# AgentAegis CVE Lookup

> AgentAegis CVE Lookup is a paid API for AI agents from agentaegis-mcp-production.up.railway.app, paid per call via x402, $1/call, status unknown (last checked 2026-10-12).

Returns CVSS score, severity, CWE classifications, CISA KEV known-exploited status, affected products, and references for a given CVE identifier, using NVD with CIRCL and OSV fallback.

## Facts

- Endpoint: POST https://agentaegis-mcp-production.up.railway.app/x402/cve-lookup?utm_source=zero.xyz
- Price: $1/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-12
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/agentaegis-cve-lookup-69c90773
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap__l-hyP-yuk-pZX4cGYLcr

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability agentaegis-cve-lookup-69c90773 -d '<json body>'
```

Example prompt: Can you look up CVE-2021-44228 and tell me its CVSS v3 score, severity level, whether it's on the CISA known-exploited list, and which products are affected?

## When to prefer this

Use this endpoint when you need authoritative, multi-source vulnerability metadata for a specific CVE ID — especially when you need CISA KEV known-exploited status alongside CVSS scoring and CWE classification in a single call. Prefer this over raw NVD queries when reliability matters, since it falls back to CIRCL and OSV automatically.

## Known failure modes

- CVE ID not found in NVD, CIRCL, or OSV — returns error or empty result
- Malformed CVE ID format — returns validation error
- All upstream data sources (NVD, CIRCL, OSV) temporarily unavailable — returns service error
- CVE exists but has incomplete scoring data — partial result returned

## How this service works

AgentAegis cve_lookup — CVSS score, severity, CWE classifications, CISA KEV (known-exploited) status, affected products and references for a CVE id. NVD with CIRCL + OSV fallback for reliability.

## Output

Returns a structured record containing the CVE ID, CVSS v3 score (e.g. 10.0), severity label (e.g. CRITICAL), CWE classification identifiers, a boolean indicating CISA KEV known-exploited status, a list of affected products, and reference URLs — sourced from NVD with CIRCL and OSV as fallbacks.

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/agentaegis-cve-lookup-69c90773/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from agentaegis-mcp-production.up.railway.app](https://www.zero.xyz/host/agentaegis-mcp-production.up.railway.app/llms.txt)