OpenAPI 3.0
OpenAPI 3.0 Specification
Machine-readable definition of the DevSecure Intelligence API
Canonical API host
https://api.intelligence.devsecure.io
The schema describes the public DevSecure Intelligence HTTP API used by dashboards, automation, and AI-agent tool calls. Keep generated clients pointed at the canonical host above.
Schema file
- Format
- OpenAPI 3.0 YAML
- Auth model
- Bearer-token API key
- Best for
- Client generation, GPT Actions, contract validation
YAML preview
First 50 lines
1openapi: "3.0.3"2info:3 title: DevSecure Intelligence API4 version: "1.0.0"5 description: |6 DevSecure Intelligence provides enriched vulnerability data with proprietary RPS risk scoring. It is built for AppSec, security engineering, MSSP, and platform teams that need prioritized CVE decisions without operating a full threat-intelligence platform.7 8 Base URL: `https://api.intelligence.devsecure.io`9 10 Data refreshes daily at 04:00 UTC. Freshness is reported via `/api/v1/status.data_freshness`; data is stale when it is more than 30 hours after `last_data_refresh_utc`.11 12 ## Authentication13 14 Public endpoints do not require a key: `/api/v1/health`, `/api/v1/status`, `/api/v1/kev`, `/api/v1/stats`, `/api/v1/trends`, and `/api/v1/trends/scatter`.15 16 Authenticated endpoints use a bearer API key:17 18 ```http19 Authorization: Bearer dsec_test_...20 ```21 22 API keys are issued from the DevSecure Intelligence dashboard and are shown exactly once at creation or rotation.23 24 ## Rate limits25 26 | Tier | Rate limit | Monthly quota | Auth |27 | --- | ---: | ---: | --- |28 | Public | 20 requests/min per IP | Endpoint-specific | No |29 | Free | 20 requests/min | 500/month | Yes |30 | Pro | 200 requests/min | Unlimited | Yes |31 | Business | 1000 requests/min | Unlimited | Yes |32 | Enterprise | Custom | Custom | Yes |33 34 Rate-limit responses include `Retry-After`. Successful authenticated responses may include `X-RateLimit-Limit`, `X-RateLimit-Remaining`, and `X-RateLimit-Reset`.35 36 ## Endpoint permissions37 38 | Endpoint | Public | Free | Pro | Business | Enterprise |39 | --- | --- | --- | --- | --- | --- |40 | `GET /api/v1/kev` | Yes | Yes | Yes | Yes | Yes |41 | `GET /api/v1/status` | Yes | Yes | Yes | Yes | Yes |42 | `GET /api/v1/stats` | Yes | Yes | Yes | Yes | Yes |43 | `GET /api/v1/trends` | Yes | Yes | Yes | Yes | Yes |44 | `GET /api/v1/trends/scatter` | Yes | Yes | Yes | Yes | Yes |45 | `GET /api/v1/cve/{cve_id}` | No | Sample access | Yes | Yes | Yes |46 | `POST /api/v1/cve/batch` | No | No | Yes | Yes | Yes |47 | `GET /api/v1/rps/{cve_id}` | No | Sample access | Yes | Yes | Yes |48 | `POST /api/v1/prioritize` | No | No | Yes | Yes | Yes |49 | `GET /api/v1/cwe/{cwe_id}/cves` | No | No | Yes | Yes | Yes |50 | `GET /api/v1/cve/recent` | No | No | Yes | Yes | Yes |What the contract covers
Prioritise
POST /api/v1/prioritize
CVE lookup
GET /api/v1/cve/{id}
Patch intelligence
GET /api/v1/patches/{id}
Status
GET /api/v1/status