{"openapi":"3.1.0","info":{"title":"Cybersecurity Intelligence API","version":"1.0.0","description":"Independent API for vulnerability and dependency security: CVE details, package checks, batch queries, risk assessments, dependency trees, project health, repository Scorecard, and lockfile auditing from OSV, CISA KEV, FIRST EPSS, NVD, Google deps.dev, and OpenSSF Scorecard. Paid with x402 exact USDC on Base. No account is required.","contact":{"email":"support@brainiac.software"},"x-guidance":"BRAINIAC.software is a pay-per-call API for software agents. No account or API key is required.\nPayment uses the x402 protocol with exact USDC on Base (chain id 8453). Each POST operation has a fixed USD price.\nHow to call an operation:\n1. POST a JSON body matching the operation's requestBody schema to the operation path. Include an Idempotency-Key header (64 hex characters, 32 random bytes).\n2. If you have not paid, the server responds 402 with payment requirements in the body. Pay the exact amount to the payTo address on Base.\n3. Retry the identical request with the same Idempotency-Key and add a payment-signature header containing the x402 payment payload. On success (200) the operation result is returned.\n4. Reuse the same Idempotency-Key only for retries of the same operation and request body; it will not be charged twice.\nAll outputs are compliance prechecks, drafts, or data lookups for human review. They are not official determinations, legal advice, identity confirmation, or certified filings. Verify time-sensitive or official data with the cited source before acting."},"servers":[{"url":"https://www.brainiac.software"}],"paths":{"/api/v1/cybersecurity-intelligence/vulnerability":{"post":{"operationId":"get_vulnerability_details","summary":"Get vulnerability details","description":"Retrieve details for a CVE or vulnerability ID from OSV, CISA KEV, FIRST EPSS, and NVD.","tags":["cybersecurity-intelligence"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","type":"object","properties":{"cveId":{"type":"string","minLength":1,"maxLength":30}},"required":["cveId"],"additionalProperties":false},"example":{"cveId":"CVE-2023-1234"}}}},"parameters":[{"name":"Idempotency-Key","in":"header","required":true,"description":"Fresh random 32-byte value encoded as 64 hexadecimal characters. Reuse unchanged only for retries of the same operation and request.","schema":{"type":"string","pattern":"^[0-9a-fA-F]{64}$"}}],"responses":{"200":{"description":"Illustrative endpoint-specific JSON response shape. Conditional fields depend on the result and data-source availability.","content":{"application/json":{"schema":{"type":"object","properties":{"retrievedAt":{"type":"string"},"cveId":{"type":"string"},"vulnerability":{"type":"object","properties":{"cveId":{"type":"string"},"aliases":{"type":"array","items":{"type":"string"}},"summary":{"type":"string"},"affectedPackages":{"type":"array","items":{"type":"object","properties":{"ecosystem":{"type":"string"},"name":{"type":"string"},"versions":{"type":"array","items":{"type":"string"}},"ranges":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string"},"events":{"type":"array","items":{"type":"object","properties":{"introduced":{"type":"string"}},"additionalProperties":true}}},"additionalProperties":true}}},"additionalProperties":true}},"cvssScore":{"type":"number"},"cvssSeverity":{"type":"string"},"epssProbability":{"type":"number"},"epssPercentile":{"type":"number"},"epssDate":{"type":"string"},"kevStatus":{"type":"string"},"kevProduct":{"type":"string"},"kevVendor":{"type":"string"},"kevRequiredAction":{"type":"string"},"kevDueDate":{"type":"string"},"kevDateAdded":{"type":"string"},"ransomwareCampaignUse":{"type":"boolean"},"cweId":{"type":"string"},"references":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string"},"url":{"type":"string"}},"additionalProperties":true}},"timestamps":{"type":"object","properties":{"osvPublished":{"type":"string"},"osvModified":{"type":"string"},"nvdPublished":{"type":"string"},"nvdModified":{"type":"string"}},"additionalProperties":true}},"additionalProperties":true},"sources":{"type":"object","properties":{"osv":{"type":"object","properties":{"status":{"type":"string"},"url":{"type":"string"},"retrievedAt":{"type":"string"}},"additionalProperties":true},"cisa":{"type":"object","properties":{"status":{"type":"string"},"url":{"type":"string"},"retrievedAt":{"type":"string"}},"additionalProperties":true},"epss":{"type":"object","properties":{"status":{"type":"string"},"url":{"type":"string"},"retrievedAt":{"type":"string"}},"additionalProperties":true},"nvd":{"type":"object","properties":{"status":{"type":"string"},"url":{"type":"string"},"retrievedAt":{"type":"string"}},"additionalProperties":true}},"additionalProperties":true},"limitations":{"type":"array","items":{"type":"string"}}},"additionalProperties":true},"example":{"retrievedAt":"2026-10-29T12:00:00.000Z","cveId":"CVE-2023-1234","vulnerability":{"cveId":"CVE-2023-1234","aliases":["GHSA-abc-123"],"summary":"A