Show JSON
{
"protocolVersion": "0.3.0",
"name": "Depmoor by CyberMax",
"description": "Dependency vulnerability scanner API: send a lockfile or package list, get findings ranked by real-world risk (OSV advisories, CISA Known Exploited Vulnerabilities, FIRST EPSS) as JSON, SARIF, CSV or Markdown for CI. Also a free CORS-enabled CISA KEV catalogue endpoint.",
"author": "CyberMax",
"wellKnownURI": "https://depmoor.cybermax-tools.workers.dev/.well-known/agent-card.json",
"url": "https://depmoor.cybermaxtools.com/",
"version": "1.0.0",
"provider": {
"organization": "CyberMax",
"url": "https://cybermaxtools.com/"
},
"documentationUrl": "https://depmoor.cybermaxtools.com/llms.txt",
"iconUrl": null,
"supportsAuthenticatedExtendedCard": null,
"security": [
{},
{
"bearer": []
},
{
"licenceHeader": []
}
],
"securitySchemes": {
"bearer": {
"type": "http",
"scheme": "bearer",
"description": "Depmoor Pro/Team key as Authorization: Bearer DEPMOOR-... (https://depmoor.cybermaxtools.com/#pricing). Required for /api/scan; /api/kev is free with no key."
},
"licenceHeader": {
"in": "header",
"name": "x-licence",
"type": "apiKey",
"description": "Same key in a header."
}
},
"capabilities": {
"streaming": false,
"pushNotifications": false,
"stateTransitionHistory": false,
"extensions": null
},
"defaultInputModes": [
"application/json"
],
"defaultOutputModes": [
"application/json"
],
"skills": [
{
"id": "scan_dependencies",
"name": "Scan a lockfile for exploitable vulnerabilities",
"description": "POST /api/scan[?format=json|sarif|csv|md] with JSON {\"filename\",\"lockfile\"} or {\"packages\":[{\"ecosystem\",\"name\",\"version\"}]}, or the raw lockfile with ?filename=. Returns findings ranked by KEV status and EPSS. Needs a Pro/Team key (daily scan caps per plan).",
"tags": [
"sca",
"vulnerability scanner",
"lockfile",
"cisa kev",
"epss",
"sarif"
],
"examples": [],
"inputModes": [
"application/json"
],
"outputModes": [
"application/json"
]
},
{
"id": "cisa_kev",
"name": "CISA Known Exploited Vulnerabilities catalogue",
"description": "GET /api/kev returns the CISA KEV catalogue in compact JSON with CORS enabled, cached for 1 hour. Free, no key.",
"tags": [
"sca",
"vulnerability scanner",
"lockfile",
"cisa kev",
"epss",
"sarif"
],
"examples": [
"https://depmoor.cybermaxtools.com/api/kev"
],
"inputModes": [
"application/json"
],
"outputModes": [
"application/json"
]
}
],
"conformance": true,
"conformance_errors": null,
"homepage": null,
"repository": null,
"license": null,
"pricing": null,
"contact": null,
"id": "07494e00-2f7c-4aa8-a711-87395412da92",
"category": "developer-tools",
"category_secondary": null
}