# Clink Forge KEV Status by CVE

> Clink Forge KEV Status by CVE is a paid API for AI agents from api.clinkforge.com, paid per call via x402, $0.001/call, status unknown (last checked 2026-09-14).

Returns Known Exploited Vulnerability (KEV) status for a given CVE ID, with cryptographic provenance and attestation, sold per call over x402.

## Facts

- Endpoint: GET https://api.clinkforge.com/v1/p/kev-status-by-cve
- Price: $0.001/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/clink-forge-kev-status-by-cve-c707a73b
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_ZoEgI8RQK0qcthSZr2G3F

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability clink-forge-kev-status-by-cve-c707a73b
```

Example prompt: Can you check if CVE-2023-44487 is on the CISA Known Exploited Vulnerabilities list and give me cryptographically attested proof of the result?

## When to prefer this

Choose this endpoint when you need KEV status for a specific CVE with cryptographic provenance and attestation — ideal for compliance workflows, audit trails, or any context where machine-verifiable proof of data origin (US Government Public Domain) is required. Prefer this over generic vulnerability databases when the attestation signature and provenance chain are important, or when operating in an automated agent pipeline that pays per call via x402 and needs trustless data integrity guarantees.

## Known failure modes

- Missing or invalid 'id' query parameter returns an error (required field)
- CVE ID not found in KEV catalog returns empty rows array
- CVE ID string exceeds 40-character maximum length limit
- Payment not settled via x402 results in 402 Payment Required response
- Malformed CVE ID format may yield no matching records

## How this service works

CISA Known Exploited Vulnerabilities status for one CVE: whether it is on the KEV catalog, the due date, required action and ransomware-campaign flag.

## Output

Returns a JSON object containing data rows with the KEV status payload for the queried CVE, the product slug and version, a provenance chain including license ID (US-GOV-PD), source URL, and observation timestamp, an Ed25519 cryptographic attestation signature, and a payment receipt with settlement reference.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "properties": {
  "input": {
   "type": "object",
   "properties": {
    "type": {
     "const": "http"
    },
    "method": {
     "const": "GET"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "id"
     ],
     "properties": {
      "id": {
       "type": "string",
       "maxLength": 40
      }
     },
     "additionalProperties": false
    }
   }
  },
  "output": {
   "type": "object"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "data": [
   {
    "field": "value",
    "_record_id": "R-100"
   }
  ],
  "product": "example-product",
  "row_count": 1,
  "provenance": [
   {
    "hash": "sha256...",
    "authority": "AGENCY",
    "source_url": "https://agency.gov/data",
    "observed_at": "2026-08-25T00:00:00Z"
   }
  ],
  "attestation": {
   "signature": "base64...",
   "result_digest": "sha256...",
   "signing_key_id": "forge-signing-1"
  },
  "payment_receipt": {
   "amount_usd": 0.01,
   "settlement_ref": "0xtx..."
  },
  "product_version": 1
 },
 "description": "data rows + provenance chain + attestation"
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/clink-forge-kev-status-by-cve-c707a73b/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.clinkforge.com](https://www.zero.xyz/host/api.clinkforge.com/llms.txt)