buffer overflow vulnerability allows remote code execution.","affectedPackages":[{"ecosystem":"PyPI","name":"example-package","versions":["1.0.0","1.0.1"],"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.0.2"}]}]}],"cvssScore":9.8,"cvssSeverity":"CRITICAL","epssProbability":0.95,"epssPercentile":0.98,"epssDate":"2026-10-28","kevStatus":"KNOWN_EXPLOITED","kevProduct":"Example Product","kevVendor":"Example Vendor","kevRequiredAction":"Apply updates per vendor instructions.","kevDueDate":"2026-11-15","kevDateAdded":"2026-10-01","ransomwareCampaignUse":true,"cweId":"CWE-119","references":[{"type":"ADVISORY","url":"https://example.com/advisory"}],"timestamps":{"osvPublished":"2026-10-01T00:00:00.000Z","osvModified":"2026-10-15T00:00:00.000Z","nvdPublished":"2026-10-01T00:00:00.000Z","nvdModified":"2026-10-15T00:00:00.000Z"}},"sources":{"osv":{"status":"OK","url":"https://api.osv.dev/v1/query","retrievedAt":"2026-10-29T12:00:00.000Z"},"cisa":{"status":"OK","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","retrievedAt":"2026-10-29T11:55:00.000Z"},"epss":{"status":"OK","url":"https://api.first.org/data/v1/epss?cve=CVE-2023-1234","retrievedAt":"2026-10-29T12:00:00.000Z"},"nvd":{"status":"OK","url":"https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2023-1234","retrievedAt":"2026-10-29T12:00:00.000Z"}},"limitations":["OSV data comes from the OSV.dev API and may not include all vulnerability databases.","CISA KEV data is cached for 5 minutes to avoid repeated requests.","EPSS scores are from FIRST and may not reflect the latest probability.","NVD API is rate-limited to 5 requests per 30 seconds without an API key."]}}}},"400":{"description":"Invalid JSON or request schema."},"402":{"description":"Payment Required"},"409":{"description":"Idempotency conflict, in-progress payment, or expired result cache. Reusing the key cannot trigger a second charge."},"413":{"description":"Request body exceeds the 24 MB limit."},"500":{"description":"Operation failed. With upfront settlement this may occur after payment; reuse the same idempotency key to retrieve the stored result."},"503":{"description":"Payment or retry-safe result storage is unavailable; the operation is not run."}},"x-payment-info":{"price":{"mode":"fixed","currency":"USD","amount":"0.02"},"protocols":[{"x402":{}}]}}},"/api/v1/cybersecurity-intelligence/package/check":{"post":{"operationId":"check_package_vulnerabilities","summary":"Check package vulnerabilities","description":"Check one package and version for vulnerabilities using OSV, enriched with CISA KEV, EPSS, and NVD data.","tags":["cybersecurity-intelligence"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","type":"object","properties":{"ecosystem":{"type":"string","minLength":1,"maxLength":50},"package":{"type":"string","minLength":1,"maxLength":200},"version":{"type":"string","minLength":1,"maxLength":100}},"required":["ecosystem","package","version"],"additionalProperties":false},"example":{"ecosystem":"PyPI","package":"requests","version":"2.28.0"}}}},"parameters":[{"name":"Idempotency-Key","in":"header","required":true,"description":"Fresh random 32-byte value encoded as 64 hexadecimal characters. Reuse unchanged only for retries of the same operation and request.","schema":{"type":"string","pattern":"^[0-9a-fA-F]{64}$"}}],"responses":{"200":{"description":"Illustrative endpoint-specific JSON response shape. Conditional fields depend on the result and data-source