DevelopersPrivate beta

Query the region, from your code or your agent.

One metered API and one MCP server. Every response is a cited verdict — with confidence, sources and stable permalinks — and "unknown" is a first-class answer, never a guess. That is honesty-first, expressed in JSON.

Your first call

curl https://api.skopnix.io/v1/exposure/az/latest \
  -H "Authorization: Bearer sk_live_..."

# → { "country": "AZ", "as_of": "2026-08-28T…Z",
#     "hosts": 114527, "risky": { "rdp": 444, "smb": 210 },
#     "sources": [ … ], "confidence": "high" }

REST endpoints

GET/v1/cve/{id}

Exploitation status, KEV/EPSS, regional observation — a sourced verdict.

GET/v1/actor/{slug}

Aliases, ATT&CK TTPs, regional targeting, confidence + citations.

GET/v1/ioc/{indicator}

IP / domain / hash → verdict + provenance from our sensors.

GET/v1/exposure/{country}

Regional attack-surface snapshot — hosts, risky services, deltas.

GET/v1/search?q=

Free-text over the corpus → cited snippets + stable permalinks.

MCP server

Add regional threat intel to Claude, Cursor or your own agent in one line. Public tools are free; the sensor-backed tools need a paid key.

Install

{
  "mcpServers": {
    "skopnix": {
      "url": "https://mcp.skopnix.io",
      "headers": { "Authorization": "Bearer sk_..." }
    }
  }
}

Tools

lookup_cvefree
lookup_actorfree
search_intelfree
enrich_iocpaid — sensor-backed
regional_threat_lookuppaid — sensor-backed

Want early access?

The API is in private beta. Get a key while coverage is landing — early keys keep their rate.

Request a key →Pricing