Overview

The Patchstack Threat Intelligence API exposes our vulnerability database for WordPress plugins, themes and core. It supports single-product lookups, bulk lookups (POST /batch, up to 50 products per request), the /latest rolling feed, advisory-by-id detail, and a per-item payload that includes cvss_score, cve, is_exploited, patch_priority, and patched_in_ranges.

Custom pricing, activated on request contact us.

Guide Reference OpenAPI Postman API properties

NPM features

For partners covering JavaScript components, the npm features add npm-ecosystem coverage alongside WordPress, available to selected partners working directly with Patchstack. Beyond npm itself they ship the supporting additions that make npm coverage workable at scale: the new GET /all endpoint, cursor pagination, ?include=details for full advisory bodies, and a nested response shape the stable API will eventually adopt. Everything else (/latest, /product/{type}/{name}/{version}, /batch) is the same surface as the stable API.

See the NPM features page for the full delta base URL, parameters, pagination, errors, and migration notes and the auto-generated reference for the full schema. Contact us for access.

The legacy Standard tier is no longer offered to new customers but remains documented for existing integrations its endpoints are a strict subset of the current API.

Using the API with your tools

The API ships with an OpenAPI spec and a generated Postman collection. The npm features have their own spec pick whichever youre integrating against:

	OpenAPI spec	Postman collection
Threat Intelligence API	`threat-intel-extended.yaml`	`threat-intel-extended.postman_collection.json`
NPM features	`threat-intel-npm.yaml`	`threat-intel-npm.postman_collection.json`
Standard (legacy)	`threat-intel-standard.yaml`	`threat-intel-standard.postman_collection.json`

Postman, Insomnia, Bruno or Hoppscotch

Every endpoint, parameter, request body and example is preconfigured. Download the Postman collection and drag it into your tool, or import by URL from inside the tool:

Tool	How to import
Postman	`File Import Link` and paste the collection URL.
Insomnia	`Create Import From URL` paste the OpenAPI URL.
Bruno	`Collection Import OpenAPI V3 Spec` paste the OpenAPI URL.
Hoppscotch	`Collections Import/Export OpenAPI` paste the OpenAPI URL.

Authentication: in Postman set the collection Authorization to API Key, key PSKey, value {{PSKEY}}, and add PSKEY as a collection variable with your real key as the Current value (leave Initial blank so it doesnt sync to teammates). Other tools work the same way set PSKey as a collection header once.

Claude Code and other LLM coding assistants

Point your assistant at the spec. LLMs parse OpenAPI cleanly and will generate clients that match the real field names instead of hallucinating.

Ad hoc: paste the spec URL into your prompt. Example: Write a Python client for https://docs.patchstack.com/schemas/threat-intel-extended.yaml. I need a batch walker over a package.json-style list.
In your repo: download the spec to docs/vendor/patchstack-threat-intel.yaml and reference it from your CLAUDE.md / AGENTS.md. Your assistant can then grep the YAML for specific fields without refetching.
Plain-text fallback: for tools that dont parse YAML, our llms-full.txt contains the full reference as flat markdown.

SDK generation

Generate a client in any language from the spec:

# TypeScript
npx @openapitools/openapi-generator-cli generate \
  -i https://docs.patchstack.com/schemas/threat-intel-extended.yaml \
  -g typescript-fetch -o ./patchstack-client

# Python
npx @openapitools/openapi-generator-cli generate \
  -i https://docs.patchstack.com/schemas/threat-intel-extended.yaml \
  -g python -o ./patchstack-client-py

Speakeasy and Fern also consume the same spec and produce more idiomatic SDKs if you need a polished client library.

Edit page

Previous
Patchstack iFrame Widget Next
Guide