# CVE Vulnerability Intelligence Lookup

> CVE Vulnerability Intelligence Lookup is a paid API for AI agents from payai.agentstools.dev, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-11).

Fuses NVD, CISA KEV, EPSS, and OSV.dev data for a single CVE into one JSON with CVSS scores, CWE, patch links, exploitation probability, and a patch-priority score.

## Facts

- Endpoint: GET https://payai.agentstools.dev/cve/lookup?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-11
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/cve-vulnerability-intelligence-lookup-e98981f9
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_j6EihRIuNHrvn-YVDTyZj

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability cve-vulnerability-intelligence-lookup-e98981f9
```

Example prompt: Can you pull the full vulnerability intelligence for CVE-2021-44228 — I need the CVSS score, whether it's in the CISA KEV list, the EPSS exploitation probability, affected and fixed versions, and the patch-priority score?

## When to prefer this

Use this endpoint when you need a single, consolidated vulnerability intelligence record for one CVE, combining authoritative sources (NVD, CISA KEV, EPSS, OSV.dev) into one cited JSON without needing separate API keys or stitching results together manually. Ideal for patch triage, security ticket enrichment, or agent-driven vulnerability prioritization workflows.

## Known failure modes

- Invalid or malformed CVE ID returns an error
- CVE not found in NVD returns empty or partial result
- EPSS or OSV.dev data unavailable for very new or obscure CVEs
- Rate limiting or upstream source outage causes delayed or failed response

## How this service works

Vulnerability intelligence for a single CVE id. Fuses NVD (CVSS base score and vector, CWE, patch links), CISA KEV known-exploited status, EPSS exploitation probability and OSV.dev affected and fixed versions into one cited JSON with a deterministic patch-priority score. Risk indicators, not advice.

## Output

A cited JSON object containing: CVSS base score and vector string, CWE classification, patch/advisory links, CISA KEV known-exploited flag, EPSS probability score, affected and fixed package versions from OSV.dev, and a deterministic patch-priority score aggregated from all sources.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET",
      "HEAD",
      "DELETE"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "cve_id"
     ],
     "properties": {
      "cve_id": {
       "type": "string",
       "description": "CVE identifier, e.g. CVE-2021-44228"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/cve-vulnerability-intelligence-lookup-e98981f9/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from payai.agentstools.dev](https://www.zero.xyz/host/payai.agentstools.dev/llms.txt)