<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->

# API Reference — Performing Endpoint Vulnerability Assessment

## Vulnerability Assessment APIs

### EPSS API

| Endpoint | Method | Description |
|---|---|---|
| `https://api.first.org/data/v1/epss?cve=<CVE>` | GET | EPSS score for a CVE |
| `https://api.first.org/data/v1/epss?date=<YYYY-MM-DD>` | GET | EPSS scores for a date |

### Nessus REST API

| Endpoint | Method | Description |
|---|---|---|
| `/scans` | GET | List all scans |
| `/scans/{id}` | GET | Get scan details |
| `/scans/{id}/export` | POST | Export scan results |
| `/scans/{id}/launch` | POST | Launch a scan |

### OpenVAS GMP Protocol

| Command | Description |
|---|---|
| `create_target` | Define scan target |
| `create_task` | Create scan task |
| `start_task` | Execute scan |
| `get_results` | Retrieve findings |

### Agent Script

```bash
# Look up EPSS score
node agent.js lookup-epss --cve CVE-2024-1234

# Parse Nmap results
node agent.js parse-nmap --xml-file vuln_scan.xml

# Prioritize findings
node agent.js prioritize --findings-file findings.json
```
