vulnersCom/api

Official Python SDK for the Vulners vulnerability-intelligence API — search CVEs, exploits and advisories (CVSS/EPSS/KEV), audit software, Linux/Windows hosts and SBOMs, and stream the whole graph. Typed sync + async clients, 100% v3-compatible, with a built-in MCP server for AI agents.

What it solves

It provides a programmatic way to access the Vulners vulnerability intelligence graph, allowing developers to move beyond raw CVSS scores to prioritize security fixes using enriched data like EPSS, CISA KEV, and active exploitation status.

How it works

The SDK acts as a Python client for the Vulners API, offering both synchronous (Vulners) and asynchronous (AsyncVulners) interfaces. It uses typed Pydantic models to represent vulnerability bulletins, ensuring that data from over 230 sources (CVEs, exploits, vendor advisories) is structured and predictable for the developer. It also includes a built-in Model Context Protocol (MCP) server to integrate this intelligence directly into AI agents.

Who it’s for

Security engineers, DevSecOps professionals, and developers building security tooling who need to automate vulnerability assessments, track exploits, or stream vulnerability datasets into their own pipelines.

Highlights

  • Comprehensive Intelligence: Search and enrich CVEs and advisories with CVSS, EPSS, and exploitation context.
  • Asset Assessment: Audit software, Linux/Windows hosts, and SBOMs to identify affecting vulnerabilities.
  • AI-Ready: Includes an MCP server to ground AI agents in live vulnerability facts.
  • Data Streaming: Ability to lazily stream the full vulnerability graph and hourly updates without buffering large files.
  • Strong Typing: Multi-layered typed models for different bulletin families (CVE, Exploit, etc.) for better IDE support.

Related

  • Project
    pinecone-io/python-sdk

    A Python client for the Pinecone vector database that enables creating, managing, and querying vector indexes for AI applications.

  • Project
    milvus-io/pymilvus

    A Python SDK for Milvus, providing a programmatic interface to manage and search high-dimensional vector embeddings in the Milvus vector database.

  • Project
    qdrant/qdrant-client

    A Python client library and SDK for the Qdrant vector search engine, enabling efficient storage and retrieval of vector embeddings.

  • Project
    plasma-umass/scalene

    Scalene is a fast, line‑level Python profiler that measures CPU, GPU (NVIDIA) and memory usage, separates Python from native code, visualizes stitched stacks, and can ask LLMs (OpenAI, Azure, Bedrock, Ollama, etc.) for optimization suggestions directly from the UI.

  • Project
    databricks/databricks-sdk-py

    A Python client library that wraps all Databricks REST APIs, handling authentication (PAT, Azure, GCP, OIDC), retries, pagination, and long‑running operations, enabling programmatic control of clusters, jobs, Unity Catalog, and other Lakehouse resources.