You can access the CISA KEV Inventory Match & Change Monitor programmatically from your own applications by using the Apify API. You can also choose the language preference from below. To use the Apify API, you’ll need an Apify account and your API token, found in API & Integrations in Apify Console.

Python

JavaScript

CLI

OpenAPI

HTTP

MCP

1import { ApifyClient } from 'apify-client';
2
3// Initialize the ApifyClient with your Apify API token
4// Replace the '<YOUR_API_TOKEN>' with your token
5const client = new ApifyClient({
6    token: '<YOUR_API_TOKEN>',
7});
8
9// Prepare Actor input
10const input = {};
11
12// Run the Actor and wait for it to finish
13const run = await client.actor("snapperwapper/cisa-kev-inventory-match").call(input);
14
15// Fetch and print Actor results from the run's dataset (if any)
16console.log('Results from dataset');
17console.log(`💾 Check your data here: https://console.apify.com/storage/datasets/${run.defaultDatasetId}`);
18const { items } = await client.dataset(run.defaultDatasetId).listItems();
19items.forEach((item) => {
20    console.dir(item);
21});
22
23// 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/js/docs

CISA KEV Inventory Match & Change Monitor API in JavaScript

The Apify API client for JavaScript is the official library that allows you to use CISA KEV Inventory Match & Change Monitor API in JavaScript or TypeScript, providing convenience functions and automatic retries on errors.

Install the apify-client

$npm install apify-client

Other API clients include:

CISA KEV Inventory Match & Change Monitor API in Python

CISA KEV Inventory Match & Change Monitor API through CLI

CISA KEV Inventory Match & Change Monitor OpenAPI definition

CISA KEV Inventory Match & Change Monitor API

Entity Attack Surface MCP Server

ryanclinton/entity-attack-surface-mcp

Corporate cyber exposure intelligence via the Model Context Protocol. This MCP server orchestrates 11 data sources to discover and score an organization's digital attack surface -- from DNS and SSL infrastructure to technology vulnerabilities and CISA Known Exploited Vulnerabilities.

Ryan Clinton

Neuromorphic Threat Intelligence MCP Server

ryanclinton/neuromorphic-threat-intelligence-mcp

MCP intelligence server for neuromorphic threat intelligence detection and analysis.

Ryan Clinton

CISA Known Exploited Vulnerabilities Search

ryanclinton/cisa-kev-search

Search and filter the official CISA Known Exploited Vulnerabilities (KEV) catalog -- the authoritative U.S. government list of vulnerabilities actively exploited in the wild.

Ryan Clinton

Digital Infrastructure Exposure MCP Server

ryanclinton/digital-infrastructure-exposure-mcp

Passive infrastructure reconnaissance and misconfiguration detection intelligence for AI agents via the Model Context Protocol.

Ryan Clinton

Open Source Supply Chain Risk MCP

ryanclinton/open-source-supply-chain-risk-mcp

OSS supply chain risk intelligence with dependency graph propagation, bus-factor analysis, and typosquat detection.

Ryan Clinton

Cyber Attack Surface — DNS, SSL & CVE Exposure

ryanclinton/cyber-attack-surface-report

Comprehensive external attack surface report that maps any domain's infrastructure, vulnerabilities, and exposure using 11 sub-actors in parallel.

Ryan Clinton

Censys Internet Host Search

ryanclinton/censys-search

Search the Censys internet intelligence platform for internet-connected hosts and devices directly from Apify. Query by IP address, domain name, open service, TLS certificate, geolocation, autonomous system, or any combination of Censys search attributes.

Ryan Clinton

CISA ICS Advisory Change Monitor - New & Updated Only

rtworule/cisa-ics-advisory-delta-monitor

Monitor official CISA ICS advisories and emit only new, updated, or removed CSAF records for OT security, vulnerability management, and compliance workflows.

Kunteper Koyu

Attack Surface Intelligence — Certificate Transparency

ryanclinton/crt-sh-search

Turn Certificate Transparency logs into attack-surface intelligence. Find new subdomains, exposed admin/VPN/DevOps services, brand-abuse look-alikes, and infrastructure drift, each with a risk score, recommended action, and investigation priority. Findings and executive summary included.

Ryan Clinton