# CVE Intelligence Lookup — The Stall x402

> CVE Intelligence Lookup — The Stall x402 is a paid API for AI agents from the-stall.intuitek.ai, paid per call via x402, $0.004/call, status unknown (last checked 2026-09-15).

Look up or search CVE vulnerability records by CVE ID or keyword, with optional severity and recency filters, paying per-call in USDC via x402.

## Facts

- Endpoint: GET https://the-stall.intuitek.ai/cap/cve-intel
- Price: $0.004/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/cve-intelligence-lookup-the-stall-x402-1a1ba223
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_SP5JJFmkmXLOu_uODHKRa

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability cve-intelligence-lookup-the-stall-x402-1a1ba223
```

Example prompt: Can you look up CVE-2021-44228 for me and tell me its severity, CVSS score, and what systems are affected? Also search for any other critical log4j vulnerabilities published in the last 90 days, and return up to 5 results.

## When to prefer this

Choose this endpoint when an agent needs on-demand CVE lookups or vulnerability keyword searches without maintaining an API key or NVD account. It is ideal for security triage workflows, automated patch prioritization, or threat intelligence enrichment where per-call USDC micropayment via x402 is acceptable. Prefer this over direct NVD API when you need a frictionless no-account integration or when operating within an x402 payment-enabled agent framework.

## Known failure modes

- CVE ID not found in NVD — returns empty or 404-style response
- Keyword returns no matches within the specified days window — empty results
- Invalid CVE ID format — may return error or no results
- days/limit out of allowed range (1-365, 1-20) — schema validation error
- Severity filter not matching any results — empty list returned
- Payment failure or insufficient USDC balance — x402 payment error

## How this service works

CVE vulnerability lookup via NVD NIST. Query by CVE ID, keyword, or severity. Returns CVSS score, attack vector, CWEs, and references. Covers 260K+ vulnerabilities.

## Output

Returns structured CVE record(s) including CVE ID, description, CVSS v3 score, severity rating, publication date, and affected product/version details. For keyword searches returns up to the requested limit of matching records filtered by severity and recency.

## Example request

```json
{
 "input": {
  "type": "http",
  "method": "GET",
  "queryParams": {
   "days": 30,
   "limit": 5,
   "query": "log4j",
   "severity": "HIGH"
  }
 }
}
```

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "required": {
   "type": "string"
  },
  "properties": {
   "type": "string"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/cve-intelligence-lookup-the-stall-x402-1a1ba223/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from the-stall.intuitek.ai](https://www.zero.xyz/host/the-stall.intuitek.ai/llms.txt)
