Discovery needs no key. Ratings and market analysis are Pro.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we
store it to create your key and to recognise you if you sign in with another
provider. See our Privacy Policy and
Terms.
openapi: 3.2.0
info:
title: Ambolt data tools Vulnerability API
version: 0.1.1
description: Pay-per-call data endpoints using the x402 protocol (USDC on Base, Polygon and Solana). Failed calls are not charged.
x-guidance: 'Call GET /v1/<tool> with the documented query parameters. Without payment the response is 402 with the price and payment requirements; an x402 client pays in USDC and retries. Add free=1 for one free call per tool and IP per day. Company, tender, document, rates, on-chain and web tools; every response carries source and date. The same tools are available as MCP tools at /mcp (free, 30 requests a minute) and as Apify Actors. Company-level data only: no personal data.'
contact:
email: hello@ambolt.dev
url: https://ambolt.dev
servers:
- url: https://api.ambolt.dev
security: []
tags:
- name: Vulnerability
paths:
/v1/package-vulnerabilities:
get:
operationId: package_vulnerabilities
summary: 'Package Vulnerabilities: Known CVEs for npm and PyPI Versions'
description: 'Check an npm or PyPI package version against a public vulnerability database: advisory ids, aliases (CVE, GHSA), summary, severity label and first fixed version, plus the latest published version. Informational; not a full security audit.'
tags:
- Vulnerability
parameters:
- name: ecosystem
in: query
required: true
schema:
type: string
enum:
- npm
- PyPI
description: Package ecosystem.
description: Package ecosystem.
- name: name
in: query
required: true
schema:
type: string
maxLength: 214
pattern: ^[@A-Za-z0-9._/-]+$
description: Package name, e.g. lodash or requests.
description: Package name, e.g. lodash or requests.
- name: version
in: query
required: false
schema:
type: string
maxLength: 64
pattern: ^[A-Za-z0-9._+-]+$
description: 'Version to check. Default: latest published version.'
description: 'Version to check. Default: latest published version.'
- name: free
in: query
required: false
schema:
type: string
enum:
- '1'
description: Set to 1 for one free call per tool and IP address per day (no payment).
x-payment-info:
price:
mode: fixed
currency: USD
amount: '0.003000'
protocols:
- x402: {}
responses:
'200':
description: Result (JSON). Every result names its source and the time it was read.
content:
application/json:
schema:
type: object
'400':
description: Invalid input; not charged.
'402':
description: 'Payment required: 0.003 USD in USDC (x402 v2).'