{"version":"1.0","name":"OT/ICS Threat Intelligence API","description":"OT/ICS threat intelligence API for SCADA, PLC, HMI, DCS, RTU, and safety systems. 40 pay-per-call endpoints across three tiers. Primitives ($0.01-$0.05): CVE triage with OT-adjusted severity, internet-exposed OT device lookup, ICS/APT threat actor profiles with MITRE ATT&CK for ICS mappings (SANDWORM, VOLTZITE, XENOTIME, CHERNOVITE, and 5 other hand-verified actors), sector threat actor mapping, IOC enrichment with OT campaign context, live CISA ICS-CERT advisory feed, ICS patch feasibility assessment, asset risk verdict with escalate flag, active campaign tracker, sector change feed, ICS malware encyclopedia (PIPEDREAM/TRITON/INDUSTROYER2), ICS threat actor ASN infrastructure profiling, and YARA/Sigma detection artifacts. Analytical primitives ($0.04-$0.40): multi-framework compliance gap mapping across 11 frameworks (NERC CIP, IEC 62443, NIST CSF/800-82, CISA CPG, Saudi NCA OTCC, UAE NESA IA) with an aggregate batch-assessment variant for triaging multiple CVEs/actors in one call, deterministic actor threat-scoring (capability x opportunity x intent, no LLM in the scoring path), a statistical per-sensor anomaly attribution endpoint, a deterministic mass-balance physical-invariant check, and an advisory-only keyword-pattern threat hunt for control-loop recon and RMM/LOTL abuse — all for caller-supplied OT telemetry, OT/ICS supply-chain vendor risk, D3FEND-mapped mitigation guidance, board/GRC portfolio risk aggregation across a sector and region, a deterministic remediation-action risk gate (auto_approve/human_review/reject) for agents proposing containment actions, and an AI/agentic copilot attack-surface lookup mapping OT/ICS vendor AI copilots to MITRE ATLAS techniques. Composed synthesis endpoints ($0.10-$0.45): complete sector threat brief with risk trend, full actor threat report, deep actor dossier, sector situation report, publication-ready CTI article, and social copy (LinkedIn/X) for an actor or CVE. Data sources: MITRE ATT&CK for ICS, MITRE ATLAS, CISA ICS-CERT, NVD, AlienVault OTX, GDELT, OFAC, AbuseIPDB, DeepSeek. No API keys — USDC micropayments on Base via x402. Ideal for industrial SOC automation, GRC/board reporting, agentic remediation governance, AI supply-chain risk, NERC CIP, IEC 62443, critical infrastructure protection.","skill_url":"https://ot-intel-api.onrender.com/SKILL.md","risk_check_url":"https://revettr.com/v1/score","endpoints":[{"path":"/ot/cve","price_usd":"0.02","network":"eip155:8453","asset":"USDC"},{"path":"/ot/device","price_usd":"0.05","network":"eip155:8453","asset":"USDC"},{"path":"/ot/actor","price_usd":"0.03","network":"eip155:8453","asset":"USDC"},{"path":"/ot/actor/sector","price_usd":"0.03","network":"eip155:8453","asset":"USDC"},{"path":"/ot/ioc","price_usd":"0.01","network":"eip155:8453","asset":"USDC"},{"path":"/ot/advisory","price_usd":"0.02","network":"eip155:8453","asset":"USDC"},{"path":"/ot/patch","price_usd":"0.05","network":"eip155:8453","asset":"USDC"},{"path":"/ot/exposure","price_usd":"0.05","network":"eip155:8453","asset":"USDC"},{"path":"/ot/campaign","price_usd":"0.05","network":"eip155:8453","asset":"USDC"},{"path":"/ot/delta","price_usd":"0.03","network":"eip155:8453","asset":"USDC"},{"path":"/ot/malware","price_usd":"0.02","network":"eip155:8453","asset":"USDC"},{"path":"/ot/brief","price_usd":"0.10","network":"eip155:8453","asset":"USDC"},{"path":"/ot/asn","price_usd":"0.03","network":"eip155:8453","asset":"USDC"},{"path":"/ot/detection","price_usd":"0.05","network":"eip155:8453","asset":"USDC"},{"path":"/ot/compliance","price_usd":"0.04","network":"eip155:8453","asset":"USDC"},{"path":"/ot/compliance/batch","price_usd":"0.20","network":"eip155:8453","asset":"USDC"},{"path":"/ot/threat-score","price_usd":"0.04","network":"eip155:8453","asset":"USDC"},{"path":"/ot/precursor-ttp","price_usd":"0.04","network":"eip155:8453","asset":"USDC"},{"path":"/ot/xai/root-cause-localization","price_usd":"0.15","network":"eip155:8453","asset":"USDC"},{"path":"/ot/agentic/threat-hunt/control-loop","price_usd":"0.15","network":"eip155:8453","asset":"USDC"},{"path":"/ot/physics/invariant-reachability","price_usd":"0.20","network":"eip155:8453","asset":"USDC"},{"path":"/ot/vendor-risk","price_usd":"0.15","network":"eip155:8453","asset":"USDC"},{"path":"/ot/mitigation-map","price_usd":"0.20","network":"eip155:8453","asset":"USDC"},{"path":"/ot/risk-exposure","price_usd":"0.40","network":"eip155:8453","asset":"USDC"},{"path":"/ot/action-conformance","price_usd":"0.12","network":"eip155:8453","asset":"USDC"},{"path":"/ot/ai-exposure","price_usd":"0.20","network":"eip155:8453","asset":"USDC"},{"path":"/ot/ai-uplift","price_usd":"0.20","network":"eip155:8453","asset":"USDC"},{"path":"/ot/ai-attack-feasibility","price_usd":"0.20","network":"eip155:8453","asset":"USDC"},{"path":"/ot/claim-reliability","price_usd":"0.20","network":"eip155:8453","asset":"USDC"},{"path":"/ot/stix-coverage","price_usd":"0.20","network":"eip155:8453","asset":"USDC"},{"path":"/ot/report","price_usd":"0.25","network":"eip155:8453","asset":"USDC"},{"path":"/ot/dossier","price_usd":"0.35","network":"eip155:8453","asset":"USDC"},{"path":"/ot/sitrep","price_usd":"0.35","network":"eip155:8453","asset":"USDC"},{"path":"/ot/article","price_usd":"0.45","network":"eip155:8453","asset":"USDC"},{"path":"/ot/linkedin","price_usd":"0.15","network":"eip155:8453","asset":"USDC"},{"path":"/ot/xpost","price_usd":"0.10","network":"eip155:8453","asset":"USDC"},{"path":"/ot/analyst-brief","price_usd":"0.12","network":"eip155:8453","asset":"USDC"},{"path":"/ot/vendor-risk-delta","price_usd":"0.20","network":"eip155:8453","asset":"USDC"},{"path":"/ot/sighting/submit","price_usd":"0.05","network":"eip155:8453","asset":"USDC"},{"path":"/ot/gcc-bulletin","price_usd":"0.01","network":"eip155:8453","asset":"USDC"}]}