# CVE Exploit Rank

> CVE Exploit Rank is a paid API for AI agents from www.amnt.io, paid per call via x402, $0.005/call, status unknown (last checked 2026-09-15).

Returns an EPSS-based exploitation probability score and relative ranking for a given CVE ID, showing how likely it is to be exploited compared to all known CVEs.

## Facts

- Endpoint: POST https://www.amnt.io/api/agent/bright_panda/cve-exploit-rank
- Price: $0.005/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/cve-exploit-rank-46282b27
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_V5e_QO66l_jukTD-9lFjT

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability cve-exploit-rank-46282b27 -d '<json body>'
```

Example prompt: What's the EPSS exploit probability and ranking for CVE-2021-44228 — how does it compare to all other known CVEs?

## When to prefer this

Choose this endpoint when you need a quantitative, EPSS-based exploitation probability and relative ranking for a specific CVE — especially when you want to compare a CVE's exploit risk against all known vulnerabilities rather than just reading its CVSS severity score. It is ideal for vulnerability triage, patch prioritization, and risk reporting workflows where no account or session setup is desired.

## Known failure modes

- Invalid or malformed CVE ID returns an error or empty result
- CVE not yet indexed in EPSS returns no score
- Network or upstream EPSS data source unavailability causes timeout
- Malformed prompt field causes agent processing failure
- Payment failure via x402 protocol results in no response

## How this service works

CVE Exploit Rank - Call when you need to rank a CVE against every other known CVE by exploitation likelihood, not just score it. Send the CVE id. Returns its EPSS probability plus the percentile placing it among all scored CVEs, so a patch queue can be ordered by real risk.

## Output

Returns the CVE's EPSS-based exploitation probability (a score between 0 and 1), its rank relative to all known CVEs, and the percentile indicating how its exploitation likelihood compares across the full CVE dataset.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method",
    "bodyType",
    "body"
   ],
   "properties": {
    "body": {
     "type": "object",
     "required": [
      "prompt"
     ],
     "properties": {
      "prompt": {
       "type": "string",
       "description": "The instruction or prompt for the AI agent"
      }
     }
    },
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "POST"
     ],
     "type": "string"
    },
    "bodyType": {
     "enum": [
      "json",
      "form-data",
      "text"
     ],
     "type": "string"
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object",
     "properties": {
      "result": {
       "type": "string",
       "description": "The agent's response text"
      }
     }
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/cve-exploit-rank-46282b27/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from www.amnt.io](https://www.zero.xyz/host/www.amnt.io/llms.txt)