availability.","content":{"application/json":{"schema":{"type":"object","properties":{"retrievedAt":{"type":"string"},"package":{"type":"object","properties":{"ecosystem":{"type":"string"},"name":{"type":"string"},"version":{"type":"string"}},"additionalProperties":true},"vulnerabilities":{"type":"array","items":{"type":"object","properties":{"cveId":{"type":"string"},"aliases":{"type":"array","items":{"type":"string"}},"summary":{"type":"string"},"affectedPackages":{"type":"array","items":{"type":"object","properties":{"ecosystem":{"type":"string"},"name":{"type":"string"},"versions":{"type":"array","items":{"type":"string"}},"ranges":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string"},"events":{"type":"array","items":{"type":"object","properties":{"introduced":{"type":"string"}},"additionalProperties":true}}},"additionalProperties":true}}},"additionalProperties":true}},"cvssScore":{"type":"number"},"cvssSeverity":{"type":"string"},"epssProbability":{"type":"number"},"epssPercentile":{"type":"number"},"epssDate":{"type":"string"},"kevStatus":{"type":"string"},"kevProduct":{"type":"string"},"kevVendor":{"type":"string"},"kevRequiredAction":{"type":"string"},"kevDueDate":{"type":"string"},"kevDateAdded":{"type":"string"},"ransomwareCampaignUse":{"type":"boolean"},"cweId":{"type":"string"},"references":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string"},"url":{"type":"string"}},"additionalProperties":true}},"timestamps":{"type":"object","properties":{"osvPublished":{"type":"string"},"osvModified":{"type":"string"},"nvdPublished":{"type":"string"},"nvdModified":{"type":"string"}},"additionalProperties":true}},"additionalProperties":true}},"source":{"type":"object","properties":{"url":{"type":"string"},"retrievedAt":{"type":"string"},"status":{"type":"string"}},"additionalProperties":true},"limitations":{"type":"array","items":{"type":"string"}}},"additionalProperties":true},"example":{"retrievedAt":"2026-10-29T12:00:00.000Z","package":{"ecosystem":"PyPI","name":"requests","version":"2.28.0"},"vulnerabilities":[{"cveId":"CVE-2023-1234","aliases":["GHSA-abc-123"],"summary":"A buffer overflow vulnerability allows remote code execution.","affectedPackages":[{"ecosystem":"PyPI","name":"requests","versions":["2.28.0"],"ranges":[{"type":"SEMVER","events":[{"introduced":"2.28.0"},{"fixed":"2.28.1"}]}]}],"cvssScore":9.8,"cvssSeverity":"CRITICAL","epssProbability":0.95,"epssPercentile":0.98,"epssDate":"2026-10-28","kevStatus":"KNOWN_EXPLOITED","kevProduct":"requests","kevVendor":"Python Software Foundation","kevRequiredAction":"Apply updates per vendor instructions.","kevDueDate":"2026-11-15","kevDateAdded":"2026-10-01","ransomwareCampaignUse":true,"cweId":"CWE-119","references":[{"type":"ADVISORY","url":"https://example.com/advisory"}],"timestamps":{"osvPublished":"2026-10-01T00:00:00.000Z","osvModified":"2026-10-15T00:00:00.000Z","nvdPublished":"2026-10-01T00:00:00.000Z","nvdModified":"2026-10-15T00:00:00.000Z"}}],"source":{"url":"https://api.osv.dev/v1/query","retrievedAt":"2026-10-29T12:00:00.000Z","status":"OK"},"limitations":["Results are limited to the first 50 vulnerabilities from OSV.","EPSS and NVD data are fetched for each vulnerability and may be rate-limited.","Not all vulnerabilities may have EPSS or NVD data available."]}}}},"400":{"description":"Invalid JSON or request schema."},"402":{"description":"Payment Required"},"409":{"description":"Idempotency conflict, in-progress payment, or expired result cache. Reusing the key cannot trigger a second charge."},"413":{"description":"Request body exceeds the 24 MB limit."},"500":{"description":"Operation failed. With upfront settlement this may occur after payment; reuse the same idempotency key to retrieve the stored result."},"503":{"description":"Payment or retry-safe result storage is unavailable; the operation is not run."}},"x-payment-info":{"price":{"mode":"fixed","currency":"USD","amount":"0.03"},"protocols":[{"x402":{}}]}}},"/api/v1/cybersecurity-intelligence/package/batch-check":{"post":{"operationId":"batch_check_package_vulnerabilities","summary":"Batch check package vulnerabilities","description":"Check multiple packages and versions for vulnerabilities using OSV batch query, enriched with CISA KEV, EPSS, and NVD data.","tags":["cybersecurity-intelligence"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","type":"object","properties":{"packages":{"minItems":1,"maxItems":20,"type":"array","items":{"type":"object","properties":{"ecosystem":{"type":"string","minLength":1,"maxLength":50},"package":{"type":"string","minLength":1,"maxLength":200},"version":{"type":"string","minLength":1,"maxLength":100}},"required":["ecosystem","package","version"],"additionalProperties":false}}},"required":["packages"],"additionalProperties":false},"example":{"packages":[{"ecosystem":"PyPI","package":"requests","version":"2.28.0"},{"ecosystem":"npm","package":"express","version":"4.18.0"}]}}}},"parameters":[{"name":"Idempotency-Key","in":"header","required":true,"description":"Fresh random 32-byte value encoded as 64 hexadecimal characters. Reuse unchanged only for