Shodan

Shodan CVE API

The CVE API from Shodan — 2 operation(s) for cve.

Documentation GitHub OpenAPI

Operations 2

GET /cve/{cveId} Get CVE Details #

GET /cves Search CVEs #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this

find_apisBrowse and filter every API in the catalog.
get_api_artifactsOne API's artifacts, grouped by type.
get_openapiThe primary OpenAPI for this API.
find_similar_apisAPIs that look like this one.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This API

curl "https://apis.io/api/v1/apis/shodan-cve-api"

All apis

curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

openapi: 3.2.0
info:
  title: Shodan CVEDB CVE API
  description: Shodan's CVEDB is a free vulnerability database API that supports CVE lookups, CPE-keyed vulnerability search, KEV filtering, EPSS ordering, date-range queries, and product-name search. No API key required; updated daily.
  version: '1.0'
  contact:
    name: Shodan Support
    email: support@shodan.io
    url: https://cvedb.shodan.io/
  license:
    name: Shodan API Terms of Service
    url: https://www.shodan.io/legal/tos
servers:
- url: https://cvedb.shodan.io
  description: Production
tags:
- name: CVE
paths:
  /cve/{cveId}:
    get:
      tags:
      - CVE
      summary: Get CVE Details
      operationId: getCve
      description: Retrieve detailed information for a specific CVE including descriptions, CVSS, EPSS, KEV status, references, and impacted CPEs.
      parameters:
      - name: cveId
        in: path
        required: true
        schema:
          type: string
          pattern: ^CVE-\d{4}-\d{4,}$
      responses:
        '200':
          description: CVE record.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Cve'
        '404':
          description: CVE not found.
  /cves:
    get:
      tags:
      - CVE
      summary: Search CVEs
      operationId: searchCves
      description: Search the CVE catalog by CPE 2.3, product, KEV status, EPSS ordering, or date range.
      parameters:
      - name: cpe23
        in: query
        schema:
          type: string
        description: Filter by CPE 2.3 identifier (e.g. `cpe:2.3:a:nginx:nginx:1.21.0`).
      - name: product
        in: query
        schema:
          type: string
        description: Filter by product name.
      - name: is_kev
        in: query
        schema:
          type: boolean
        description: Restrict to CISA Known Exploited Vulnerabilities.
      - name: sort_by_epss
        in: query
        schema:
          type: boolean
        description: Sort results by EPSS score, highest first.
      - name: start_date
        in: query
        schema:
          type: string
          format: date
      - name: end_date
        in: query
        schema:
          type: string
          format: date
      - name: skip
        in: query
        schema:
          type: integer
          default: 0
      - name: limit
        in: query
        schema:
          type: integer
          default: 1000
      responses:
        '200':
          description: CVE list.
          content:
            application/json:
              schema:
                type: object
                properties:
                  cves:
                    type: array
                    items:
                      $ref: '#/components/schemas/Cve'
components:
  schemas:
    Cve:
      type: object
      properties:
        cve_id:
          type: string
        summary:
          type: string
        cvss:
          type: number
        cvss_version:
          type: string
        cvss_v2:
          type: number
        cvss_v3:
          type: number
        epss:
          type: number
        ranking_epss:
          type: number
        kev:
          type: boolean
        propose_action:
          type: string
        ransomware_campaign:
          type: string
        references:
          type: array
          items:
            type: string
            format: uri
        published_time:
          type: string
          format: date-time
        cpes:
          type: array
          items:
            type: string

Shodan CVE API

Operations 2

Documentation

Specifications

Schemas & Data

Other Resources