{
  "openapi": "3.1.0",
  "info": {
    "title": "ToolMint CISA KEV JSON",
    "version": "0.1.0",
    "description": "CISA Known Exploited Vulnerabilities catalog for AI agents \u2014 CVE lookup, vendor/product search, batch check with due dates and ransomware flags. Pay per call with USDC on Base via x402. Public domain.",
    "x-guidance": "Use GET /lookup?cve= or GET /cve/{cve} for one CVE. Use GET /search?vendor=&product=&dateAdded=. Use GET /check?cves=CVE-a,CVE-b or POST /check with {\"cves\":[...] } (max 50). Unpaid calls receive HTTP 402. Free: /, /health, /openapi.json, /.well-known/x402.",
    "contact": {
      "email": "toolmint.dev@gmail.com",
      "name": "ToolMint"
    }
  },
  "paths": {
    "/health": {
      "get": {
        "operationId": "health",
        "summary": "Liveness",
        "security": [],
        "responses": {
          "200": {
            "description": "ok"
          }
        }
      }
    },
    "/lookup": {
      "get": {
        "operationId": "cisa_kev_lookup",
        "summary": "Look up one CVE in KEV",
        "x-payment-info": {
          "price": {
            "mode": "fixed",
            "currency": "USD",
            "amount": "0.010000"
          },
          "protocols": [
            {
              "x402": {}
            }
          ],
          "network": "eip155:8453",
          "payTo": "0xfbF7413bcB3a604936775C96FDbe0b0C9c9E37F5",
          "asset": "USDC",
          "scheme": "exact",
          "amountAtomic": "10000"
        },
        "parameters": [
          {
            "name": "cve",
            "in": "query",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "Lookup result with provenance"
          },
          "400": {
            "description": "Invalid input (not charged)"
          },
          "402": {
            "description": "Payment Required"
          },
          "502": {
            "description": "Upstream error (not charged)"
          }
        }
      }
    },
    "/cve/{cve}": {
      "get": {
        "operationId": "cisa_kev_cve_path",
        "summary": "Look up one CVE by path",
        "x-payment-info": {
          "price": {
            "mode": "fixed",
            "currency": "USD",
            "amount": "0.010000"
          },
          "protocols": [
            {
              "x402": {}
            }
          ],
          "network": "eip155:8453",
          "payTo": "0xfbF7413bcB3a604936775C96FDbe0b0C9c9E37F5",
          "asset": "USDC",
          "scheme": "exact",
          "amountAtomic": "10000"
        },
        "parameters": [
          {
            "name": "cve",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "Lookup result"
          },
          "402": {
            "description": "Payment Required"
          },
          "502": {
            "description": "Upstream error (not charged)"
          }
        }
      }
    },
    "/search": {
      "get": {
        "operationId": "cisa_kev_search",
        "summary": "Search KEV by vendor/product/date/ransomware",
        "x-payment-info": {
          "price": {
            "mode": "fixed",
            "currency": "USD",
            "amount": "0.010000"
          },
          "protocols": [
            {
              "x402": {}
            }
          ],
          "network": "eip155:8453",
          "payTo": "0xfbF7413bcB3a604936775C96FDbe0b0C9c9E37F5",
          "asset": "USDC",
          "scheme": "exact",
          "amountAtomic": "10000"
        },
        "parameters": [
          {
            "name": "vendor",
            "in": "query",
            "schema": {
              "type": "string"
            }
          },
          {
            "name": "product",
            "in": "query",
            "schema": {
              "type": "string"
            }
          },
          {
            "name": "dateAdded",
            "in": "query",
            "schema": {
              "type": "string"
            }
          },
          {
            "name": "ransomwareKnown",
            "in": "query",
            "schema": {
              "type": "boolean"
            }
          },
          {
            "name": "limit",
            "in": "query",
            "schema": {
              "type": "integer",
              "default": 25
            }
          }
        ],
        "responses": {
          "200": {
            "description": "Search hits with summary"
          },
          "402": {
            "description": "Payment Required"
          },
          "502": {
            "description": "Upstream error (not charged)"
          }
        }
      }
    },
    "/check": {
      "get": {
        "operationId": "cisa_kev_check_get",
        "summary": "Batch check CVEs (comma-separated, max 50)",
        "x-payment-info": {
          "price": {
            "mode": "fixed",
            "currency": "USD",
            "amount": "0.010000"
          },
          "protocols": [
            {
              "x402": {}
            }
          ],
          "network": "eip155:8453",
          "payTo": "0xfbF7413bcB3a604936775C96FDbe0b0C9c9E37F5",
          "asset": "USDC",
          "scheme": "exact",
          "amountAtomic": "10000"
        },
        "parameters": [
          {
            "name": "cves",
            "in": "query",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "Comma-separated CVE ids"
          }
        ],
        "responses": {
          "200": {
            "description": "Batch check results"
          },
          "402": {
            "description": "Payment Required"
          },
          "502": {
            "description": "Upstream error (not charged)"
          }
        }
      },
      "post": {
        "operationId": "cisa_kev_check_post",
        "summary": "Batch check CVEs (JSON body, max 50)",
        "x-payment-info": {
          "price": {
            "mode": "fixed",
            "currency": "USD",
            "amount": "0.010000"
          },
          "protocols": [
            {
              "x402": {}
            }
          ],
          "network": "eip155:8453",
          "payTo": "0xfbF7413bcB3a604936775C96FDbe0b0C9c9E37F5",
          "asset": "USDC",
          "scheme": "exact",
          "amountAtomic": "10000"
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "type": "object",
                "properties": {
                  "cves": {
                    "type": "array",
                    "items": {
                      "type": "string"
                    },
                    "maxItems": 50
                  }
                },
                "required": [
                  "cves"
                ]
              }
            }
          }
        },
        "responses": {
          "200": {
            "description": "Batch check results"
          },
          "402": {
            "description": "Payment Required"
          },
          "502": {
            "description": "Upstream error (not charged)"
          }
        }
      }
    }
  }
}