retries of the same operation and request.","schema":{"type":"string","pattern":"^[0-9a-fA-F]{64}$"}}],"responses":{"200":{"description":"Illustrative endpoint-specific JSON response shape. Conditional fields depend on the result and data-source availability.","content":{"application/json":{"schema":{"type":"object","properties":{"retrievedAt":{"type":"string"},"results":{"type":"array","items":{"type":"object","properties":{"package":{"type":"object","properties":{"ecosystem":{"type":"string"},"name":{"type":"string"},"version":{"type":"string"}},"additionalProperties":true},"vulnerabilities":{"type":"array","items":{"type":"object","properties":{"cveId":{"type":"string"},"aliases":{"type":"array","items":{"type":"string"}},"summary":{"type":"string"},"affectedPackages":{"type":"array","items":{"type":"object","properties":{"ecosystem":{"type":"string"},"name":{"type":"string"},"versions":{"type":"array","items":{"type":"string"}},"ranges":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string"},"events":{"type":"array","items":{"type":"object","properties":{"introduced":{"type":"string"}},"additionalProperties":true}}},"additionalProperties":true}}},"additionalProperties":true}},"cvssScore":{"type":"number"},"cvssSeverity":{"type":"string"},"epssProbability":{"type":"number"},"epssPercentile":{"type":"number"},"epssDate":{"type":"string"},"kevStatus":{"type":"string"},"kevProduct":{"type":"string"},"kevVendor":{"type":"string"},"kevRequiredAction":{"type":"string"},"kevDueDate":{"type":"string"},"kevDateAdded":{"type":"string"},"ransomwareCampaignUse":{"type":"boolean"},"cweId":{"type":"string"},"references":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string"},"url":{"type":"string"}},"additionalProperties":true}},"timestamps":{"type":"object","properties":{"osvPublished":{"type":"string"},"osvModified":{"type":"string"},"nvdPublished":{"type":"string"},"nvdModified":{"type":"string"}},"additionalProperties":true}},"additionalProperties":true}},"source":{"type":"object","properties":{"status":{"type":"string"}},"additionalProperties":true}},"additionalProperties":true}},"source":{"type":"object","properties":{"url":{"type":"string"},"retrievedAt":{"type":"string"},"status":{"type":"string"}},"additionalProperties":true},"limitations":{"type":"array","items":{"type":"string"}}},"additionalProperties":true},"example":{"retrievedAt":"2026-10-29T12:00:00.000Z","results":[{"package":{"ecosystem":"PyPI","name":"requests","version":"2.28.0"},"vulnerabilities":[{"cveId":"CVE-2023-1234","aliases":["GHSA-abc-123"],"summary":"A buffer overflow vulnerability allows remote code execution.","affectedPackages":[{"ecosystem":"PyPI","name":"requests","versions":["2.28.0"],"ranges":[{"type":"SEMVER","events":[{"introduced":"2.28.0"},{"fixed":"2.28.1"}]}]}],"cvssScore":9.8,"cvssSeverity":"CRITICAL","epssProbability":0.95,"epssPercentile":0.98,"epssDate":"2026-10-28","kevStatus":"KNOWN_EXPLOITED","kevProduct":"requests","kevVendor":"Python Software Foundation","kevRequiredAction":"Apply updates per vendor instructions.","kevDueDate":"2026-11-15","kevDateAdded":"2026-10-01","ransomwareCampaignUse":true,"cweId":"CWE-119","references":[{"type":"ADVISORY","url":"https://example.com/advisory"}],"timestamps":{"osvPublished":"2026-10-01T00:00:00.000Z","osvModified":"2026-10-15T00:00:00.000Z","nvdPublished":"2026-10-01T00:00:00.000Z","nvdModified":"2026-10-15T00:00:00.000Z"}}],"source":{"status":"OK"}},{"package":{"ecosystem":"npm","name":"express","version":"4.18.0"},"vulnerabilities":[],"source":{"status":"OK"}}],"source":{"url":"https://api.osv.dev/v1/querybatch","retrievedAt":"2026-10-29T12:00:00.000Z","status":"OK"},"limitations":["Batch queries are limited to 20 packages per request.","Each package is limited to the first 20 vulnerabilities from OSV.","EPSS and NVD data are fetched for each vulnerability and may be rate-limited."]}}}},"400":{"description":"Invalid JSON or request schema."},"402":{"description":"Payment Required"},"409":{"description":"Idempotency conflict, in-progress payment, or expired result cache. Reusing the key cannot trigger a second charge."},"413":{"description":"Request body exceeds the 24 MB limit."},"500":{"description":"Operation failed. With upfront settlement this may occur after payment; reuse the same idempotency key to retrieve the stored result."},"503":{"description":"Payment or retry-safe result storage is unavailable; the operation is not run."