This is not a traditional SDK. There is no package to install.

SecID's API is one endpoint, one query parameter, JSON back. The entire client is ~30 lines in any language. The complexity isn't in calling the API — it's in knowing what to do with the results (weights, statuses, version disambiguation). That's better expressed as guidance than as code.

The primary artifact here is instructions that AI assistants follow to build clients, plus reference implementations you can copy.

Philosophy: It's easier to verify AI-generated code than audit someone else's package.

pip install secid      # Python 3.9+
npm install secid      # Node 18+

Then use as library or CLI:

# CLI
secid "secid:advisory/mitre.org/cve#CVE-2021-44228"

# Python
from secid_client import SecIDClient
client = SecIDClient()
url = client.best_url("secid:advisory/mitre.org/cve#CVE-2021-44228")

# TypeScript
import { SecIDClient } from "secid";
const client = new SecIDClient();
const url = await client.bestUrl("secid:advisory/mitre.org/cve#CVE-2021-44228");

Connect your AI assistant to the SecID MCP server. Tools are self-describing. Done.

MCP endpoint: https://secid.cloudsecurityalliance.org/mcp
Transport: Streamable HTTP (stateless, no auth)

The MCP server IS the SDK for AI-to-AI interaction. It also exposes secid://docs/build-a-client and secid://docs/prompt-template as resources — an AI can read these to generate an HTTP client in any language.

Give your AI assistant the prompt template. It generates a working client in your language.

1. Copy skills/build-a-client/PROMPT-TEMPLATE.md
2. Replace {LANGUAGE} with your target language
3. Paste into your AI assistant
4. Get a working single-file client

Everything the AI needs is in that one prompt — no external docs required.

Single file. Zero dependencies. Copy and go.

All include CLI mode:

python python/secid_client.py "secid:advisory/mitre.org/cve#CVE-2021-44228"
npx tsx typescript/secid-client.ts "secid:advisory/mitre.org/cve#CVE-2021-44228"
go run go/secid.go "secid:advisory/mitre.org/cve#CVE-2021-44228"

SecID is AI-first. The MCP server already handles AI-to-AI integration. For developers who want a client library, the API is simple enough that any AI assistant can generate one correctly — if given the right instructions.

Traditional SDKs are:

• Published once, stale forever — API evolves, SDK lags behind
• One language per package — maintaining 6+ language SDKs is a full-time job
• Opaque dependencies — you inherit someone else's choices about error handling, retries, HTTP clients

AI-generated clients are:

• Always current — regenerate from the latest instructions
• Any language — including ones that didn't exist when the instructions were written
• Transparent — you see every line, you own every line
• Verifiable — run it, confirm it works

This is our view of software moving forward: AI builds it, you verify it, you own it.

SecID-Client-SDK/
├── skills/
│   └── build-a-client/            # AI-consumable instructions
│       ├── BUILD-A-CLIENT.md      # Complete guide for building a client
│       ├── API-CONTRACT.md        # Formal API spec (request, response, encoding)
│       ├── RESULT-HANDLING.md     # Statuses, weights, cross-source, versions
│       └── PROMPT-TEMPLATE.md     # Copy-paste prompt for any language
├── python/                        # pip install secid
│   ├── secid_client.py            # Python client — stdlib only
│   ├── pyproject.toml             # Package config (hatchling)
│   └── README.md                  # PyPI page
├── typescript/                    # npm install secid
│   ├── src/
│   │   ├── secid-client.ts        # Library exports
│   │   └── secid-cli.ts           # CLI entry point
│   ├── package.json               # Package config (ESM, Node 18+)
│   ├── tsconfig.json              # TypeScript compiler config
│   └── README.md                  # npm page
└── go/
    └── secid.go                   # Go client — stdlib only

# Resolve a CVE using the API directly
curl "https://secid.cloudsecurityalliance.org/api/v1/resolve?secid=secid:advisory/mitre.org/cve%23CVE-2021-44228"

# Python
python python/secid_client.py "secid:advisory/mitre.org/cve#CVE-2021-44228"

# TypeScript
npx tsx typescript/secid-client.ts "secid:advisory/mitre.org/cve#CVE-2021-44228"

# Go
go run go/secid.go "secid:advisory/mitre.org/cve#CVE-2021-44228"

Apache 2.0