Join recipe

Prioritize CVEs with KEV and EPSS

Join NVD CVE records with CISA KEV and EPSS scores to rank patch urgency for agents.

This product uses the NVD API but is not endorsed or certified by the NVD.

What it is

A documented join across public-catalog sources (and your BYOD tables where noted) for agent workflows.

Source freshness

Source	Hosted catalog	Last updated	Schedule
`nvd-cves`	In free hosted catalog	Oct 17, 2026, 08:02 UTC (about 7 hours ago)	Daily at 08:00 UTC
`cisa-kev`	In free hosted catalog	Oct 17, 2026, 06:45 UTC (about 8 hours ago)	Daily at 06:45 UTC

Machine-readable catalog status

Connect

Canonical MCP endpoint https://api.opendistrict.org/mcp (legacy https://mcp.opendistrict.org/mcp). A free API key is required — Authorization: Bearer $OD_API_KEY. Mint a key after signup. See MCP quickstart, pricing, and openapi.yaml.

{
  "mcpServers": {
    "opendistrict": {
      "url": "https://api.opendistrict.org/mcp",
      "headers": {
        "Authorization": "Bearer $OD_API_KEY"
      }
    }
  }
}

Example agent prompts

List CVEs in KEV with EPSS above 0.5 sorted by score.
Which open KEV items lack a vendor advisory link?

Related datasets

/datasets/cisa-kev

FAQ

When will this join be available?

When both NVD CVE data and CISA KEV are in the free hosted catalog.