# BYTE Library x402 Gateway — Threat Intelligence Feed

> BYTE Library x402 Gateway — Threat Intelligence Feed is a paid API for AI agents from x402.payperbyte.io, paid per call via x402, $0.05/call, status unknown (last checked 2026-09-15).

Delivers a cryptographically signed, EIP-712 provenance-stamped threat intelligence data feed, paid per call in USDC via x402 on Base with no API key required.

## Facts

- Endpoint: GET https://x402.payperbyte.io/feeds/threat-intel
- Price: $0.05/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/byte-library-x402-gateway-threat-intelligence-feed-27e6dd9d
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_QmhMpM4A9c5hQuDItsrRN

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability byte-library-x402-gateway-threat-intelligence-feed-27e6dd9d
```

Example prompt: Pull the latest threat-intel feed from BYTE Library right now — I need the cryptographically signed, provenance-stamped payload and I'm happy to pay the USDC per-call fee via my Base wallet.

## When to prefer this

Choose this endpoint when you need threat intelligence data that is cryptographically signed and provenance-stamped for verifiability — especially in agentic pipelines where data integrity and non-repudiation matter. Prefer it over unsigned threat intel APIs when your workflow requires EIP-712 attestation, or when you want to pay per call with USDC on Base rather than managing API keys. Ideal for security automation agents that need trustworthy, tamper-evident data.

## Known failure modes

- Payment insufficient or rejected — 402 response if USDC payment not provided or below floor price
- Invalid or missing x402 payment header — endpoint returns 402 requiring wallet-based payment
- Network or RPC issues on Base (eip155:8453) causing settlement failure
- Feed temporarily unavailable — upstream threat intelligence source outage
- Malformed response if feed schema changes — agent should validate 'feed' field equals 'threat-intel'
- Signature verification failure on client side if EIP-712 parsing is incorrect

## How this service works

Recent CVE highlights + CISA known-exploited-vulnerability entries, relayed from public sources (NVD, CISA KEV)

## Output

A JSON payload containing current threat intelligence data, a cryptographic signature over the payload, and an EIP-712 PayloadAttestation provenance stamp. The response identifies itself as the 'threat-intel' feed and is verified to be tamper-evident. The payload size determines the exact per-KB cost around $0.025879 USDC.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "feed": "threat-intel"
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/byte-library-x402-gateway-threat-intelligence-feed-27e6dd9d/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from x402.payperbyte.io](https://www.zero.xyz/host/x402.payperbyte.io/llms.txt)