Crowdsec CVEs API
The CVEs API from Crowdsec — 4 operation(s) for cves.
Work with this as data
Every API here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for apis
7 MCP tools reach this
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This API
curl "https://apis.io/api/v1/apis/crowdsec:crowdsec-cves-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
OpenAPI Specification
openapi: 3.2.0
info:
title: Service Cves API
description: This is the API to manage Crowdsec services
contact:
name: CrowdSec
url: https://crowdsec.net/
email: info@crowdsec.net
version: 1.87.2
servers:
- url: https://admin.api.crowdsec.net/v1/
description: Production server
security:
- ApiKeyAuth: []
- BasicAuth: []
tags:
- name: CVEs
paths:
/cves/{cve_id}:
get:
tags:
- CVEs
summary: Get CVE ID informations
description: Get information about a specific CVE ID
operationId: getCve
parameters:
- name: cve_id
in: path
required: true
schema:
type: string
title: Cve Id
responses:
'200':
description: Successful Response
content:
application/json:
schema:
$ref: '#/components/schemas/GetCVEResponse'
'404':
description: CVE Not Found
'422':
description: Validation Error
content:
application/json:
schema:
$ref: '#/components/schemas/HTTPValidationError'
/cves/{cve_id}/ips:
get:
tags:
- CVEs
summary: Get IPs exploiting a CVE ID
description: Get information about IPs exploiting a specific CVE ID
operationId: getCveIps
parameters:
- name: cve_id
in: path
required: true
schema:
type: string
title: Cve Id
- name: since
in: query
required: false
schema:
anyOf:
- type: string
pattern: ^\d+[hd]$
- type: 'null'
description: Filter IPs seen since this date, format duration (e.g., 7d, 24h)
title: Since
description: Filter IPs seen since this date, format duration (e.g., 7d, 24h)
- name: page
in: query
required: false
schema:
type: integer
minimum: 1
description: Page number
default: 1
title: Page
description: Page number
- name: size
in: query
required: false
schema:
type: integer
maximum: 100
minimum: 1
description: Page size
default: 50
title: Size
description: Page size
responses:
'200':
description: Successful Response
content:
application/json:
schema:
$ref: '#/components/schemas/GetCVEIPsResponsePage'
'404':
description: CVE Not Found
'422':
description: Validation Error
content:
application/json:
schema:
$ref: '#/components/schemas/HTTPValidationError'
/cves/{cve_id}/integrations:
post:
tags:
- CVEs
summary: Subscribe an integration to a CVE ID
description: Subscribe an integration to receive threats related to a specific CVE ID
operationId: subscribeIntegrationToCve
parameters:
- name: cve_id
in: path
required: true
schema:
type: string
title: Cve Id
requestBody:
required: true
content:
application/json:
schema:
$ref: '#/components/schemas/SubscribeCVEIntegrationRequest'
responses:
'200':
description: Successful Response
content:
application/json:
schema: {}
'404':
description: Integration Not Found
'400':
description: CVE Already Subscribed
'422':
description: Validation Error
content:
application/json:
schema:
$ref: '#/components/schemas/HTTPValidationError'
/cves/{cve_id}/integrations/{integration_name}:
delete:
tags:
- CVEs
summary: Unsubscribe an integration from a CVE ID
description: Unsubscribe an integration from receiving threats related to a specific CVE ID
operationId: unsubscribeIntegrationFromCve
parameters:
- name: cve_id
in: path
required: true
schema:
type: string
title: Cve Id
- name: integration_name
in: path
required: true
schema:
type: string
title: Integration Name
responses:
'200':
description: Successful Response
content:
application/json:
schema: {}
'404':
description: Integration Not Found
'400':
description: CVE Already Unsubscribed
'422':
description: Validation Error
content:
application/json:
schema:
$ref: '#/components/schemas/HTTPValidationError'
components:
schemas:
MitreTechnique:
properties:
name:
type: string
title: Name
description: MITRE technique ID
label:
type: string
title: Label
description: MITRE technique label
description:
type: string
title: Description
description: MITRE technique description
type: object
required:
- name
- label
- description
title: MitreTechnique
IPItem:
properties:
ip:
type: string
title: Ip
description: IP address
reputation:
type: string
title: Reputation
description: Reputation of the IP
ip_range:
anyOf:
- type: string
- type: 'null'
title: Ip Range
description: IP range
ip_range_score:
anyOf:
- type: integer
- type: 'null'
