Global threat-level heuristic (TRIPWIRE)

CEV-OS / Data API / Global threat-level heuristic (TRIPWIRE)

CEV-OS Data API · last updated 2026-11-04. Status: live. Version 1.

Use this when you need TRIPWIRE's single global 5-to-1 threat-level heuristic (calm to critical) with every component and reason — not official DEFCON.

What it is

One object: TRIPWIRE's composite threat level (5 = calm … 1 = critical, DEFCON direction only) from commercial-safe inputs already on the map: conflict intensity, GDACS red/orange, NOAA tsunami, level-4 travel advisories, CISA KEV, NOAA SWPC G/R/S and CDC outbreak notices. Components, weights, floors and reasons are returned. Heuristic, not official DEFCON.

Endpoints

REST: GET /v1/threat-level on https://api.cev-os.com
Legacy host (same service): GET /v1/threat-level on https://cev-os.com
MCP tool: get_threat_level on https://mcp.cev-os.com/mcp

Parameters

None. This product takes no query parameters.

Example request

No account and no key. Query values below are the examples or defaults from the registry. An optional free key (header x-api-key) raises the limits; create one at https://cev-os.com/#api_keys after signing in with a verified email (Google sign-in is already verified).

curl -s "https://api.cev-os.com/v1/threat-level"

Example response

Every /v1 response is a JSON envelope (schema_version, product, timestamps, license, attribution, data). The registry example is the data member:

{
  "level": 4,
  "label": "GUARDED",
  "heuristic": true,
  "not_official_defcon": true,
  "scale": "5 = calm ... 1 = critical (DEFCON direction only)",
  "score": 0.22,
  "reasons": [
    "Conflict intensity vs trailing baseline: 40 severity-weighted events in 24h"
  ]
}

Update frequency

Computed on request from live TRIPWIRE stores, cached 1 min.

Public cache: 60 seconds (Cache-Control: public, max-age=60).

Sources, license and usage

License status: cleared with attribution. Heuristic computed by cev-os from GDELT, UCDP, GDACS, NOAA, CISA KEV, US State / UK FCDO and CDC. Not official DEFCON.

Underlying sources
Source	License	commercialOk	Terms
CEV-OS TRIPWIRE threat-level heuristic	Own work (Cutting Edge Ventures): a transparent composite of open, commercial-safe feeds. Not official DEFCON.	true	—
The GDELT Project	Free, unrestricted use incl. commercial, with citation and link	true	https://www.gdeltproject.org/about.html
Uppsala Conflict Data Program (UCDP) Candidate Events	CC BY 4.0 (cite UCDP)	true	—
GDACS (EC-JRC / UN OCHA)	Attribution required; not for life-safety use (EC-JRC content CC BY 4.0)	true	—
NOAA / NWS Tsunami Warning Centers	US Government work (public domain)	true	—
NOAA Space Weather Prediction Center	US Government work (public domain)	true	—
CISA Known Exploited Vulnerabilities Catalog	CC0 1.0; no CISA logo or endorsement	true	—
U.S. Department of State travel advisories	US Government work (public domain)	true	—
UK Foreign, Commonwealth & Development Office	Open Government Licence v3.0	true	https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/
CDC Travelers' Health, Travel Health Notices	US Government work (public domain). No CDC endorsement implied.	true	—

Attribution (show this wherever you display the data):

Tripwire threat level, not official DEFCON. A heuristic composite of open, commercial-safe feeds.
Inputs: GDELT; UCDP (CC BY 4.0); GDACS (not for life-safety use); NOAA NTWC/PTWC and SWPC; CISA KEV (CC0; no CISA logo or endorsement); US Department of State; UK FCDO (Open Government Licence v3.0); CDC (no endorsement).

Privacy class: public-derived. Access: public. Price: free (price is null; pay-per-call is not active).

Disclaimer

Tripwire threat level, not official DEFCON. Not for life-safety, military or emergency decisions.

Data API hub (all products, limits, license notes)
MCP Registry listing com.cev-os/data
OpenAPI 3.1
Machine product list: /v1/products
CEV-OS TRIPWIRE incidents (explainer)

Reference data, not investment advice.