Frequently asked questions
About the APIs, pricing, early access and Stackbyte Studio. If your question is not here, get in touch.
APIs and data
- What does Stackbyte do?
- We collect official public data, such as vulnerability feeds, sanctions lists, recall notices and company registers, check it every night and return it as consistent JSON, on one key and one credit balance.
- Is CVE Triage available today?
- It is in development. Early access opens first, and paid plans start when it goes live.
- Which APIs are available?
- CVE Triage is in development and will open first. Package Risk and Cloud Intel are next. Sanctions Screen, Product Recalls, UAE Company Verify and Dubai Property Data are planned.
- Where does the data come from?
- Every dataset comes from a government register, an official API or a public feed whose licence allows commercial use. Each response names its sources.
- How often is the data updated?
- Every night. Each import has to pass checks on structure and volume before it replaces the previous day's data. If a source is down or looks wrong, the API keeps serving the last good copy and tells you its date.
- Can I download a whole dataset?
- No. We sell lookups, verification and enrichment, not bulk exports. The sources we use are free to download from their publishers, and every response names its source.
- What comes with a key?
- REST endpoints with an OpenAPI specification and reference docs, Python and TypeScript client libraries, an MCP server so AI agents can call the APIs directly, and sandbox keys (sb_test_) alongside live keys (sb_live_). Client libraries and the MCP server ship with the first API.
Pricing and credits
- Is there a free plan?
- Yes. The free plan includes 100 credits a month and stops at its limit. Paid plans start at $19 a month.
- How do credits work?
- Every plan has a monthly credit allowance that works across every API. Credits reset each billing month. Paid plans keep working past the allowance and bill the extra credits.
- How many credits does a call use?
- Most lookups use 1 credit. A sanctions screen, company search or property query uses 2. A CVE batch uses 1 credit per 10 CVEs, and any repeat of the same request within 24 hours uses 1.
- Am I charged for failed requests?
- No. Failed requests are not charged. A lookup that finds no record still counts as a lookup.
- Which currency are prices in?
- Prices are in US dollars. VAT or other sales tax is added where it applies.
- Can I get higher volumes, an SLA or a DPA?
- Yes. For volumes above the Scale plan, or if you need an SLA or a data processing agreement, get in touch.
Early access
- How does early access work?
- Leave your email and we will let you know when CVE Triage opens for testing, then again as each new API launches. We will not use your address for anything else.
- How do I come off the list?
- Reply to any of our emails or write to team@stackbyte.app.
Stackbyte Studio
- What is Stackbyte Studio?
- Stackbyte Studio is our services team. It designs and builds websites, apps, custom APIs and integrations, and runs SEO, GEO and GTM work for clients.
- How is Studio work priced?
- Each project gets a written proposal with scope, timeline and price, fixed where possible, before any work starts. Typical starting prices are shown on each service page.
- Can Studio build on top of your APIs?
- Yes. If one of our APIs covers most of what you need, we can build the remaining part around it, or connect it to your own systems.
- What is GEO?
- GEO stands for generative engine optimisation. It means making your content easy for AI answer engines to understand, trust and cite when they answer a question.
- What does GTM mean?
- GTM stands for go-to-market: the plan for how a product reaches its customers, from positioning and messaging to channels and measurement.
Company and privacy
- Who is behind Stackbyte?
- Stackbyte Limited is run by its two founders. One leads engineering, the APIs and security; the other leads clients, partnerships and go-to-market. We do not publish our names. The About page describes each role and how we work.
- Where is Stackbyte based?
- Stackbyte Limited is registered in England and Wales, company number 17110527, with its registered office at 60 Tottenham Court Road, London, W1T 2EW. We work with clients in the UK, the UAE and elsewhere.
- Is Stackbyte affiliated with NVD, CISA or the UAE government?
- No. Stackbyte Limited is an independent UK company. We collect data from official public sources and name the source on every response.
- How do you handle personal data in the APIs?
- Where a record could identify a person, we keep only what a lookup needs and act on removal requests.
Still have a question?
Contact us