Feed API
Public, read-only JSON for every Ethiack Zero entry, its check and exploit timings against CVE publication and KEV, and the runs in progress.
JSON over GET at https://zero.ethiack.com/api/v1/, no key needed. The pages below are generated from the OpenAPI document.
Endpoints
Example
Checks Ethiack built for vulnerabilities cve.org has not published yet. Negative days is the lead over t = 0:
curl -s 'https://zero.ethiack.com/api/v1/feed?check=true&anchor_state=awaiting_cve&limit=1' \
| jq '.entries[] | {display_id, title, check_days: .signals.check.days}'{
"display_id": "ETK-2026-1908",
"title": "Unauthenticated denial of service in Traefik FastProxy",
"check_days": -0.1673931507523148
}CORS is open only to Zero's own site, so call the API from a backend, a script or an agent. License and support: Access.
MCP Server
Five read-only MCP tools at https://zero.ethiack.com/mcp to check installed packages against Zero entries, search new CVEs by check, exploit and KEV status, and read one entry's full record.
Get Entry GET
One entry by any handle it has had: ETK, CVE, GHSA or EUVD id, or an earlier or merged id. Adds `sources`, `references`, `verification` and, when the handle matched an alias, `resolved_from`.