title: Ip Range Score
description: IP range score
ip_range_24:
anyOf:
- type: string
- type: 'null'
title: Ip Range 24
description: IP range /24
ip_range_24_reputation:
anyOf:
- type: string
- type: 'null'
title: Ip Range 24 Reputation
description: IP range /24 reputation
ip_range_24_score:
anyOf:
- type: integer
- type: 'null'
title: Ip Range 24 Score
description: IP range /24 score
as_name:
anyOf:
- type: string
- type: 'null'
title: As Name
description: AS name
as_num:
anyOf:
- type: integer
- type: 'null'
title: As Num
description: AS number
background_noise_score:
type: integer
title: Background Noise Score
description: Background noise score
background_noise:
anyOf:
- type: string
- type: 'null'
title: Background Noise
description: Background noise level
confidence:
anyOf:
- type: string
- type: 'null'
title: Confidence
description: Confidence level
location:
anyOf:
- $ref: '#/components/schemas/Location'
- type: 'null'
description: IP location information
reverse_dns:
anyOf:
- type: string
- type: 'null'
title: Reverse Dns
description: Reverse DNS
behaviors:
items:
$ref: '#/components/schemas/Behavior'
type: array
title: Behaviors
description: List of behaviors
references:
items:
$ref: '#/components/schemas/Reference'
type: array
title: References
description: List of references
history:
$ref: '#/components/schemas/History'
description: Historical data
classifications:
$ref: '#/components/schemas/Classifications'
description: Classification data
mitre_techniques:
items:
$ref: '#/components/schemas/MitreTechnique'
type: array
title: Mitre Techniques
description: MITRE techniques
cves:
items:
type: string
type: array
title: Cves
description: List of CVEs
attack_details:
items:
$ref: '#/components/schemas/AttackDetail'
type: array
title: Attack Details
description: Attack details
target_countries:
additionalProperties:
type: integer
type: object
title: Target Countries
description: Target countries
scores:
$ref: '#/components/schemas/Scores'
description: Scoring information
type: object
required:
- ip
title: IPItem
Behavior:
properties:
name:
type: string
title: Name
description: Behavior name
label:
type: string
title: Label
description: Behavior label
description:
type: string
title: Description
description: Behavior description
type: object
required:
- name
- label
- description
title: Behavior
ScoreBreakdown:
properties:
aggressiveness:
type: integer
title: Aggressiveness
description: Aggressiveness score
threat:
type: integer
title: Threat
description: Threat score
trust:
type: integer
title: Trust
description: Trust score
anomaly:
type: integer
title: Anomaly
description: Anomaly score
total:
type: integer
title: Total
description: Total score
type: object
required:
- aggressiveness
- threat
- trust
- anomaly
- total
title: ScoreBreakdown
Classifications:
properties:
false_positives:
items:
$ref: '#/components/schemas/Classification'
type: array
title: False Positives
description: False positive classifications
classifications:
items:
$ref: '#/components/schemas/Classification'
type: array
title: Classifications
description: Main classifications
type: object
title: Classifications
ValidationError:
properties:
loc:
items:
anyOf:
- type: string
- type: integer
type: array
title: Location
msg:
type: string
title: Message
type:
type: string
title: Error Type
type: object
required:
- loc
- msg
- type
title: ValidationError
AffectedComponent:
properties:
vendor:
type: string
title: Vendor
description: Vendor of the affected component
product:
type: string
title: Product
description: Product name of the affected component
type: object
title: AffectedComponent
description: Affected Component in a CVE
Links:
properties:
first:
anyOf:
- type: string
- type: 'null'
title: First
examples:
- /api/v1/users?limit=1&offset1
last:
anyOf:
- type: string
- type: 'null'
title: Last
examples:
- /api/v1/users?limit=1&offset1
self:
anyOf:
- type: string
- type: 'null'
title: Self
examples:
- /api/v1/users?limit=1&offset1
next:
anyOf:
- type: string
- type: 'null'
title: Next
examples:
- /api/v1/users?limit=1&offset1
prev:
anyOf:
- type: string
- type: 'null'
title: Prev
examples:
- /api/v1/users?limit=1&offset1
type: object
title: Links
Location:
properties:
country:
anyOf:
- type: string
- type: 'null'
title: Country
description: Country code
city:
anyOf:
- type: string
- type: 'null'
title: City
description: City name
latitude:
anyOf:
- type: number
