# CISA Known Exploited Vulnerabilities API

> CISA Known Exploited Vulnerabilities API on Apizie: 1 endpoint (Search catalog) returned as clean JSON through one API key. 1 endpoint is live now. Call it over REST at https://apizie.tech/v1/security:cisa-kev/{endpoint} or from Claude, ChatGPT and Cursor through the Apizie MCP server. Free plan: 1,000 requests a month.

- Project key: `security:cisa-kev`
- Category: Security
- Status: live
- Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
- Page: https://apizie.tech/api/security/cisa-kev
- OpenAPI: https://apizie.tech/api/security/cisa-kev/openapi.json

The US CISA catalog of vulnerabilities exploited in the wild.

## Endpoints

### Search catalog
`GET https://apizie.tech/v1/security:cisa-kev/search`

| Parameter | Type | Required | Description |
|---|---|---|---|
| cve | string | no |  |
| vendor | string | no |  |
| product | string | no |  |
| limit | integer | no | Number of results |

## Example
```
curl "https://apizie.tech/v1/security:cisa-kev/search" \
  -H "x-api-key: $APIZIE_KEY"
```

## FAQ

### How do I call the CISA Known Exploited Vulnerabilities API?
Create a free Apizie key, then send GET https://apizie.tech/v1/security:cisa-kev/search with the header x-api-key. Every endpoint returns { project, data, timestamp }.

### Is the CISA Known Exploited Vulnerabilities API free on Apizie?
Yes. The Free plan includes 1,000 requests a month at 100 requests a minute, no credit card.

### Can AI agents use the CISA Known Exploited Vulnerabilities API?
Yes. Add the Apizie MCP server (https://apizie.tech/mcp) to Claude, ChatGPT, Cursor or VS Code, then ask in plain language. The agent calls run_scraper with project key security:cisa-kev.

### What is the status of the CISA Known Exploited Vulnerabilities API?
Live: works with just an Apizie key