CVE Security · OpenAPI Overlay 1.0.0

API Evangelist overlay for CVE Security API

17 actions 16 updates 1 removal documentation extends ../openapi/_original/cve-security-com-openapi.json

Derived by API Evangelist Built from the contracts CVE Security publishes. CVE Security did not publish this file.

View Overlay File View on GitHub Overlay Specification

What the actions change

tagsx-mcp-toolsecurity

Targets 17 · first 16 shown; the file carries all of them

$.paths['/api/chains.json'].get.security

$.paths['/api/chains.json'].get

$.paths['/api/cve/{id}'].get

$.paths['/api/search'].get

$.paths['/api/entities'].get

$.paths['/api/package/{ecosystem}/{name}'].get

$.paths['/api/sbom'].post

$.paths['/api/updates'].get

$.paths['/api/export/{file}'].get

$.paths['/api/scoreboard/{file}'].get

$.paths['/api/panels/index.json'].get

$.paths['/api/panels/{slug}.json'].get

$.paths['/api/kev-watch.json'].get

$.paths['/api/kcv-watch.json'].get

$.paths['/api/sightings.json'].get

$.paths['/api/signup'].post

OpenAPI Overlay

overlay: 1.0.0
info:
  title: API Evangelist overlay for CVE Security API
  version: 1.0.0
extends: ../openapi/_original/cve-security-com-openapi.json
x-generated: '2026-11-05'
x-method: generated
x-source: openapi/_original/cve-security-com-openapi.json
x-rationale: >-
  The provider spec (1.9.1) declares securitySchemes `bearer` and `apiKey`, but getChains
  requires `bearerAuth`, a scheme that is not defined, and no operation carries tags. This
  overlay repairs the dangling security reference, adds tags, and records the MCP tool that
  backs each operation (from mcp/cve-security-com-tool-crosswalk.yml).
actions:
- target: $.paths['/api/chains.json'].get.security
  description: Remove the security requirement that names the undefined `bearerAuth` scheme.
  remove: true
- target: $.paths['/api/chains.json'].get
  description: Restore the requirement with the declared `bearer` and `apiKey` schemes.
  update:
    security:
    - bearer: []
    - apiKey: []
    tags: [Datasets]
    x-mcp-tool: get_chains
- target: $.paths['/api/cve/{id}'].get
  update:
    tags: [CVE Records]
    x-mcp-tool: get_cve
- target: $.paths['/api/search'].get
  update:
    tags: [Search]
    x-mcp-tool: search_cves
- target: $.paths['/api/entities'].get
  update:
    tags: [Search]
- target: $.paths['/api/package/{ecosystem}/{name}'].get
  update:
    tags: [Packages]
    x-mcp-tool: query_package
- target: $.paths['/api/sbom'].post
  update:
    tags: [Packages]
- target: $.paths['/api/updates'].get
  update:
    tags: [Change Stream]
    x-mcp-tool: get_updates
- target: $.paths['/api/export/{file}'].get
  update:
    tags: [Bulk Data]
- target: $.paths['/api/scoreboard/{file}'].get
  update:
    tags: [Datasets]
    x-mcp-tool: get_scoreboard
- target: $.paths['/api/panels/index.json'].get
  update:
    tags: [Panels]
- target: $.paths['/api/panels/{slug}.json'].get
  update:
    tags: [Panels]
- target: $.paths['/api/kev-watch.json'].get
  update:
    tags: [Datasets]
- target: $.paths['/api/kcv-watch.json'].get
  update:
    tags: [Datasets]
- target: $.paths['/api/sightings.json'].get
  update:
    tags: [Datasets]
    x-mcp-tool: get_sightings
- target: $.paths['/api/signup'].post
  update:
    tags: [Account]
- target: $.paths['/api/mcp'].post
  update:
    tags: [MCP]

Work with this as data

Every overlay here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for openapi overlays

4 MCP tools reach this

find_overlaysBrowse and filter every overlay in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This overlay

curl "https://apis.io/api/v1/overlays/cve-security-com-openapi-overlay"

All openapi overlays

curl "https://apis.io/api/v1/overlays?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.