How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

VulnCheck Endpoints API

The endpoints API from VulnCheck — 13 operation(s) for endpoints.

VulnCheck Endpoints API is one of 2 APIs that VulnCheck publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

The published artifact set on APIs.io includes an OpenAPI specification, API documentation, authentication docs, and rate-limit docs.

This API exposes 13 operations across 13 paths, and defines 30 schemas. It is described by OpenAPI 3.2.0, at version 3.0.

Requests are made against a single base URL, /v3.

13 operations 13 paths 30 schemas 12 GET1 POST

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.2.0
API Version
3.0
Base URL
https://api.vulncheck.com/v3
Authentication
API Key
Terms of Service
Resource Areas
1

Authentication & Security 1

VulnCheck Endpoints API declares 1 security scheme for authenticating requests. An API key is passed in the header as Authorization (Bearer).

Paths & Operations 13

Across 13 paths, the API surfaces 13 operations — 12 GET, 1 POST. Each is listed below with its method, path, parameters, and response codes.

Endpoints 13
GET
/backup
Return a list of indexes with backup and endpoint links
getBackup → 200404500
GET
/backup/{index}
Retrieve a list of backups by index
getBackupByIndex 1 param → 200404500
GET
/cpe
Return CVE 's associated with a specific NIST CPE
getCpe 2 params → 200404500
GET
/entitlements
Retrieve user entitlements
getEntitlements → 200404500
GET
/index
Return a list of available indexes with endpoint links
getIndex → 200404500
GET
/openapi
Return OpenAPI specification
getOpenapi → 200500
GET
/pdns/vulncheck-c2
Retrieve a list of C2 Hostnames
getPdnsVulncheckC2 1 param → 200404500
GET
/purl
Request vulnerabilities related to a PURL
getPurl 1 param → 200404500
POST
/purls
Request vulnerabilities related to a list of PURLs
postPurls body → 200404500
GET
/rules/initial-access/{type}
Retrieve set of initial-access detection rules
getRulesInitialAccessByType 1 param → 200404500
GET
/search/cpe
Return CPEs and associated CPEs by searching CPE fields
getSearchCpe 5 params → 200404500
GET
/search/cve
Search all indices for a CVE
getSearchCve 5 params → 200400401500
GET
/tags/vulncheck-c2
Retrieve a list of C2 IP addresses
getTagsVulncheckC2 1 param → 200404500

Schemas 30

The contract defines 30 schemas that model the data the API accepts and returns. The most detailed are paginate.Pagination (20 properties), params.IndexBackup (13 properties), index.CveSearchMeta (11 properties), api.CPE (11 properties). Each schema is shown below with its type and property counts.

render.ResponseWithMetadata-v3controllers_PurlResponseData-v3controllers_PurlResponseMetadata
object
3 properties
render.ResponseWithMetadata-search_Responses-paginate_Pagination
object
3 properties
params.IndexList
object
3 properties
v3controllers.PurlsResponseMetadata
object
Meta is the metadata related to the endpoint response
2 properties
purl.BatchVulnFinding
object
5 properties
render.ResponseWithMetadata-array_string-v3controllers_ResponseMetadata
object
3 properties
render.ResponseWithMetadata-v3controllers_PurlsResponseData-v3controllers_PurlsResponseMetadata
object
3 properties
index.CveSearchMeta
object
Meta is the metadata related to the endpoint response
11 properties
api.CPE
object
11 properties
render.ResponseWithMetadata-v3controllers_BackupResponseData-v3controllers_BackupResponseMetadata
object
3 properties
render.Response-array_params_IndexBackupList
object
2 properties
paginate.Pagination
object
Meta is the metadata related to the endpoint response
20 properties
v3controllers.PurlResponseData
object
Data is the data returned by the endpoint
2 properties
paginate.Param
object
3 properties
index.CveSearchHit
object
4 properties
params.IndexBackup
object
13 properties
paginate.Match
object
2 properties
render.Response-array_params_IndexList
object
2 properties
render.ResponseWithMetadata-array_index_CveSearchHit-index_CveSearchMeta
object
3 properties
purl.PackageURLJSON
object
meta-data about the purl
6 properties
v3controllers.ResponseMetadata
object
Meta is the metadata related to the endpoint response
4 properties
purl.QualifierJSON
object
2 properties
search.ResponseDataOut
object
3 properties
index.IndexCountEntry
object
2 properties
models.Entitlements
object
1 property
params.IndexBackupList
object
3 properties
api.OSSPackageVulnerability
object
2 properties
api.OSSPackageResearchAttributes
object
6 properties
v3controllers.BackupResponseMetadata
object
Meta is the metadata related to the endpoint response
2 properties
v3controllers.PurlResponseMetadata
object
Meta is the metadata related to the endpoint response
3 properties

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

vulncheck-endpoints-api-openapi.yml Raw ↑

Other APIs VulnCheck publishes across the network.

VulnCheck Indices API
Where this information came from

This is an independent, third-party profile of VulnCheck Endpoints API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.