}},"x-payment-info":{"price":{"mode":"fixed","currency":"USD","amount":"0.10"},"protocols":[{"x402":{}}]}}},"/api/v1/cybersecurity-intelligence/risk/assess":{"post":{"operationId":"assess_vulnerability_risk","summary":"Assess vulnerability risk","description":"Produce a consolidated vulnerability risk assessment for multiple packages, combining OSV, CISA KEV, EPSS, and NVD data.","tags":["cybersecurity-intelligence"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","type":"object","properties":{"packages":{"minItems":1,"maxItems":10,"type":"array","items":{"type":"object","properties":{"ecosystem":{"type":"string","minLength":1,"maxLength":50},"package":{"type":"string","minLength":1,"maxLength":200},"version":{"type":"string","minLength":1,"maxLength":100}},"required":["ecosystem","package","version"],"additionalProperties":false}}},"required":["packages"],"additionalProperties":false},"example":{"packages":[{"ecosystem":"PyPI","package":"requests","version":"2.28.0"}]}}}},"parameters":[{"name":"Idempotency-Key","in":"header","required":true,"description":"Fresh random 32-byte value encoded as 64 hexadecimal characters. Reuse unchanged only for retries of the same operation and request.","schema":{"type":"string","pattern":"^[0-9a-fA-F]{64}$"}}],"responses":{"200":{"description":"Illustrative endpoint-specific JSON response shape. Conditional fields depend on the result and data-source availability.","content":{"application/json":{"schema":{"type":"object","properties":{"retrievedAt":{"type":"string"},"assessment":{"type":"object","properties":{"overallRisk":{"type":"string"},"totalVulnerabilities":{"type":"number"},"criticalCount":{"type":"number"},"highCount":{"type":"number"},"mediumCount":{"type":"number"},"lowCount":{"type":"number"},"kevCount":{"type":"number"},"highEpssCount":{"type":"number"},"packages":{"type":"array","items":{"type":"object","properties":{"package":{"type":"object","properties":{"ecosystem":{"type":"string"},"name":{"type":"string"},"version":{"type":"string"}},"additionalProperties":true},"risk":{"type":"string"},"vulnerabilities":{"type":"array","items":{"type":"object","properties":{"cveId":{"type":"string"},"aliases":{"type":"array","items":{"type":"string"}},"summary":{"type":"string"},"affectedPackages":{"type":"array","items":{"type":"object","properties":{"ecosystem":{"type":"string"},"name":{"type":"string"},"versions":{"type":"array","items":{"type":"string"}},"ranges":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string"},"events":{"type":"array","items":{"type":"object","properties":{"introduced":{"type":"string"}},"additionalProperties":true}}},"additionalProperties":true}}},"additionalProperties":true}},"cvssScore":{"type":"number"},"cvssSeverity":{"type":"string"},"epssProbability":{"type":"number"},"epssPercentile":{"type":"number"},"epssDate":{"type":"string"},"kevStatus":{"type":"string"},"kevProduct":{"type":"string"},"kevVendor":{"type":"string"},"kevRequiredAction":{"type":"string"},"kevDueDate":{"type":"string"},"kevDateAdded":{"type":"string"},"ransomwareCampaignUse":{"type":"boolean"},"cweId":{"type":"string"},"references":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string"},"url":{"type":"string"}},"additionalProperties":true}},"timestamps":{"type":"object","properties":{"osvPublished":{"type":"string"},"osvModified":{"type":"string"},"nvdPublished":{"type":"string"},"nvdModified":{"type":"string"}},"additionalProperties":true}},"additionalProperties":true}}},"additionalProperties":true}}},"additionalProperties":true},"source":{"type":"object","properties":{"url":{"type":"string"},"retrievedAt":{"type":"string"},"status":{"type":"string"}},"additionalProperties":true},"limitations":{"type":"array","items":{"type":"string"}}},"additionalProperties":true},"example":{"retrievedAt":"2026-10-29T12:00:00.000Z","assessment":{"overallRisk":"CRITICAL","totalVulnerabilities":5,"criticalCount":2,"highCount":1,"mediumCount":1,"lowCount":1,"kevCount":2,"highEpssCount":3,"packages":[{"package":{"ecosystem":"PyPI","name":"requests","version":"2.28.0"},"risk":"CRITICAL","vulnerabilities":[{"cveId":"CVE-2023-1234","aliases":["GHSA-abc-123"],"summary":"A buffer overflow vulnerability allows remote code execution.","affectedPackages":[{"ecosystem":"PyPI","name":"requests","versions":["2.28.0"],"ranges":[{"type":"SEMVER","events":[{"introduced":"2.28.0"},{"fixed":"2.28.1"}]}]}],"cvssScore":9.8,"cvssSeverity":"CRITICAL","epssProbability":0.95,"epssPercentile":0.98,"epssDate":"2026-10-28","kevStatus":"KNOWN_EXPLOITED","kevProduct":"requests","kevVendor":"Python Software