{"openapi":"3.1.0","info":{"title":"Vulners (BYOK) API","version":"0.1.0","description":"Vulners (BYOK) lets an AI assistant read your own Vulners data through the Vulners API with a key you supply (Vulners API key). Read-only: 7 tools (search_bulletins, get_bulletin, get_cve_affected_packages, get_cve_affected_cpe, search_cpe, list_collections, get_bulletin_history). The BYOK key travels with each request, is used for that one call only and is never stored, logged or cached; it is...\n\nEvery operation is read-only or compute-only. The same tools are available over MCP (streamable HTTP) at https://byok-vulners.connectorbay.com/mcp.","contact":{"name":"Unify Dynamics LLC","email":"agent@connectorbay.com","url":"https://connectorbay.com/byok-vulners/docs"},"termsOfService":"https://connectorbay.com/byok-vulners/terms"},"servers":[{"url":"https://byok-vulners.connectorbay.com"}],"externalDocs":{"url":"https://connectorbay.com/byok-vulners/docs"},"security":[{"upstreamKey":[]}],"components":{"securitySchemes":{"bearer":{"type":"http","scheme":"bearer","description":"Optional. A Pro API key raises rate limits; no credentials are required."},"upstreamKey":{"type":"apiKey","in":"header","name":"X-Upstream-Key","description":"Your own key for the service this connector wraps (bring your own key). Used for that one call only; never stored, logged or cached."}},"schemas":{"Error":{"type":"object","properties":{"ok":{"const":false},"error":{"type":"object"}}}}},"paths":{"/v1/tools/search_bulletins":{"post":{"operationId":"search_bulletins","summary":"Search Vulners bulletins (CVEs, vendor advisories, exploits, scanner plugins) with a Lucene query. Returns id, title, ty","description":"Search Vulners bulletins (CVEs, vendor advisories, exploits, scanner plugins) with a Lucene query. Returns id, title, type, family, dates, CVSS, EPSS, CVE list and link per hit, plus the total hit count. Query examples: 'Fortinet AND RCE order:published', 'bulletinFamily:exploit AND \"CVE-2023-20198\"', 'type:cve AND cvss.score:[9 TO 10]'. Use for \"Which public exploits exist for CVE-2023-20198\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{"query":{"description":"Lucene query string. Add 'order:published' to sort newest first.","maxLength":500,"title":"Query","type":"string"},"size":{"anyOf":[{"maximum":100,"minimum":1,"type":"integer"},{"type":"null"}],"default":20,"description":"Hits per page (1 to 100, default 20).","title":"Size"},"skip":{"anyOf":[{"maximum":100000,"minimum":0,"type":"integer"},{"type":"null"}],"default":0,"description":"Number of hits to skip, for paging (default 0).","title":"Skip"}},"required":["query"],"title":"search_bulletinsArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}},"/v1/tools/get_bulletin":{"post":{"operationId":"get_bulletin","summary":"Get one bulletin by id (a CVE id such as CVE-2024-3400, or an advisory, exploit or plugin id) with title, description, t","description":"Get one bulletin by id (a CVE id such as CVE-2024-3400, or an advisory, exploit or plugin id) with title, description, type, family, dates, CVSS score and vector, EPSS and CVE list. The answer is a map keyed by the requested id. Use for \"Give me the Vulners record for CVE-2024-3400\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{"id":{"description":"Bulletin id, for example CVE-2024-3400 or EDB-ID:51234.","maxLength":100,"title":"Id","type":"string"}},"required":["id"],"title":"get_bulletinArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}},"/v1/tools/get_cve_affected_packages":{"post":{"operationId":"get_cve_affected_packages","summary":"List the packages affected by one CVE across distributions and ecosystems: source advisory id, package name, vulnerable ","description":"List the packages affected by one CVE across distributions and ecosystems: source advisory id, package name, vulnerable version range, registry (deb, rpm, npm, maven ...) and distro scope. Use for \"Which packages are affected by CVE-2021-44228\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{"cve":{"description":"CVE identifier such as CVE-2021-44228 (case does not matter).","maxLength":30,"title":"Cve","type":"string"}},"required":["cve"],"title":"get_cve_affected_packagesArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}},"/v1/tools/get_cve_affected_cpe":{"post":{"operationId":"get_cve_affected_cpe","summary":"List the CPE applicability configurations of one CVE (vendor advisories and NVD), as nested AND/OR nodes with version bo","description":"List the CPE applicability configurations of one CVE (vendor advisories and NVD), as nested AND/OR nodes with version bounds. The answer can be large for widely affected products. Use for \"Which CPE configurations does CVE-2021-44228 apply to\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{"cve":{"description":"CVE identifier such as CVE-2021-44228 (case does not matter).","maxLength":30,"title":"Cve","type":"string"}},"required":["cve"],"title":"get_cve_affected_cpeArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}},"/v1/tools/search_cpe":{"post":{"operationId":"search_cpe","summary":"Find CPE identifiers for a vendor and product (only CPEs that are linked to CVEs). Returns the best match and further ca","description":"Find CPE identifiers for a vendor and product (only CPEs that are linked to CVEs). Returns the best match and further candidates. Use for \"What is the CPE for Google Chrome\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{"product":{"description":"Product name, for example chrome.","maxLength":100,"title":"Product","type":"string"},"vendor":{"description":"Vendor name, for example google.","maxLength":100,"title":"Vendor","type":"string"},"size":{"anyOf":[{"maximum":100,"minimum":0,"type":"integer"},{"type":"null"}],"default":10,"description":"Maximum number of CPEs (0 to 100, default 10; 0 asks for all).","title":"Size"}},"required":["product","vendor"],"title":"search_cpeArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}},"/v1/tools/list_collections":{"post":{"operationId":"list_collections","summary":"List the datasets (collections) in Vulners, such as exploit databases and advisory feeds, with a description, record cou","description":"List the datasets (collections) in Vulners, such as exploit databases and advisory feeds, with a description, record count and last update time. Sorted by size, largest first. Use for \"Which collections does Vulners hold\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{},"title":"list_collectionsArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}},"/v1/tools/get_bulletin_history":{"post":{"operationId":"get_bulletin_history","summary":"Get the edit history of one bulletin: each change with the field, its value at that edition, edition number and time. Lo","description":"Get the edit history of one bulletin: each change with the field, its value at that edition, edition number and time. Long values can make the answer large. Use for \"How has the Vulners record for CVE-2024-23622 changed\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{"id":{"description":"Bulletin id, for example CVE-2024-23622.","maxLength":100,"title":"Id","type":"string"}},"required":["id"],"title":"get_bulletin_historyArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}}}}