Getting Started
EdgeProtect API
Real-time CVE and CPE threat intelligence. Authenticate with a single bearer token, pay per call in credits, and get the same vulnerability data that powers the EdgeProtect platform.
Quickstart
Make your first authenticated request to the CVE endpoint in under five minutes.
Authentication
Generate an API key from Settings → API Keys and learn the bearer token format.
Credits & Billing
One credit per successful call, atomic deduction, and where to view your balance.
MCP Server
Connect AI agents to 41 threat-intelligence tools via the EdgeProtect MCP server.
What's available
50+ GET endpoints served from https://api.edgeprotect.io/functions/v1/.
Every call costs 1 credit. See the full API Reference for parameters, response shapes and examples.
| Group | Endpoints | Highlights |
|---|---|---|
| CVE & EPSS | /cve/{id}, /cve/search, /cve/{id}/actors, /cve/high-epss, /cve/kev-recent, /cve/notable-events, /cve/by-vendor |
Full intelligence record with CVSS, EPSS, KEV, Shadowserver activity, risk scoring and attributed threat actors. |
| CPE & Products | /cpe/{vendor}, /{product}, /{version}, ?search=, ?ranking=top_vendors |
Vendor → product → version drill-down with CVE counts. |
| CWE | /cwe/{id}, /cwe?q=, /cwe/top |
Weakness catalogue with mitigations and top-referenced rankings. |
| MITRE ATT&CK | /mitre/techniques/{id}, /techniques, /techniques/top, /tactics, /groups, /groups/{id} |
Techniques, tactics and adversary groups with related software, campaigns and detections. |
| Atomic Red Team | /atomics/techniques, /atomics/tests, /atomics/tests/{id} |
Technique index, paged tests, executors and dependencies. |
| Threat Actors | /actors, /actors/{name}, /actors/{name}/cves, /actors?industry= |
815 actors: aliases, TTPs, campaigns, industries, CVEs - each claim with evidence quote and source URL. |
| IOCs | /ioc?value=, /ioc?q=, /ioc/recent |
Exact-match and substring IOC lookup, recently observed indicators. |
| Malware | /malware/{sha256}, /malware?q=, /malware/recent, /malware/top |
MalwareBazaar samples, top families. |
| Blacklists | /blacklist/ssl/{sha1}, /blacklist/ja3/{md5} |
abuse.ch SSL and JA3 fingerprint blacklists. |
| Shadowserver | /shadowserver/cve/{id}, /top-cves, /top-vendors, /daily-stats |
Honeypot telemetry: per-CVE observations, top targets, daily aggregates. |
| Remediation | /remediation/summary/{id}, /remediation/affected-systems |
AI-generated fix guidance and most-referenced affected systems. |
| Supply Chain | /supply-chain/incidents, /incidents/{id}, /packages?name= |
Tracked incidents and affected package lookup. |
| Your Data | /my/cves, /my/triage, /my/alerts, /my/exposure/{id}, /my/vulnerabilities, /my/scans, /my/scans/{id}, …/delta, …/credentials |
Org-scoped vulnerability intelligence and EdgeProtect attack-surface data. Requires api:org scope. |
| Account | /meta/account |
Credit balance, key metadata, rate-limit state. Free. |
Built for production
Security model
Optional IP allowlists per key, HSTS-enforced transport, and atomic credit deduction.
Error reference
Every status code we return and how to recover from it.
Dashboard
View usage, manage keys, and top up credits on edgeprotect.io.
Have a question?
Email us at info@edgeprotect.io or open a chat from the EdgeProtect dashboard.