Foundation","kevRequiredAction":"Apply updates per vendor instructions.","kevDueDate":"2026-11-15","kevDateAdded":"2026-10-01","ransomwareCampaignUse":true,"cweId":"CWE-119","references":[{"type":"ADVISORY","url":"https://example.com/advisory"}],"timestamps":{"osvPublished":"2026-10-01T00:00:00.000Z","osvModified":"2026-10-15T00:00:00.000Z","nvdPublished":"2026-10-01T00:00:00.000Z","nvdModified":"2026-10-15T00:00:00.000Z"}}]}]},"source":{"url":"https://api.osv.dev/v1/querybatch","retrievedAt":"2026-10-29T12:00:00.000Z","status":"OK"},"limitations":["Risk assessment is based on available data from OSV, CISA, EPSS, and NVD.","Missing CVSS or EPSS data may affect risk scoring.","Assessment is not a definitive security evaluation; review each vulnerability individually."]}}}},"400":{"description":"Invalid JSON or request schema."},"402":{"description":"Payment Required"},"409":{"description":"Idempotency conflict, in-progress payment, or expired result cache. Reusing the key cannot trigger a second charge."},"413":{"description":"Request body exceeds the 24 MB limit."},"500":{"description":"Operation failed. With upfront settlement this may occur after payment; reuse the same idempotency key to retrieve the stored result."},"503":{"description":"Payment or retry-safe result storage is unavailable; the operation is not run."}},"x-payment-info":{"price":{"mode":"fixed","currency":"USD","amount":"0.15"},"protocols":[{"x402":{}}]}}},"/api/v1/cybersecurity-intelligence/dependency-tree":{"post":{"operationId":"get_dependency_tree","summary":"Get dependency tree","description":"Return direct and transitive dependencies, dependency versions and available dependency metadata using Google deps.dev API.","tags":["cybersecurity-intelligence"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","type":"object","properties":{"ecosystem":{"type":"string","enum":["GO","RUBYGEMS","NPM","CARGO","MAVEN","PYPI","NUGET"]},"packageName":{"type":"string"},"version":{"type":"string"}},"required":["ecosystem","packageName"],"additionalProperties":false},"example":{"ecosystem":"NPM","packageName":"express","version":"4.18.0"}}}},"parameters":[{"name":"Idempotency-Key","in":"header","required":true,"description":"Fresh random 32-byte value encoded as 64 hexadecimal characters. Reuse unchanged only for retries of the same operation and request.","schema":{"type":"string","pattern":"^[0-9a-fA-F]{64}$"}}],"responses":{"200":{"description":"Illustrative endpoint-specific JSON response shape. Conditional fields depend on the result and data-source availability.","content":{"application/json":{"schema":{"type":"object","properties":{"retrievedAt":{"type":"string"},"input":{"type":"object","properties":{"ecosystem":{"type":"string"},"packageName":{"type":"string"},"version":{"type":"string"}},"additionalProperties":true},"dependencyTree":{"type":"object","properties":{"result":{"type":"object","properties":{"system":{"type":"string"},"name":{"type":"string"},"version":{"type":"string"},"dependencies":{"type":"array","items":{"type":"object","properties":{"system":{"type":"string"},"name":{"type":"string"},"version":{"type":"string"}},"additionalProperties":true}}},"additionalProperties":true}},"additionalProperties":true},"sources":{"type":"array","items":{"type":"object","properties":{"source":{"type":"string"},"url":{"type":"string"},"retrievedAt":{"type":"string"}},"additionalProperties":true}},"limitations":{"type":"array","items":{"type":"string"}}},"additionalProperties":true},"example":{"retrievedAt":"2026-10-29T12:00:00.000Z","input":{"ecosystem":"NPM","packageName":"express","version":"4.18.0"},"dependencyTree":{"result":{"system":"NPM","name":"express","version":"4.18.0","dependencies":[{"system":"NPM","name":"accepts","version":"1.3.8"}]}},"sources":[{"source":"Google deps.dev API","url":"https://api.deps.dev/v3/systems/NPM/packages/express/versions/4.18.0/dependencies","retrievedAt":"2026-10-29T12:00:00.000Z"}],"limitations":["Dependency tree data is from deps.dev.","Only direct and transitive dependencies in deps.dev are included.","Not all ecosystems have complete dependency data."]}}}},"400":{"description":"Invalid JSON or request schema."},"402":{"description":"Payment Required"},"409":{"description":"Idempotency conflict, in-progress payment, or expired result cache. Reusing the key cannot trigger a second charge."},"413":{"description":"Request body exceeds the 24 MB limit."},"500":{"description":"Operation failed. With upfront settlement this may occur after payment; reuse the same idempotency key to retrieve the stored result."