# Security Sushii — Wrapped API

> **You are on:** `https://api.paywithlocus.com/api` | [llms.txt](https://paywithlocus.com/llms.txt) | [docs](https://docs.paywithlocus.com)
>
> Locus runs on multiple environments -- make sure every URL you call matches your expected environment.
> | Environment | Landing | API | Docs |
> |---|---|---|---|
> | Production | paywithlocus.com | api.paywithlocus.com | docs.paywithlocus.com |
> | Beta | beta.paywithlocus.com | api.beta.paywithlocus.com | docs.paywithlocus.com |
> | Stage | stage.paywithlocus.com | api.stage.paywithlocus.com | docs.paywithlocus.com |
>
> If the API URL above doesn't match your expected environment, re-fetch this file from the correct domain.

> Search and retrieve detailed information about known vulnerabilities, including severity ratings, CVSS scores, and CISA Known Exploited Vulnerabilities status to stay informed about security threats. Access comprehensive CVE data to assess risks and prioritize patching efforts for your systems.

**Category:** Developer Tools | **Website:** [security.sushii.dev/](https://security.sushii.dev/) | **Docs:** [parse.bot/marketplace/4556dd08-af1a-4693-8948-f975e09a5cd3/security-sushii-dev-api](https://parse.bot/marketplace/4556dd08-af1a-4693-8948-f975e09a5cd3/security-sushii-dev-api)

Pay-per-use API proxy for Locus Pro. Each call burns credits from your workspace balance.

## Access

**Base URL:** `https://api.paywithlocus.com/api/wrapped/credits/security-sushii/`
**Auth:** `Authorization: Bearer <LOCUS_CREDITS_SECRET_KEY>` (an `lcr_` secret key or a scoped `lcac_` agent credential)
**Required header:** `Idempotency-Key: <fresh UUID per call>`. A retry with the same key replays the stored result without a new charge.
**Response:** the provider response after any endpoint-specific normalization. `X-Locus-Credits-Charged` carries the charge and `X-Locus-Credits-Balance` the remaining balance. Insufficient credits return `402` before the provider is called.
**Pricing:** estimated costs below are USD. Locus debits the credit equivalent at your workspace rate.

Full call contract: https://docs.paywithlocus.com/api-reference/introduction

> Using a Pay With Locus wallet key (`claw_` prefix)? Wallet routes are documented separately: https://docs.paywithlocus.com/wrapped-apis/for-agents

## Endpoints

### Get cve

Retrieve full details for a single CVE by its ID, including description, CVSS scoring, affected vendors and products, CWE weaknesses, and reference links.

**Estimated cost:** Metered

| Field | Type | Required | Description |
|-------|------|----------|-------------|
| `cve_id` | string | Yes | CVE identifier in format CVE-YYYY-NNNNN (e.g. CVE-2026-58596). |

```bash
curl -X POST https://api.paywithlocus.com/api/wrapped/credits/security-sushii/get-cve \
  -H "Authorization: Bearer $LOCUS_CREDITS_SECRET_KEY" \
  -H "Idempotency-Key: $(uuidgen)" \
  -H "Content-Type: application/json" \
  -d '{"cve_id":"<string>"}'
```

### Search cves

Search and filter CVE vulnerabilities by keyword, severity, sort order, and KEV status. Results are paginated with 25 items per page, auto-iterated by the SDK. Keyword search matches CVE ID, vendor, product, CWE, or description text.

**Estimated cost:** Metered

| Field | Type | Required | Description |
|-------|------|----------|-------------|
| `kev` | boolean | No | When true, show only CVEs in the CISA Known Exploited Vulnerabilities catalog. |
| `page` | integer | No | Page number (1-based). |
| `query` | string | No | Free-text search matching CVE ID, vendor, product, CWE, or description. |
| `severity` | string | No | Filter by CVSS severity level. Omitted returns all severities. |
| `sort` | string | No | Sort order for results. |

```bash
curl -X POST https://api.paywithlocus.com/api/wrapped/credits/security-sushii/search-cves \
  -H "Authorization: Bearer $LOCUS_CREDITS_SECRET_KEY" \
  -H "Idempotency-Key: $(uuidgen)" \
  -H "Content-Type: application/json" \
  -d '{"kev":"<boolean>","page":"<integer>","query":"<string>","severity":"<string>","sort":"<string>"}'
```

## Next steps

- [All wrapped API providers](https://paywithlocus.com/wapi/index.md): pick another provider.
- [Find and call tools](https://paywithlocus.com/agent/tools.md): price ceilings, async results, and errors.
- [Credits and billing](https://paywithlocus.com/agent/billing.md): what a call costs and how to add credits.
- [Agent docs index](https://paywithlocus.com/agent/index.md): every Locus agent page.