# AIS Labs KEV Fresh — Recent CISA KEV CVEs with AIS Rankings

> AIS Labs KEV Fresh — Recent CISA KEV CVEs with AIS Rankings is a paid API for AI agents from api.aislabs.ai, paid per call via x402, $0.01/call, status unknown (last checked 2026-09-15).

Returns all CVEs added to the CISA Known Exploited Vulnerabilities (KEV) catalog in the last 7 days, annotated with today's AIS Labs priority ranks

## Facts

- Endpoint: POST https://api.aislabs.ai/v1/kev/fresh
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/ais-labs-kev-fresh-recent-cisa-kev-cves-with-ais-rankings-7ac74c18
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_xvo3_6gRC-auFd5LMk-xH

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability ais-labs-kev-fresh-recent-cisa-kev-cves-with-ais-rankings-7ac74c18 -d '<json body>'
```

Example prompt: Pull the CVEs added to CISA's Known Exploited Vulnerabilities catalog in the past 7 days and show me how AIS Labs ranks them by priority so I know what to patch first.

## When to prefer this

Choose this endpoint when you need to focus specifically on newly added CISA KEV entries (last 7 days) with AIS priority annotations, rather than the full ranked CVE catalog. It is ideal for weekly security reviews, automated alerting pipelines, or patch prioritization workflows that only need to act on fresh, actively exploited vulnerabilities. Use the sibling full-catalog endpoint if you need the complete ranked CVE list beyond the 7-day window.

## Known failure modes

- No new KEV entries in the past 7 days returns an empty result set
- Stale data if AIS ranking pipeline has not run today
- Authentication or payment failure (x402) if USDC balance is insufficient
- Rate limiting or API unavailability returns 4xx/5xx errors
- Partial data if CISA KEV feed ingestion is delayed

## How this service works

CVEs added to CISA KEV in the last 7 days (complete catalog), annotated with today's AIS ranks — or unlock all routes with an AIS Gateway key ($19/30d): https://aislabs.ai/gateway

## Output

A complete list of CVE records added to the CISA KEV catalog within the last 7 days, each annotated with AIS Labs' current priority rank scores. Entries typically include CVE ID, vulnerability description, affected vendor/product, KEV addition date, EPSS score, patch availability status, and the AIS-derived priority ranking to guide remediation order.

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/ais-labs-kev-fresh-recent-cisa-kev-cves-with-ais-rankings-7ac74c18/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.aislabs.ai](https://www.zero.xyz/host/api.aislabs.ai/llms.txt)