},"503":{"description":"Payment or retry-safe result storage is unavailable; the operation is not run."}},"x-payment-info":{"price":{"mode":"fixed","currency":"USD","amount":"0.05"},"protocols":[{"x402":{}}]}}},"/api/v1/cybersecurity-intelligence/package/project-health":{"post":{"operationId":"get_package_project_health","summary":"Get package project health","description":"Return project activity indicators, repository associations, package metadata and available security information using Google deps.dev API.","tags":["cybersecurity-intelligence"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","type":"object","properties":{"ecosystem":{"type":"string","enum":["GO","RUBYGEMS","NPM","CARGO","MAVEN","PYPI","NUGET"]},"packageName":{"type":"string"}},"required":["ecosystem","packageName"],"additionalProperties":false},"example":{"ecosystem":"NPM","packageName":"express"}}}},"parameters":[{"name":"Idempotency-Key","in":"header","required":true,"description":"Fresh random 32-byte value encoded as 64 hexadecimal characters. Reuse unchanged only for retries of the same operation and request.","schema":{"type":"string","pattern":"^[0-9a-fA-F]{64}$"}}],"responses":{"200":{"description":"Illustrative endpoint-specific JSON response shape. Conditional fields depend on the result and data-source availability.","content":{"application/json":{"schema":{"type":"object","properties":{"retrievedAt":{"type":"string"},"input":{"type":"object","properties":{"ecosystem":{"type":"string"},"packageName":{"type":"string"}},"additionalProperties":true},"projectHealth":{"type":"object","properties":{"result":{"type":"object","properties":{"system":{"type":"string"},"name":{"type":"string"},"versions":{"type":"array","items":{"type":"object","properties":{"version":{"type":"string"},"isDefault":{"type":"boolean"}},"additionalProperties":true}}},"additionalProperties":true}},"additionalProperties":true},"sources":{"type":"array","items":{"type":"object","properties":{"source":{"type":"string"},"url":{"type":"string"},"retrievedAt":{"type":"string"}},"additionalProperties":true}},"limitations":{"type":"array","items":{"type":"string"}}},"additionalProperties":true},"example":{"retrievedAt":"2026-10-29T12:00:00.000Z","input":{"ecosystem":"NPM","packageName":"express"},"projectHealth":{"result":{"system":"NPM","name":"express","versions":[{"version":"4.18.0","isDefault":true}]}},"sources":[{"source":"Google deps.dev API","url":"https://api.deps.dev/v3/systems/NPM/packages/express","retrievedAt":"2026-10-29T12:00:00.000Z"}],"limitations":["Project health data is from deps.dev.","Activity indicators may vary by ecosystem.","Repository associations depend on package metadata."]}}}},"400":{"description":"Invalid JSON or request schema."},"402":{"description":"Payment Required"},"409":{"description":"Idempotency conflict, in-progress payment, or expired result cache. Reusing the key cannot trigger a second charge."},"413":{"description":"Request body exceeds the 24 MB limit."},"500":{"description":"Operation failed. With upfront settlement this may occur after payment; reuse the same idempotency key to retrieve the stored result."},"503":{"description":"Payment or retry-safe result storage is unavailable; the operation is not run."}},"x-payment-info":{"price":{"mode":"fixed","currency":"USD","amount":"0.05"},"protocols":[{"x402":{}}]}}},"/api/v1/cybersecurity-intelligence/repository/scorecard":{"post":{"operationId":"get_repository_scorecard","summary":"Get repository Scorecard","description":"Retrieve the official OpenSSF Scorecard result for a GitHub, GitLab or other supported repository.","tags":["cybersecurity-intelligence"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","type":"object","properties":{"repository":{"type":"string","format":"uri"}},"required":["repository"],"additionalProperties":false},"example":{"repository":"https://github.com/ossf/scorecard"}}}},"parameters":[{"name":"Idempotency-Key","in":"header","required":true,"description":"Fresh random 32-byte value encoded as 64 hexadecimal characters. Reuse unchanged only for retries of the same operation and request.","schema":{"type":"string","pattern":"^[0-9a-fA-F]{64}$"}}],"responses":{"200":{"description":"Illustrative endpoint-specific JSON response shape. Conditional fields depend on the result and data-source