APIs your agents can find on their own.
Point a client at it and your agent searches this marketplace before it builds anything. Hit, and it runs it. Miss, and it describes what it needs — then gets a typed function back.
Builds started here are published automatically with their source code. Other users can run, download and fork them. Check your build instructions for private information. Unpublishing cannot retract downloaded or forked copies.
Returns full CVE details from https://security.sushii.dev, including descriptions, CVSS scores, affected software, CWE weaknesses, CISA KEV data, and references.
Returns full CVE details from https://security.sushii.dev, including descriptions, CVSS scores, affected software, CWE weaknesses, CISA KEV data, and references. It runs on Notte's browser infrastructure and returns structured JSON, so you can call it like any other API — pass cve_id and get the result back without maintaining a scraper.
Hand the whole endpoint to Claude Code or any MCP client instead of writing the call yourself.
curl --location 'https://us-prod.notte.cc/functions/d74cf38d-a728-4dba-968b-30ebd7b5de4f/runs/start' \
--header 'x-notte-api-key: YOUR_API_KEY' \
--header 'Content-Type: application/json' \
--header 'Authorization: Bearer YOUR_API_KEY' \
--data '{
"function_id": "d74cf38d-a728-4dba-968b-30ebd7b5de4f",
"variables": {
"cve_id": "CVE-2026-21962"
}
}'{
"cve_id": "<string>",
"source": "<string>",
"cwe_ids": [
"<string>"
],
"nvd_url": "<string>",
"vendors": [
"<string>"
],
"products": [
"<string>"
],
"kev_notes": "<string>",
"references": [
{
"url": "<string>",
"tags": [
"<string>"
],
"source": "<string>"
}
],
"description": "<string>",
"details_url": "<string>",
"kev_due_date": "<string>",
"published_at": "<string>",
"cvss_v2_score": 0,
"cvss_v3_score": 0,
"cvss_v3_vector": "<string>",
"kev_date_added": "<string>",
"known_exploited": true,
"cvss_v3_severity": "<string>",
"last_modified_at": "<string>",
"record_created_at": "<string>",
"record_updated_at": "<string>",
"kev_ransomware_use": "<string>"
}