API access is a Max feature.

The v1 endpoint is bearer-authed and gated to Max tier. The reference documentation is, too, so you only see it if you can use it. Upgrade to mint a key and integrate against /api/v1/cves.