availability.","content":{"application/json":{"schema":{"type":"object","properties":{"retrievedAt":{"type":"string"},"repository":{"type":"string"},"scorecard":{"type":"object","properties":{"score":{"type":"number"},"checks":{"type":"array","items":{"type":"object","properties":{"name":{"type":"string"},"score":{"type":"number"}},"additionalProperties":true}}},"additionalProperties":true},"sources":{"type":"array","items":{"type":"object","properties":{"source":{"type":"string"},"url":{"type":"string"},"retrievedAt":{"type":"string"}},"additionalProperties":true}},"limitations":{"type":"array","items":{"type":"string"}}},"additionalProperties":true},"example":{"retrievedAt":"2026-10-29T12:00:00.000Z","repository":"https://github.com/ossf/scorecard","scorecard":{"score":8.6,"checks":[{"name":"Maintained","score":10},{"name":"Security-Policy","score":10}]},"sources":[{"source":"OpenSSF Scorecard API","url":"https://api.scorecard.dev/projects/github.com/ossf/scorecard","retrievedAt":"2026-10-29T12:00:00.000Z"}],"limitations":["Scorecard results are from OpenSSF.","Only GitHub, GitLab, and supported repositories are included.","Scores are heuristic indicators, not guarantees of security."]}}}},"400":{"description":"Invalid JSON or request schema."},"402":{"description":"Payment Required"},"409":{"description":"Idempotency conflict, in-progress payment, or expired result cache. Reusing the key cannot trigger a second charge."},"413":{"description":"Request body exceeds the 24 MB limit."},"500":{"description":"Operation failed. With upfront settlement this may occur after payment; reuse the same idempotency key to retrieve the stored result."},"503":{"description":"Payment or retry-safe result storage is unavailable; the operation is not run."}},"x-payment-info":{"price":{"mode":"fixed","currency":"USD","amount":"0.05"},"protocols":[{"x402":{}}]}}},"/api/v1/cybersecurity-intelligence/lockfile/audit":{"post":{"operationId":"audit_lockfile","summary":"Audit lockfile","description":"Parse supported package lockfiles, identify dependencies and versions, then combine deps.dev and existing OSV/CISA/EPSS/NVD findings.","tags":["cybersecurity-intelligence"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","type":"object","properties":{"lockfileContent":{"type":"string"},"ecosystem":{"type":"string","enum":["NPM","PYPI","MAVEN","RUBYGEMS","CARGO","NUGET","GO"]}},"required":["lockfileContent"],"additionalProperties":false},"example":{"lockfileContent":"package-lock.json content here","ecosystem":"NPM"}}}},"parameters":[{"name":"Idempotency-Key","in":"header","required":true,"description":"Fresh random 32-byte value encoded as 64 hexadecimal characters. Reuse unchanged only for retries of the same operation and request.","schema":{"type":"string","pattern":"^[0-9a-fA-F]{64}$"}}],"responses":{"200":{"description":"Illustrative endpoint-specific JSON response shape. Conditional fields depend on the result and data-source availability.","content":{"application/json":{"schema":{"type":"object","properties":{"retrievedAt":{"type":"string"},"input":{"type":"object","properties":{"lockfileContent":{"type":"string"},"ecosystem":{"type":"string"}},"additionalProperties":true},"dependencies":{"type":"array","items":{}},"vulnerabilities":{"type":"array","items":{}},"sources":{"type":"array","items":{}},"limitations":{"type":"array","items":{"type":"string"}}},"additionalProperties":true},"example":{"retrievedAt":"2026-10-29T12:00:00.000Z","input":{"lockfileContent":"package-lock.json content","ecosystem":"NPM"},"dependencies":[],"vulnerabilities":[],"sources":[],"limitations":["Lockfile parsing is limited to common formats.","Only deps.dev-supported ecosystems can be audited.","Combine with existing OSV/CISA/EPSS/NVD findings for complete vulnerability data."]}}}},"400":{"description":"Invalid JSON or request schema."},"402":{"description":"Payment Required"},"409":{"description":"Idempotency conflict, in-progress payment, or expired result cache. Reusing the key cannot trigger a second charge."},"413":{"description":"Request body exceeds the 24 MB limit."},"500":{"description":"Operation failed. With upfront settlement this may occur after payment; reuse the same idempotency key to retrieve the stored result."},"503":{"description":"Payment or retry-safe result storage is unavailable; the operation is not run."}},"x-payment-info":{"price":{"mode":"fixed","currency":"USD","amount":"0.10"},"protocols":[{"x402":{}}]}}}},"components":{"schemas":{"ApiError":{"type":"object","required":["error"],"properties":{"error":{"type":"object","required":["code","message"],"properties":{"code":{"type":"string"},"message":{"type":"string"},"details":{}}}}}}}}