Start in a minute.
Every API has the same shape: one key, REST under /v1, MCP at /mcp, an OpenAPI 3.1 document and a public /status.
1. Get a key
Keys are free, and you create them on the site: sign up with your email. The sign-up has a bot check, so an agent cannot make a key for itself. Make the key yourself, then give it to your agent. The key is shown once. To get a key you accept the API Terms of Service. TradeCheck also needs a certification about FCRA use, which you give at sign-up or later on Manage your key, where you can also rotate a key.
Lost access or a stolen key
We email the account each time a key is rotated or revoked, and when the account is closed. If you lost your key, or you got that email and did not make the change, write to support@elysianintelligence.com from the email of the account at once.
Support checks that the message comes from the email of the account, revokes the key that someone else may hold, and issues a new key to you. The plan, prepaid calls and subscription stay with the account.
2. Call an API
Send the key as Authorization: Bearer <key> or as x-api-key: <key>. Each API lives under its own path:
| API | Base URL | Reference |
|---|---|---|
| CVE Intelligence | https://api.elysianintelligence.com/cve | Docs · OpenAPI · Status |
| TradeCheck | https://api.elysianintelligence.com/tradecheck | Docs · OpenAPI · Status |
| LabelLink | https://api.elysianintelligence.com/labellink | Docs · OpenAPI · Status |
| SkillScan | https://api.elysianintelligence.com/skillscan | Docs · OpenAPI · Status |
| EDGAR | https://api.elysianintelligence.com/edgar | Docs · OpenAPI · Status |
| HomeSignal | https://api.elysianintelligence.com/housing | Docs · OpenAPI · Status |
| FireLine | https://api.elysianintelligence.com/fire | Docs · OpenAPI · Status |
curl "https://api.elysianintelligence.com/tradecheck/v1/license?state=OR&number=206687" \
-H "Authorization: Bearer $EP_KEY"
3. Use with Claude, ChatGPT and other MCP clients
One connector gives an agent every tool of every API. Each tool name starts with its API, for example cve_get_cve. The connector URL is:
https://mcp.elysianintelligence.com/mcp
- Claude (web, desktop and mobile): open Customize, then Connectors. Select +, then add a custom connector, and paste the URL. Select Connect. On Team and Enterprise plans, an owner adds the connector first in Organization settings, then Connectors.
- ChatGPT: open Plugins, select +, then Add custom MCP server. Paste the URL, choose OAuth, and create the plugin. Your workspace settings must allow custom MCP servers.
- Claude Code: run
claude mcp add --transport http elysianprimus https://mcp.elysianintelligence.com/mcp, then type/mcpto sign in. - When you connect, our sign-in page opens. Paste your API key (get a free key if you have none), check the app name and the address that gets access, and approve. The app gets a short-lived token, not your key. To stop the access, revoke the key.
Tool calls count against your key's plan, the same as REST calls. Connecting and listing tools is free. A client that cannot do OAuth can send the key as the Bearer token to the same URL, or use the MCP server of one API at /mcp under its base URL:
{
"mcpServers": {
"elysian-cve": {
"type": "http",
"url": "https://api.elysianintelligence.com/cve/mcp",
"headers": {
"Authorization": "Bearer ${EP_KEY}"
}
}
}
}
4. Read errors and limits
Every error has the same body: {"error": {"code", "message"}, "requestId"}. The message is written for you; show it to your users as it is.
400The input does not match the schema. The message names the field.401The key is missing or not valid.403The key was revoked, or (TradeCheck only) it has no FCRA certification:tradecheck_certification_required.402Prepaid calls are used up, or the plan ended. Buy more.429Too many calls in 10 seconds, or the monthly quota is used. Wait for the time inretry-after.
5. Check freshness
Every API answers GET /status without a key: each dataset, when it last loaded, how many rows it holds and the last error. The home page shows these numbers live.
6. Required notices
Section 5.4 of the API Terms of Service asks you to include these notices wherever you show or pass on the data, and to follow the licence of each source below.
NVD
This product uses the NVD API but is not endorsed or certified by the NVD.
Do not attribute to NVD any data that we or you have modified.
CVE records
Copyright © 1999-2026, The MITRE Corporation
CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.
Source: CVE Program Terms of Use. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation. The CISA enrichment in the CISA-ADP container is dedicated to the public domain under CC0 1.0.
EPSS
Attribute the scores to "EPSS, FIRST.org". The MIT License notice of EPSS:
MIT License Copyright (c) 2022 FIRST.Org, Inc. Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
Source: FIRST's EPSS repository.
Open-source advisory data
Package and fixed-version data comes from OSV and the databases it collects, under licences such as CC BY 4.0, CC BY-SA 4.0, CC0, MIT, Apache 2.0 and BSD. Each record names its sources in sources. Follow the licence of each one.
