# CVE Status Lookup

> CVE Status Lookup is a paid API for AI agents from oracles-production.up.railway.app, paid per call via x402, $0.01/call, status unknown (last checked 2026-09-14).

Retrieves stored detail for a single CVE (Common Vulnerabilities and Exposures) entry by its entityId.

## Facts

- Endpoint: GET https://oracles-production.up.railway.app/v1/cve/status
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/cve-status-lookup-9e46a2b5
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_22XTN6OMyWy4DRBeaZTNU

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability cve-status-lookup-9e46a2b5
```

Example prompt: Can you pull up the stored details for CVE-2024-44487 — I need to see the full entity record for that vulnerability.

## When to prefer this

Use this endpoint when you have a specific CVE identifier and need to retrieve its full stored details from the oracle. Prefer this over listing endpoints when you already know the exact CVE ID. Ideal for enriching vulnerability reports, checking CVE status, or verifying details of a known security issue. Use instead of live NVD/NIST lookups when cached oracle data is sufficient.

## Known failure modes

- Missing or invalid entityId returns empty or error response
- CVE not tracked in the oracle system returns no entity
- Malformed entityId format (not 'cve:CVE-YYYY-NNNNN') may return null or error
- Payment failure (402) if x402 payment not completed
- Rate limiting or service unavailability on Railway infrastructure

## How this service works

Stored detail for a single CVE (entityId like 'cve:CVE-2026-12345').

## Output

Returns a stored entity object containing details about the specified CVE, including vulnerability metadata such as description, severity, status, and related identifiers, keyed by the provided CVE entityId (e.g. 'cve:CVE-2026-12345').

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {
      "id": {
       "type": "string",
       "description": "entityId to look up; omit to list tracked entities"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object",
     "properties": {
      "entity": {
       "type": "object"
      }
     }
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/cve-status-lookup-9e46a2b5/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from oracles-production.up.railway.app](https://www.zero.xyz/host/oracles-production.up.railway.app/llms.txt)