ElysianPrimus Get a free key

Start in a minute.

Every API has the same shape: one key, REST under /v1, MCP at /mcp, an OpenAPI 3.1 document and a public /status.

1. Get a key

Keys are free, and you create them on the site: sign up with your email. The sign-up has a bot check, so an agent cannot make a key for itself. Make the key yourself, then give it to your agent. The key is shown once. To get a key you accept the API Terms of Service. TradeCheck also needs a certification about FCRA use, which you give at sign-up or later on Manage your key, where you can also rotate a key.

Lost access or a stolen key

We email the account each time a key is rotated or revoked, and when the account is closed. If you lost your key, or you got that email and did not make the change, write to support@elysianintelligence.com from the email of the account at once.

Support checks that the message comes from the email of the account, revokes the key that someone else may hold, and issues a new key to you. The plan, prepaid calls and subscription stay with the account.

2. Call an API

Send the key as Authorization: Bearer <key> or as x-api-key: <key>. Each API lives under its own path:

APIBase URLReference
CVE Intelligencehttps://api.elysianintelligence.com/cveDocs · OpenAPI · Status
TradeCheckhttps://api.elysianintelligence.com/tradecheckDocs · OpenAPI · Status
LabelLinkhttps://api.elysianintelligence.com/labellinkDocs · OpenAPI · Status
SkillScanhttps://api.elysianintelligence.com/skillscanDocs · OpenAPI · Status
EDGARhttps://api.elysianintelligence.com/edgarDocs · OpenAPI · Status
HomeSignalhttps://api.elysianintelligence.com/housingDocs · OpenAPI · Status
FireLinehttps://api.elysianintelligence.com/fireDocs · OpenAPI · Status
curl "https://api.elysianintelligence.com/tradecheck/v1/license?state=OR&number=206687" \
  -H "Authorization: Bearer $EP_KEY"

3. Use with Claude, ChatGPT and other MCP clients

One connector gives an agent every tool of every API. Each tool name starts with its API, for example cve_get_cve. The connector URL is:

https://mcp.elysianintelligence.com/mcp
  1. Claude (web, desktop and mobile): open Customize, then Connectors. Select +, then add a custom connector, and paste the URL. Select Connect. On Team and Enterprise plans, an owner adds the connector first in Organization settings, then Connectors.
  2. ChatGPT: open Plugins, select +, then Add custom MCP server. Paste the URL, choose OAuth, and create the plugin. Your workspace settings must allow custom MCP servers.
  3. Claude Code: run claude mcp add --transport http elysianprimus https://mcp.elysianintelligence.com/mcp, then type /mcp to sign in.
  4. When you connect, our sign-in page opens. Paste your API key (get a free key if you have none), check the app name and the address that gets access, and approve. The app gets a short-lived token, not your key. To stop the access, revoke the key.

Tool calls count against your key's plan, the same as REST calls. Connecting and listing tools is free. A client that cannot do OAuth can send the key as the Bearer token to the same URL, or use the MCP server of one API at /mcp under its base URL:

{
  "mcpServers": {
    "elysian-cve": {
      "type": "http",
      "url": "https://api.elysianintelligence.com/cve/mcp",
      "headers": {
        "Authorization": "Bearer ${EP_KEY}"
      }
    }
  }
}

4. Read errors and limits

Every error has the same body: {"error": {"code", "message"}, "requestId"}. The message is written for you; show it to your users as it is.

  1. 400 The input does not match the schema. The message names the field.
  2. 401 The key is missing or not valid. 403 The key was revoked, or (TradeCheck only) it has no FCRA certification: tradecheck_certification_required.
  3. 402 Prepaid calls are used up, or the plan ended. Buy more.
  4. 429 Too many calls in 10 seconds, or the monthly quota is used. Wait for the time in retry-after.

5. Check freshness

Every API answers GET /status without a key: each dataset, when it last loaded, how many rows it holds and the last error. The home page shows these numbers live.

6. Required notices

Section 5.4 of the API Terms of Service asks you to include these notices wherever you show or pass on the data, and to follow the licence of each source below.

NVD

This product uses the NVD API but is not endorsed or certified by the NVD.

Do not attribute to NVD any data that we or you have modified.

CVE records

Copyright © 1999-2026, The MITRE Corporation

CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.

Source: CVE Program Terms of Use. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation. The CISA enrichment in the CISA-ADP container is dedicated to the public domain under CC0 1.0.

EPSS

Attribute the scores to "EPSS, FIRST.org". The MIT License notice of EPSS:

MIT License

Copyright (c) 2022 FIRST.Org, Inc.

Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE.

Source: FIRST's EPSS repository.

