Documentation/Function calling

Generic Agent Function Calling

Status: Live.

Use this pattern for agent frameworks that accept JSON function specifications. Expose one function for ranked lists and one function for single-CVE evidence. The implementation should call DevSecure Intelligence with bearer-token authentication and return the API response unchanged.

[
  {
    "name": "prioritize_cves",
    "description": "Rank CVEs by real-world exploitation risk using DevSecure Intelligence.",
    "parameters": {
      "type": "object",
      "properties": {
        "cve_ids": {
          "type": "array",
          "items": { "type": "string", "pattern": "^CVE-[0-9]{4}-[0-9]+$" }
        }
      },
      "required": ["cve_ids"]
    }
  },
  {
    "name": "lookup_cve",
    "description": "Get DevSecure Intelligence evidence for one CVE.",
    "parameters": {
      "type": "object",
      "properties": {
        "cve_id": { "type": "string", "pattern": "^CVE-[0-9]{4}-[0-9]+$" }
      },
      "required": ["cve_id"]
    }
  }
]

Route prioritize_cves to POST /api/v1/prioritize and lookup_cve to GET /api/v1/cve/{id}.

See also