- type: 'null'
title: Latitude
description: Latitude coordinate
longitude:
anyOf:
- type: number
- type: 'null'
title: Longitude
description: Longitude coordinate
type: object
title: Location
Reference:
properties:
name:
type: string
title: Name
description: Reference name
label:
type: string
title: Label
description: Reference label
description:
type: string
title: Description
description: Reference description
type: object
required:
- name
- label
- description
title: Reference
History:
properties:
first_seen:
type: string
format: date-time
title: First Seen
description: First seen timestamp
last_seen:
type: string
format: date-time
title: Last Seen
description: Last seen timestamp
full_age:
type: integer
title: Full Age
description: Full age in days
days_age:
type: integer
title: Days Age
description: Days age
type: object
required:
- first_seen
- last_seen
- full_age
- days_age
title: History
GetCVEIPsResponsePage:
properties:
items:
items:
$ref: '#/components/schemas/IPItem'
type: array
title: Items
total:
type: integer
minimum: 0.0
title: Total
page:
type: integer
minimum: 1.0
title: Page
size:
type: integer
minimum: 1.0
title: Size
pages:
type: integer
minimum: 0.0
title: Pages
links:
$ref: '#/components/schemas/Links'
readOnly: true
type: object
required:
- items
- total
- page
- size
- pages
- links
title: GetCVEIPsResponsePage
Classification:
properties:
name:
type: string
title: Name
description: Classification name
label:
type: string
title: Label
description: Classification label
description:
type: string
title: Description
description: Classification description
type: object
required:
- name
- label
- description
title: Classification
Scores:
properties:
overall:
$ref: '#/components/schemas/ScoreBreakdown'
description: Overall scores
last_day:
$ref: '#/components/schemas/ScoreBreakdown'
description: Last day scores
last_week:
$ref: '#/components/schemas/ScoreBreakdown'
description: Last week scores
last_month:
$ref: '#/components/schemas/ScoreBreakdown'
description: Last month scores
type: object
required:
- overall
- last_day
- last_week
- last_month
title: Scores
AttackDetail:
properties:
name:
type: string
title: Name
description: Attack detail name
label:
type: string
title: Label
description: Attack detail label
description:
type: string
title: Description
description: Attack detail description
references:
items:
type: string
type: array
title: References
description: Attack detail references
type: object
required:
- name
- label
- description
title: AttackDetail
SubscribeCVEIntegrationRequest:
properties:
name:
type: string
title: Name
description: Name of the integration to subscribe
additionalProperties: false
type: object
required:
- name
title: SubscribeCVEIntegrationRequest
GetCVEResponse:
properties:
id:
type: string
title: Id
description: ID of the CVE
name:
type: string
title: Name
description: Name of the CVE
affected_components:
items:
$ref: '#/components/schemas/AffectedComponent'
type: array
title: Affected Components
description: List of affected components
let_score:
type: integer
maximum: 10.0
minimum: 0.0
title: Let Score
description: LET score of the CVE
first_seen:
type: string
format: date-time
title: First Seen
description: First seen date
last_seen:
type: string
format: date-time
title: Last Seen
description: Last seen date
nb_ips:
type: integer
minimum: 0.0
title: Nb Ips
description: Number of unique IPs affected
published_date:
type: string
format: date-time
title: Published Date
description: Published date of the CVE
cvss_score:
type: number
maximum: 10.0
minimum: 0.0
title: Cvss Score
description: CVSS score of the CVE
references:
items:
type: string
type: array
title: References
description: List of references for the CVE
description:
type: string
title: Description
description: Description of the CVE
type: object
required:
- id
- name
- affected_components
- let_score
- first_seen
- last_seen
- nb_ips
- published_date
- cvss_score
- references
- description
title: GetCVEResponse
description: GET CVE ID Response
HTTPValidationError:
properties:
detail:
items:
$ref: '#/components/schemas/ValidationError'
type: array
title: Detail
type: object
title: HTTPValidationError
securitySchemes:
ApiKeyAuth:
type: apiKey
in: header
name: x-api-key
description: If integration key is provided, can also work to get integration content
BasicAuth:
type: http
scheme: basic
description: Basic Auth for integration content endpoint only