Open-source advisory data

Package and fixed-version data comes from OSV and the databases it collects, under licences such as CC BY 4.0, CC BY-SA 4.0, CC0, MIT, Apache 2.0 and BSD. Each record names its sources in sources. Follow the licence of each one.

Every CVE record also carries the notices of its own sources, in full, in its notices field, so you can pass them on with the data.

Sources and licences of each API

CVE Intelligence
SourceLicenceUpdates
CVE List v5 (CNA container)CVE Terms of Use: keep MITRE's copyright designation and the licence (see Required notices)Hourly releases; we read them hourly
CISA Vulnrichment (CISA-ADP)CC0 1.0 and the CVE Terms of UseWith the CVE List; hourly
CISA Known Exploited VulnerabilitiesUS government work, public domainSeveral times a week; we check hourly
FIRST EPSSMIT License (FIRST.Org), with attribution to "EPSS, FIRST.org"Daily; we read it at 14:20 UTC
nuclei-templatesMITDaily; we read it at 05:10 UTC
Metasploit Framework module metadataBSD-3-ClauseDaily; we read it at 05:10 UTC
Exploit-DB index (ID, title and CVE, with a link)Facts and links only; no exploit code is storedDaily; we read it at 05:10 UTC
OSVCC-BY 4.0; records from other databases keep their own licencesLive, cached 24 hours
NIST National Vulnerability DatabaseUS government work, public domainLive, cached 24 hours
TradeCheck
SourceLicenceUpdates
Oregon CCB Active Licenses (data.oregon.gov)Public domain (U.S. government works)Daily; we read it nightly at 09:00 UTC
Washington L&I Contractor License Data (data.wa.gov)Open Data Commons PDDLThree times a day; we read it nightly at 09:00 UTC
LabelLink
SourceLicenceUpdates
EPA Pesticide Product and Label System (PPLS)US government work, public domainEPA updates twice a day; we read the list every 12 hours and each registered product about every 30 days
SkillScan
SourceLicenceUpdates
Data from the official MCP registryCC0 1.0, per the registry's terms of serviceDaily at 06:15 UTC, changed entries only
npm registry searchnpm Open Source Terms; package metadata as each author published itDaily at 06:45 UTC, in rotation
PyPI JSON API and RSS feedsPyPI Terms of Service; package metadata as each author published itDaily at 06:45 UTC, each project weekly
GitHub REST APIGitHub Terms of Service; each repository's licence is recordedDaily at 07:45 UTC
raw.githubusercontent.comEach repository's own licence; we keep only the scan result and short excerptsWith the GitHub run, only when a file changed
EDGAR
SourceLicenceUpdates
SEC latest filings feedUS government work, public domainAs SEC accepts filings; we read it every 5 minutes
SEC submissions APIUS government work, public domainReal time; we read a company on each new filing and every company about every 11 hours
SEC XBRL companyfacts APIUS government work, public domainMinutes after a filing; we read a company after each 10-K, 10-Q, 20-F or 40-F
SEC company tickers and exchangesUS government work, public domainAbout daily; we check it twice a day
HomeSignal
SourceLicenceUpdates
FHFA House Price IndexUS government work, public domain (FHFA has no separate terms)Monthly and quarterly; we check weekly while a release is due
Census new residential construction, new residential sales, housing vacanciesUS government work, public domainMonthly and quarterly; we check daily while a release is due
BLS Consumer Price Index (shelter, owners' equivalent rent)US government work, public domain; BLS API terms (see the notice)Monthly; we check daily while a release is due
Treasury daily par yield curve ratesUS government work, public domainEvery business day; we read it daily
FireLine
SourceLicenceUpdates
NASA FIRMS active fire detections (VIIRS and MODIS)NASA data: free to use and redistribute, citation requestedAs passes are processed; we read every 15 minutes and keep 7 days
NIFC WFIGS current incidents and perimetersUS government data, public domainWithin minutes of IRWIN; we read every 15 minutes
National Weather Service alertsUS government data, public domainAs issued; we read every 15 minutes
NOAA Hazard Mapping System smokeUS government data, public domainSeveral times a day; we check hourly
SAM.gov contract opportunitiesUS government data, public domainAs posted; every 6 hours: the day's first read covers the last two days and today, later reads cover today
USAspending awardsUS government data, public domainDaily; we read weekly

Citing HomeSignal data

This is a request, not a term of section 5.4. Please cite the agency of each HomeSignal value, as its citation field gives it. For BLS data, please keep the date in retrieved_at and this statement, which the BLS API terms ask us to make:

BLS.gov cannot vouch for the data or analyses derived from these data after the data have been retrieved from BLS.gov.