Tool index

Every tool is read-only. None touch your filesystem.

Vulnerability intelligence

ToolArguments
vulnetix_vulnidentifier req, detail (summary|full|raw, default summary)
vulnetix_remediationidentifier req, maxActions (1–100, default 25)
vulnetix_kev_statusidentifier req
vulnetix_kevlimit (1–200, default 25), offset
vulnetix_timelineidentifier req
vulnetix_advisoriesidentifier req
vulnetix_workaroundsidentifier req
vulnetix_vexidentifier req

Exploits and threat

ToolArguments
vulnetix_exploitsidentifier req
vulnetix_sightingsidentifier req
vulnetix_iocsidentifier req
vulnetix_threat_actorsidentifier req
vulnetix_attack_techniquesidentifier req
vulnetix_scorecardidentifier req

Package risk

ToolArguments
vulnetix_package_searchquery req, ecosystem, includeVersions (default false), limit (1–100, default 20)
vulnetix_package_vulnspackageName req, ecosystem, limit, offset
vulnetix_package_versionspackageName req, ecosystem, limit, offset
vulnetix_purlpurl req

Ecosystems: npm, pypi, go, cargo, rubygems, maven, packagist, nuget.

Feeds and discovery

ToolArguments
vulnetix_soc_triagelimit (1–100, default 25), offset
vulnetix_searchquery req, limit (1–50, default 10), offset
vulnetix_eol_productscategory, limit (1–500, default 150)
vulnetix_threat_feedlimit (1–50, default 10), sections (array)

Sections: ai-discoveries, ai-in-wild, ai-malware, exploit-trends, vendor-trends.

AI analysis

Pro and above. All accept ai: false to skip the analysis.

ToolArguments
vulnetix_triage_reasonidentifier req, context, ai
vulnetix_secure_code_writeidentifier req, cweId, language, ai
vulnetix_detection_rulesidentifier req, families (array), stack, ai
vulnetix_exploit_testidentifier req, target, ai
vulnetix_fix_planpackageName req, ecosystem req, currentVersion, targetVersion, ai

Authentication

ToolArguments
vulnetix_auth_statusnone
vulnetix_auth_startnone
vulnetix_auth_pollhandle req

Escape hatch

ToolArguments
vdb_requestpath req, query, version (v1|v2, default v2), maxBytes (1024–1048576, default 262144)

Identifier formats

identifier accepts CVE, GHSA, PYSEC, RUSTSEC, GO, SNYK, ZDI, MSCVE, RHSA, KEV, EUVD, OSV and 70+ other advisory formats. If a lookup comes back empty, try a GHSA alias before concluding the advisory is unknown.