One request. Related evidence.
Ask about exact dependencies. Combine advisory matches with CVE-linked exploitation and severity context, without maintaining four separate integrations.
Agent Data Exchange / by Dajota App Factory
Public data.
Ready for
your agent.
Less source wrangling. More useful evidence. Structured public data with the context, timestamps, and provenance your agent needs to put it to work.
Starting with dependency security. Public paid access is not open yet.
YOUR INPUT
Package + version
npm · PyPI · NuGet
POST /v1/security/query{
"packages": [
{
"ecosystem": "npm",
"name": "lodash",
"version": "4.17.20"
}
],
"offset": 0,
"limit": 50
}OSVCISA KEVEPSSNVD
Source context. Explicit uncertainty.REQUEST EXAMPLE
3package ecosystems
4security source families
$0.01planned price / query
Best efforttimestamps, not blanket promises
From public sources to usable context
Your agent should spend less time
translating everyone else’s data.
Keep the source in sight.
Trace results to their sources. Retrieval dates, source-update dates when supplied, and checksums make freshness and provenance inspectable.
Built for machine workflows.
REST and MCP query paths work in our local prototype. The first public release is planned around bounded, wallet-paid queries—not a subscription to a folder of files.
First up / dependency security
Useful evidence.
Without false certainty.
For coding agents, dependency triage, and software-maintenance workflows. ADX reports what retained sources say and exposes gaps instead of turning an unknown into an “all clear.”
Read coverage and limitsOSV
Package advisories and affected-version evidence.
CISA KEV
Known-exploited vulnerability context, joined by CVE.
FIRST EPSS
Source-reported exploitation probability and percentile.
NVD
CVE details, severity metrics and weakness context.
Machine-first. Human-readable.
See the shape of a query.
Build a request locally in your browser. No wallet, API key, or payment required.