Coming soon — waiting for healthy public-catalog sync. This page stays out of the sitemap until sources are live.

Join recipe

Prioritize CVEs with KEV and EPSS

Join NVD CVE records with CISA KEV and EPSS scores to rank patch urgency for agents.

This product uses the NVD API but is not endorsed or certified by the NVD.

What it is

A documented join across public-catalog sources (and your BYOD tables where noted) for agent workflows.

Source freshness

Source	Health	Last sync (UTC)	Cadence	Lag
`nvd-cves`	inactive	—	0 8 * * *	—
`cisa-kev`	inactive	—	45 6 * * *	—

Live status: GET /sources/health

Connect

Canonical MCP endpoint https://api.opendistrict.org/mcp (legacy https://mcp.opendistrict.org/mcp). A free API key is required — Authorization: Bearer $OD_API_KEY. Mint a key after signup. See MCP quickstart, pricing, and openapi.yaml.

{
  "mcpServers": {
    "opendistrict": {
      "url": "https://api.opendistrict.org/mcp",
      "headers": {
        "Authorization": "Bearer $OD_API_KEY"
      }
    }
  }
}

Example agent prompts

List CVEs in KEV with EPSS above 0.5 sorted by score.
Which open KEV items lack a vendor advisory link?

Related datasets

/datasets/cisa-kev

FAQ

When is this join indexable?

When both nvd-cves and cisa-kev are healthy on GET /sources/health.