Developer API

Programmatic access to the full CVE intelligence layer behind Radical Notion: enriched CVE records, multi-source CVSS assessments with per-metric rationale, EPSS time-series, affected products, classified references, public exploit metadata, exploitation evidence, and complete change timelines.

Overview

The API is served from https://radicalnotion.ai/api/v1. All endpoints are read-only HTTPS GET and return JSON. The surface is versioned by path — breaking changes will only ever ship under a new version prefix.

Every example in these docs is a real response for CVE-2025-55182, the pre-authentication remote code execution vulnerability in React Server Components — a KEV-listed, actively exploited critical with rich data in every section, which makes it a useful tour of the data model.

Quickstart

Authenticate with a Bearer token, then request a CVE. The ?include= parameter embeds sub-resources so a single round-trip returns exactly the shape you need.

# 1. Export your access token (see Authentication)
export RN_TOKEN="<your access token>"

# 2. Fetch a CVE with its CVSS assessments and EPSS score
curl "https://radicalnotion.ai/api/v1/cves/CVE-2025-55182?include=cvss,epss" \
  -H "Authorization: Bearer $RN_TOKEN"

From here, read Authentication to obtain a token, skim the access model to understand which CVEs your account can read, and browse the endpoints.

What you can build

Feed a vulnerability-management pipeline with triage-ready signals (KEV, SSVC, EPSS, exploit and detection evidence), reconcile affected-package data across CNA, GHSA, OSV and NVD sources, drive alerting off the change timeline, or pull the complete nutrition label to mirror a CVE’s full context into your own system.