25 services carry this tag in their source record. Tags come from the provider, not from us — a tag is a claim about what the service does, not proof that it does it well.
CVE vulnerability lookup. Returns security vulnerability records by CVE id or keyword from the NIST National Vulnerability Database and GitHub Security Advisories, each with CVSS score, severity, CWE weakness class, affe...
Call before installing packages suggested by a language model. Returns, for each npm or PyPI package name, whether it actually exists in the registry, whether it is deprecated or yanked, and — when the name is not found...
Look up a vulnerability by CVE or GHSA id (NVD: description, CVSS score and vector, CWE, CISA known-exploited flag; OSV: affected packages and fixed versions) or check a package version for known vulnerabilities via OSV....
CVE fact check, deterministic. Answers "is CVE-XXXX-NNNN real", "is it exploited in the wild", "what version fixes it", "how severe is it". Joins the NVD record (CVSS score, vector, dates), the CISA KEV catalog (actively...
CVE lookup and vulnerability search — resolve a CVE ID via OSV and return summary, severity, affected packages, and references for agent triage.
CVE lookup - description, status, CVSS metrics, weakness ids and references
Is this CVE weaponized? Returns enriched threat intelligence with exploit status, CVSS, EPSS, CISA KEV, ransomware mapping, and urgency score from 7 correlated sources.
Was this company hit by ransomware? Leak-site claim lookup by company name or domain. $0.01 USDC on Base per call. Returns matching ransomware-group claims with group, dates, country, sector and sources. Don't use this a...
Vulnerability scan for a software package by ecosystem, name and version, or by package-URL (purl). Queries OSV.dev for known advisories, collects their CVE ids and enriches them with NVD CVSS, CISA KEV and EPSS, then re...
CVE details - CVSS, CISA KEV status, EPSS exploit probability, affected packages and patch priority
Known vulnerabilities for a package version (OSV) - CVE aliases, severity and fixed-in version
Prioritize up to 50 CVEs in one request using FIRST EPSS, CISA KEV, and known ransomware signals. Returns deterministic risk scores, urgency tiers, exploitation signals, vendor/product context, and remediation metadata a...
Batch dependency vulnerability check — check ordered exact package versions in OSV with deduplicated CVE enrichment, explicit completeness, and CISA KEV known-exploited signals.
Foreign exchange reference rates from the European Central Bank. Base currency plus optional symbols filter. Updated daily on ECB schedule. JSON response. $0.002 USDC per call, pay via x402, no API key.
Keyword and autocomplete suggestions for any seed query. Aggregates Wikipedia OpenSearch and DuckDuckGo autocomplete (both public, no auth) into a de-duplicated ranked list — useful for SEO keyword research, content-gap...
Package security scanner — CVEs, license check, typosquat detection.
Check Python packages from PyPI before you pip install or bump versions. Send {"packages":["requests==2.25.0","flask>=2.0"]} or {"requirements":"<requirements.txt text>"}, up to 50 packages. Per package: latest release a...
Details of a CVE vulnerability (e.g. CVE-2021-44228) from the official CVE Program (MITRE CVE Services): title, description, severity and CVSS vectors, affected products and versions and references, with MITRE's required...
Latest-release metadata from the official PyPI JSON API (live): version, license, requires_python compatibility, requires_dist dependency specs (max 100), yanked flag, last upload time and project URLs. Query: ?pkg=reque...
Vulnerabilities being actively exploited according to CISA's KEV catalog: CVE, vendor, product, name, description, date added, remediation due date and ransomware use; the latest N days or search by vendor/product (Micro...
Datakoot Security Intel: Audit a whole dependency manifest for known vulnerabilities in one call. $0.01 USDC per call, charged only on success.
Resolve a public GitHub release into the most plausible downloadable asset for a normalized OS/architecture target, excluding source/signature/checksum files and linking checksum companions when present. Returns ambiguit...
Live DNS lookup for a domain: returns name, type and records[]. Supported record types: A, AAAA (addresses as strings), MX ({exchange, priority} objects), TXT (each record an array of its strings), NS and CNAME (hostname...
Breached password check: is this password in known data breaches, and how often? Send only the SHA-1 hash (never the password); just the first 5 characters reach Have I Been Pwned (k-anonymity). Up to 50 hashes per call.