KosmoKrator

data

NVD CLI for AI Agents

Use the NVD CLI from KosmoKrator to call NVD tools headlessly, return JSON, inspect schemas, and automate workflows from coding agents, scripts, and CI.

NVD CLI Setup

NVD can be configured headlessly with `kosmokrator integrations:configure nvd`.

Install, configure, and verify 
# Install KosmoKrator first if it is not available on PATH.
curl -fsSL https://raw.githubusercontent.com/OpenCompanyApp/kosmokrator/main/install.sh | bash

# Configure and verify this integration.
kosmokrator integrations:configure nvd --enable --read allow --write ask --json
kosmokrator integrations:doctor nvd --json
kosmokrator integrations:status --json

Credentials

Authentication type: API key api_key. Configure credentials once, then reuse the same stored profile from scripts, coding CLIs, Lua, and MCP.

KeyEnv varTypeRequiredLabel
api_key NVD_API_KEY Secret secret no API Key

Command Patterns

The generic command is stable across every integration. The provider shortcut is shorter for humans.

Generic CLI call 
kosmo integrations:call nvd.nvd_cves '{}' --json
Provider shortcut 
kosmo integrations:nvd nvd_cves '{}' --json

Discovery

These commands return structured output for coding agents that need to inspect capabilities before choosing a function.

Discovery commands 
kosmo integrations:docs nvd --json
kosmo integrations:docs nvd.nvd_cves --json
kosmo integrations:schema nvd.nvd_cves --json
kosmo integrations:search "NVD" --json
kosmo integrations:list --json

Automation Contexts

The same configured command surface works in these environments. The command does not change unless the host wrapper, credentials, or permissions change.

CI Run integration calls from CI jobs with JSON output, explicit credentials, and predictable exit status. Cron Jobs Schedule repeatable integration workflows from cron while keeping credentials in KosmoKrator config. Shell Scripts Call integration functions from shell scripts with stable JSON input and output. Headless Automation Use KosmoKrator as a non-interactive integration runtime for local automations and wrappers. Coding Agents Let coding agents discover schemas and execute integration functions through CLI commands or MCP.

CLI Functions

Every function below can be called headlessly. Commands are highlighted, copyable, and scroll horizontally when payloads are long.

nvd.nvd_cves

Search NVD CVE records with official 2.0 filters.

Read read
Parameters
none
Generic call 
kosmo integrations:call nvd.nvd_cves '{}' --json
Shortcut 
kosmo integrations:nvd nvd_cves '{}' --json

nvd.nvd_cve_by_id

Retrieve one CVE record by CVE ID.

Read read
Parameters
none
Generic call 
kosmo integrations:call nvd.nvd_cve_by_id '{}' --json
Shortcut 
kosmo integrations:nvd nvd_cve_by_id '{}' --json

nvd.nvd_cve_history

Search CVE change-history events.

Read read
Parameters
none
Generic call 
kosmo integrations:call nvd.nvd_cve_history '{}' --json
Shortcut 
kosmo integrations:nvd nvd_cve_history '{}' --json

nvd.nvd_cpes

Search NVD CPE dictionary records.

Read read
Parameters
none
Generic call 
kosmo integrations:call nvd.nvd_cpes '{}' --json
Shortcut 
kosmo integrations:nvd nvd_cpes '{}' --json

nvd.nvd_cpe_by_name_id

Retrieve CPE dictionary records by cpeNameId UUID.

Read read
Parameters
none
Generic call 
kosmo integrations:call nvd.nvd_cpe_by_name_id '{}' --json
Shortcut 
kosmo integrations:nvd nvd_cpe_by_name_id '{}' --json

nvd.nvd_cpe_match

Search CPE match criteria records.

Read read
Parameters
none
Generic call 
kosmo integrations:call nvd.nvd_cpe_match '{}' --json
Shortcut 
kosmo integrations:nvd nvd_cpe_match '{}' --json

nvd.nvd_cpe_match_by_criteria_id

Retrieve match criteria records by matchCriteriaId UUID.

Read read
Parameters
none
Generic call 
kosmo integrations:call nvd.nvd_cpe_match_by_criteria_id '{}' --json
Shortcut 
kosmo integrations:nvd nvd_cpe_match_by_criteria_id '{}' --json

nvd.nvd_sources

Search NVD data-source metadata.

Read read
Parameters
none
Generic call 
kosmo integrations:call nvd.nvd_sources '{}' --json
Shortcut 
kosmo integrations:nvd nvd_sources '{}' --json

nvd.nvd_source_by_identifier

Retrieve NVD data-source metadata by sourceIdentifier.

Read read
Parameters
none
Generic call 
kosmo integrations:call nvd.nvd_source_by_identifier '{}' --json
Shortcut 
kosmo integrations:nvd nvd_source_by_identifier '{}' --json

Function Schemas

Use these parameter tables when building CLI payloads without calling integrations:schema first.

nvd.nvd_cves 0 parameters
Schema command 
kosmo integrations:schema nvd.nvd_cves --json
ParameterTypeRequiredDescription
No parameters.
nvd.nvd_cve_by_id 0 parameters
Schema command 
kosmo integrations:schema nvd.nvd_cve_by_id --json
ParameterTypeRequiredDescription
No parameters.
nvd.nvd_cve_history 0 parameters
Schema command 
kosmo integrations:schema nvd.nvd_cve_history --json
ParameterTypeRequiredDescription
No parameters.
nvd.nvd_cpes 0 parameters
Schema command 
kosmo integrations:schema nvd.nvd_cpes --json
ParameterTypeRequiredDescription
No parameters.
nvd.nvd_cpe_by_name_id 0 parameters
Schema command 
kosmo integrations:schema nvd.nvd_cpe_by_name_id --json
ParameterTypeRequiredDescription
No parameters.
nvd.nvd_cpe_match 0 parameters
Schema command 
kosmo integrations:schema nvd.nvd_cpe_match --json
ParameterTypeRequiredDescription
No parameters.
nvd.nvd_cpe_match_by_criteria_id 0 parameters
Schema command 
kosmo integrations:schema nvd.nvd_cpe_match_by_criteria_id --json
ParameterTypeRequiredDescription
No parameters.
nvd.nvd_sources 0 parameters
Schema command 
kosmo integrations:schema nvd.nvd_sources --json
ParameterTypeRequiredDescription
No parameters.
nvd.nvd_source_by_identifier 0 parameters
Schema command 
kosmo integrations:schema nvd.nvd_source_by_identifier --json
ParameterTypeRequiredDescription
No parameters.

Permissions

Headless calls still follow the integration read/write permission policy. Configure read/write defaults with integrations:configure. Add --force only for trusted automation that should bypass that policy.