# CVE Security

**Canonical:** https://apis.io/providers/cve-security-com/  
**Website:** https://cve-security.com/  
**APIs profiled:** 1

CVE Security (cve-security.com) is a per-CVE vulnerability intelligence service operated by InfoBakery LLC, a Connecticut-based software company. For each CVE it publishes CISA KEV status, FIRST EPSS scores, detection coverage across Nuclei templates, Metasploit modules and Emerging Threats/Snort network-IDS rules, per-scorer CVSS, vendor fixed versions and upgrade targets, and news and community signal, updated hourly. It offers a keyed JSON REST API (free key, 1,000 requests a day), a keyless MCP server for AI assistants, Atom feeds and CC BY 4.0 bulk exports, plus original datasets such as KEV Watch and Known Chained Vulnerabilities. It is not affiliated with MITRE, NIST or CISA.

## Kin Score — 47.4 / 100 (developing)

Scored 2026-11-06 under rubric 0.27.0.

| Facet | Score |
|---|---|
| Discoverability | 66.7 |
| Contract Quality | 60.1 |
| Contract Governance | 35.6 |
| Operational Transparency | 42.1 |
| Developer Ergonomics | 39.9 |
| Access Clarity | 34.2 |

Regulatory layer — **Horizontal (data, software, accessibility, platform)**: 22.5 (matched via fallback).

## Agent readiness — 39.1 (agent-ready)

| Dimension | Value |
|---|---|
| Spec Presence | yes |
| Agentic Access | derived |
| Reversibility Documented | no |
| MCP Server | documented |
| Auth Clarity | bearer |
| Idempotency | no |
| Error Semantics | verified |
| OpenAPI Examples | partial |
| Rate Limit Signal | verified |
| Event Surface Described | no |
| Agent Skills | derived |
| Well Known Catalog | yes |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |
| Delegated Identity | no |
| Protected Resource Metadata | no |
| Dynamic Client Registration | no |
| Agentic Commerce | no |
| Pagination Ratio | na |
| Operation Distinctiveness | distinct |
| MCP Tool Quality | na |

## Access

Free · Self-serve signup — onboarding: self-serve, pricing: free, trial: no (confidence: high).

## APIs (15)

- **CVE Security Chains.json API** — The Chains.json API from CVE Security — 1 operation(s) for chains.json.
- **CVE Security Cve API** — The Cve API from CVE Security — 1 operation(s) for cve.
- **CVE Security Entities API** — The Entities API from CVE Security — 1 operation(s) for entities.
- **CVE Security Export API** — The Export API from CVE Security — 1 operation(s) for export.
- **CVE Security Kcv Watch.json API** — The Kcv Watch.json API from CVE Security — 1 operation(s) for kcv watch.json.
- **CVE Security Kev Watch.json API** — The Kev Watch.json API from CVE Security — 1 operation(s) for kev watch.json.
- **CVE Security MCP API** — The Mcp API from CVE Security — 1 operation(s) for mcp.
- **CVE Security Package API** — The Package API from CVE Security — 1 operation(s) for package.
- **CVE Security Panels API** — The Panels API from CVE Security — 2 operation(s) for panels.
- **CVE Security Sbom API** — The Sbom API from CVE Security — 1 operation(s) for sbom.
- **CVE Security Scoreboard API** — The Scoreboard API from CVE Security — 1 operation(s) for scoreboard.
- **CVE Security Search API** — The Search API from CVE Security — 1 operation(s) for search.
- **CVE Security Sightings.json API** — The Sightings.json API from CVE Security — 1 operation(s) for sightings.json.
- **CVE Security Signup API** — The Signup API from CVE Security — 1 operation(s) for signup.
- **CVE Security Updates API** — The Updates API from CVE Security — 1 operation(s) for updates.

## MCP servers (1)

- **CVE Security MCP Server** — Remote MCP server at cve-security.com; 9 tools listed.

## Agentic access (1)

- **Cve Security Com Agentic Access** — 16 operations · 3 acting

## Security (3)

- **Cve Security Com Authentication** — apiKey/http · 2 schemes
- **Cve Security Com Domain Security** — TLSv1.3
- **Cve Security Com Vulnerability Disclosure** — security.txt · contact published

## Plans (1)

- **Cve Security Com Plans Pricing**

## Tags

Company, Security, Vulnerabilities, CVE, Threat Intelligence, CISA KEV, EPSS, Vulnerability Management, MCP

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/cve-security-com/). Scores are computed from the provider's own public artifacts under a published rubric.