Every CVE record also carries the notices of its own sources, in full, in its notices field, so you can pass them on with the data.
Sources and licences of each API
| Source | Licence | Updates |
|---|---|---|
| CVE List v5 (CNA container) | CVE Terms of Use: keep MITRE's copyright designation and the licence (see Required notices) | Hourly releases; we read them hourly |
| CISA Vulnrichment (CISA-ADP) | CC0 1.0 and the CVE Terms of Use | With the CVE List; hourly |
| CISA Known Exploited Vulnerabilities | US government work, public domain | Several times a week; we check hourly |
| FIRST EPSS | MIT License (FIRST.Org), with attribution to "EPSS, FIRST.org" | Daily; we read it at 14:20 UTC |
| nuclei-templates | MIT | Daily; we read it at 05:10 UTC |
| Metasploit Framework module metadata | BSD-3-Clause | Daily; we read it at 05:10 UTC |
| Exploit-DB index (ID, title and CVE, with a link) | Facts and links only; no exploit code is stored | Daily; we read it at 05:10 UTC |
| OSV | CC-BY 4.0; records from other databases keep their own licences | Live, cached 24 hours |
| NIST National Vulnerability Database | US government work, public domain | Live, cached 24 hours |
| Source | Licence | Updates |
|---|---|---|
| Oregon CCB Active Licenses (data.oregon.gov) | Public domain (U.S. government works) | Daily; we read it nightly at 09:00 UTC |
| Washington L&I Contractor License Data (data.wa.gov) | Open Data Commons PDDL | Three times a day; we read it nightly at 09:00 UTC |
| Source | Licence | Updates |
|---|---|---|
| EPA Pesticide Product and Label System (PPLS) | US government work, public domain | EPA updates twice a day; we read the list every 12 hours and each registered product about every 30 days |
| Source | Licence | Updates |
|---|---|---|
| Data from the official MCP registry | CC0 1.0, per the registry's terms of service | Daily at 06:15 UTC, changed entries only |
| npm registry search | npm Open Source Terms; package metadata as each author published it | Daily at 06:45 UTC, in rotation |
| PyPI JSON API and RSS feeds | PyPI Terms of Service; package metadata as each author published it | Daily at 06:45 UTC, each project weekly |
| GitHub REST API | GitHub Terms of Service; each repository's licence is recorded | Daily at 07:45 UTC |
| raw.githubusercontent.com | Each repository's own licence; we keep only the scan result and short excerpts | With the GitHub run, only when a file changed |
| Source | Licence | Updates |
|---|---|---|
| SEC latest filings feed | US government work, public domain | As SEC accepts filings; we read it every 5 minutes |
| SEC submissions API | US government work, public domain | Real time; we read a company on each new filing and every company about every 11 hours |
| SEC XBRL companyfacts API | US government work, public domain | Minutes after a filing; we read a company after each 10-K, 10-Q, 20-F or 40-F |
| SEC company tickers and exchanges | US government work, public domain | About daily; we check it twice a day |
| Source | Licence | Updates |
|---|---|---|
| FHFA House Price Index | US government work, public domain (FHFA has no separate terms) | Monthly and quarterly; we check weekly while a release is due |
| Census new residential construction, new residential sales, housing vacancies | US government work, public domain | Monthly and quarterly; we check daily while a release is due |
| BLS Consumer Price Index (shelter, owners' equivalent rent) | US government work, public domain; BLS API terms (see the notice) | Monthly; we check daily while a release is due |
| Treasury daily par yield curve rates | US government work, public domain | Every business day; we read it daily |
| Source | Licence | Updates |
|---|---|---|
| NASA FIRMS active fire detections (VIIRS and MODIS) | NASA data: free to use and redistribute, citation requested | As passes are processed; we read every 15 minutes and keep 7 days |
| NIFC WFIGS current incidents and perimeters | US government data, public domain | Within minutes of IRWIN; we read every 15 minutes |
| National Weather Service alerts | US government data, public domain | As issued; we read every 15 minutes |
| NOAA Hazard Mapping System smoke | US government data, public domain | Several times a day; we check hourly |
| SAM.gov contract opportunities | US government data, public domain | As posted; every 6 hours: the day's first read covers the last two days and today, later reads cover today |
| USAspending awards | US government data, public domain | Daily; we read weekly |
Citing HomeSignal data
This is a request, not a term of section 5.4. Please cite the agency of each HomeSignal value, as its citation field gives it. For BLS data, please keep the date in retrieved_at and this statement, which the BLS API terms ask us to make:
BLS.gov cannot vouch for the data or analyses derived from these data after the data have been retrieved from BLS.gov.