KosmoKrator

data

FIRST EPSS CLI for AI Agents

Use the FIRST EPSS CLI from KosmoKrator to call FIRST EPSS tools headlessly, return JSON, inspect schemas, and automate workflows from coding agents, scripts, and CI.

FIRST EPSS CLI Setup

FIRST EPSS can be configured headlessly with `kosmokrator integrations:configure first-epss`.

Install, configure, and verify 
# Install KosmoKrator first if it is not available on PATH.
curl -fsSL https://raw.githubusercontent.com/OpenCompanyApp/kosmokrator/main/install.sh | bash

# Configure and verify this integration.
kosmokrator integrations:configure first-epss --enable --read allow --write ask --json
kosmokrator integrations:doctor first-epss --json
kosmokrator integrations:status --json

Credentials

Authentication type: No credentials none. Configure credentials once, then reuse the same stored profile from scripts, coding CLIs, Lua, and MCP.

No credentials are required.

Command Patterns

The generic command is stable across every integration. The provider shortcut is shorter for humans.

Generic CLI call 
kosmo integrations:call first-epss.first_epss_query '{}' --json
Provider shortcut 
kosmo integrations:first-epss first_epss_query '{}' --json

Discovery

These commands return structured output for coding agents that need to inspect capabilities before choosing a function.

Discovery commands 
kosmo integrations:docs first-epss --json
kosmo integrations:docs first-epss.first_epss_query --json
kosmo integrations:schema first-epss.first_epss_query --json
kosmo integrations:search "FIRST EPSS" --json
kosmo integrations:list --json

Automation Contexts

The same configured command surface works in these environments. The command does not change unless the host wrapper, credentials, or permissions change.

CI Run integration calls from CI jobs with JSON output, explicit credentials, and predictable exit status. Cron Jobs Schedule repeatable integration workflows from cron while keeping credentials in KosmoKrator config. Shell Scripts Call integration functions from shell scripts with stable JSON input and output. Headless Automation Use KosmoKrator as a non-interactive integration runtime for local automations and wrappers. Coding Agents Let coding agents discover schemas and execute integration functions through CLI commands or MCP.

CLI Functions

Every function below can be called headlessly. Commands are highlighted, copyable, and scroll horizontally when payloads are long.

first-epss.first_epss_query

Run a general EPSS API query with official parameters.

Read read
Parameters
none
Generic call 
kosmo integrations:call first-epss.first_epss_query '{}' --json
Shortcut 
kosmo integrations:first-epss first_epss_query '{}' --json

first-epss.first_epss_cve

Get EPSS score for one CVE.

Read read
Parameters
none
Generic call 
kosmo integrations:call first-epss.first_epss_cve '{}' --json
Shortcut 
kosmo integrations:first-epss first_epss_cve '{}' --json

first-epss.first_epss_batch

Get EPSS scores for multiple CVEs.

Read read
Parameters
none
Generic call 
kosmo integrations:call first-epss.first_epss_batch '{}' --json
Shortcut 
kosmo integrations:first-epss first_epss_batch '{}' --json

first-epss.first_epss_time_series

Get EPSS time-series scores for one CVE.

Read read
Parameters
none
Generic call 
kosmo integrations:call first-epss.first_epss_time_series '{}' --json
Shortcut 
kosmo integrations:first-epss first_epss_time_series '{}' --json

first-epss.first_epss_top

List highest EPSS or percentile CVEs.

Read read
Parameters
none
Generic call 
kosmo integrations:call first-epss.first_epss_top '{}' --json
Shortcut 
kosmo integrations:first-epss first_epss_top '{}' --json

first-epss.first_epss_threshold

List CVEs above EPSS or percentile thresholds.

Read read
Parameters
none
Generic call 
kosmo integrations:call first-epss.first_epss_threshold '{}' --json
Shortcut 
kosmo integrations:first-epss first_epss_threshold '{}' --json

first-epss.first_epss_historical_csv_url

Return the official historical daily EPSS CSV gzip URL for a date.

Read read
Parameters
none
Generic call 
kosmo integrations:call first-epss.first_epss_historical_csv_url '{}' --json
Shortcut 
kosmo integrations:first-epss first_epss_historical_csv_url '{}' --json

Function Schemas

Use these parameter tables when building CLI payloads without calling integrations:schema first.

first-epss.first_epss_query 0 parameters
Schema command 
kosmo integrations:schema first-epss.first_epss_query --json
ParameterTypeRequiredDescription
No parameters.
first-epss.first_epss_cve 0 parameters
Schema command 
kosmo integrations:schema first-epss.first_epss_cve --json
ParameterTypeRequiredDescription
No parameters.
first-epss.first_epss_batch 0 parameters
Schema command 
kosmo integrations:schema first-epss.first_epss_batch --json
ParameterTypeRequiredDescription
No parameters.
first-epss.first_epss_time_series 0 parameters
Schema command 
kosmo integrations:schema first-epss.first_epss_time_series --json
ParameterTypeRequiredDescription
No parameters.
first-epss.first_epss_top 0 parameters
Schema command 
kosmo integrations:schema first-epss.first_epss_top --json
ParameterTypeRequiredDescription
No parameters.
first-epss.first_epss_threshold 0 parameters
Schema command 
kosmo integrations:schema first-epss.first_epss_threshold --json
ParameterTypeRequiredDescription
No parameters.
first-epss.first_epss_historical_csv_url 0 parameters
Schema command 
kosmo integrations:schema first-epss.first_epss_historical_csv_url --json
ParameterTypeRequiredDescription
No parameters.

Permissions

Headless calls still follow the integration read/write permission policy. Configure read/write defaults with integrations:configure. Add --force only for trusted automation that should bypass that policy.