does not list it, its status is not Analyzed or Modified, or it has no affected-product (CPE) data. False when NVD could not be reached, and for rejected CVEs."},"sources":{"type":"array","items":{"type":"object","properties":{"name":{"type":"string"},"url":{"type":"string"},"license":{"type":"string"},"terms":{"type":"string"}},"required":["name","url","license","terms"]}},"notices":{"type":"array","items":{"type":"string"},"description":"The copyright, licence and attribution notices of this record's sources. Include them wherever you show or pass on the data (API Terms of Service, section 5.4)."}},"required":["id","state","published","updated","title","description","severity","nvd_status","ssvc","cwes","kev","epss","exploit_evidence","affected","cpes","osv","references","enrichment_gap","sources","notices"]}}}}}}},"/v1/cves":{"get":{"summary":"List CVEs. Filter by CISA KEV listing, minimum EPSS score, updated since a date, and vendor. Order: newest update first; with vendor, newest published first; with min_epss, highest EPSS first. A page can hold fewer than limit: follow next_cursor until it is null.","tags":["search_cves"],"security":[{"ApiKey":[]}],"parameters":[{"schema":{"anyOf":[{"type":"boolean"},{"type":"string","enum":["true","false"]}],"description":"true: only CVEs in CISA KEV. false: only CVEs not in it."},"required":false,"description":"true: only CVEs in CISA KEV. false: only CVEs not in it.","name":"kev","in":"query"},{"schema":{"type":["number","null"],"minimum":0,"maximum":1},"required":false,"name":"min_epss","in":"query"},{"schema":{"type":"string","pattern":"^\\d{4}-\\d{2}-\\d{2}$","description":"Only CVEs updated on or after this day (UTC)."},"required":false,"description":"Only CVEs updated on or after this day (UTC).","name":"since","in":"query"},{"schema":{"type":"string","minLength":1,"maxLength":100,"description":"Vendor name as the CVE record writes it, in any letter case. Exact match."},"required":false,"description":"Vendor name as the CVE record writes it, in any letter case. Exact match.","name":"vendor","in":"query"},{"schema":{"type":"integer","minimum":1,"maximum":100,"default":25},"required":false,"name":"limit","in":"query"},{"schema":{"type":"string","maxLength":200},"required":false,"name":"cursor","in":"query"}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"object","properties":{"cves":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string"},"title":{"type":["string","null"]},"published":{"type":["string","null"]},"updated":{"type":["string","null"]},"cvss":{"type":["object","null"],"properties":{"score":{"type":"number"},"version":{"type":"string","enum":["4.0","3.x"]},"source":{"type":"string","enum":["cna","cisa-adp"]}},"required":["score","version","source"],"description":"The first score found: CNA v4, CNA v3, CISA-ADP v4, CISA-ADP v3. NVD scores are read live and are only in get_cve."},"ssvc_exploitation":{"type":["string","null"]},"kev":{"type":"boolean"},"epss":{"type":["number","null"]}},"required":["id","title","published","updated","cvss","ssvc_exploitation","kev","epss"]}},"next_cursor":{"type":["string","null"]}},"required":["cves","next_cursor"]}}}}}}},"/v1/feed":{"get":{"summary":"Change events since a time, oldest first: new CVEs, CVEs added to CISA KEV, EPSS score jumps of 0.1 or more in a day, and new exploit evidence. Page with next_cursor.","tags":["cve_feed"],"security":[{"ApiKey":[]}],"parameters":[{"schema":{"type":"string","format":"date-time","description":"ISO 8601 time, for example 2026-10-16T00:00:00Z."},"required":true,"description":"ISO 8601 time, for example 2026-10-16T00:00:00Z.","name":"since","in":"query"},{"schema":{"type":"integer","minimum":1,"maximum":500,"default":100},"required":false,"name":"limit","in":"query"},{"schema":{"type":"string","pattern":"^\\d+$"},"required":false,"name":"cursor","in":"query"}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"object","properties":{"events":{"type":"array","items":{"type":"object","properties":{"id":{"type":"number"},"at":{"type":"string"},"kind":{"type":"string","enum":["kev_added","epss_jump","exploit_added","cve_added"]},"cve":{"type":"string"},"detail":{"type":["object","null"],"additionalProperties":{}}},"required":["id","at","kind","cve","detail"]}},"next_cursor":{"type":["string","null"]}},"required":["events","next_cursor"]}}}}}}},"/v1/match":{"post":{"summary":"Find CVEs for up to 100 package URLs (purl, matched by OSV) or CPE 2.3 names (matched against stored CVE data by product and version).","tags":["match_packages"],"security":[{"ApiKey":[]}],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","properties":{"queries":{"type":"array","items":{"type":"string","minLength":1,"maxLength":300},"minItems":1,"maxItems":100,"description":"Each item is a purl such as pkg:npm/lodash@4.17.20 or a CPE 2.3 name."}},"required":["queries"]}}}},"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"object","properties":{"results":{"type":"array","items":{"type":"object","properties":{"query":{"type":"string"},"kind":{"type":"string","enum":["purl","cpe","unknown"]},"cves":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string"},"title":{"type":["string","null"]},"published":{"type":["string","null"]},"updated":{"type":["string","null"]},"cvss":{"type":["object","null"],"properties":{"score":{"type":"number"},"version":{"type":"string","enum":["4.0","3.x"]},"source":{"type":"string","enum":["cna","cisa-adp"]}},"required":["score","version","source"],"description":"The first score found: CNA v4, CNA v3, CISA-ADP v4, CISA-ADP v3. NVD scores are read live and are only in get_cve."},"ssvc_exploitation":{"type":["string","null"]},"kev":{"type":"boolean"},"epss":{"type":["number","null"]}},"required":["id","title","published","updated","cvss","ssvc_exploitation","kev","epss"]}},"osv_only":{"type":"array","items":{"type":"string"},"description":"OSV advisories for a purl that name no CVE."},"truncated":{"type":"boolean","description":"True when more matches exist than were returned."},"note":{"type":"string"}},"required":["query","kind","cves","osv_only","truncated"]}}},"required":["results"]}}}}}}}},"webhooks":{}}