# CVE Vulnerability Lookup API

> CVE Vulnerability Lookup API is a paid API for AI agents from api.kadec0.xyz, paid per call via x402, $0.01/call, status unknown (last checked 2026-09-13).

Looks up CVE security vulnerabilities from NIST NVD and GitHub Security Advisories, returning CVSS scores, severity, CWEs, and references.

## Facts

- Endpoint: GET https://api.kadec0.xyz/v1/cve
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/cve-vulnerability-lookup-api-f3876369
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_vWkBu0HCQaNnXBbLQ56Hh

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability cve-vulnerability-lookup-api-f3876369
```

Example prompt: Can you look up CVE-2021-44228 (Log4Shell) and give me its CVSS score, severity, and CWEs from both NVD and GitHub advisories?

## When to prefer this

Use this endpoint when you need structured vulnerability data including CVSS scores, severity classifications, and CWE references for a known CVE ID or a keyword-based search. Prefer this over generic web search when you need machine-readable, authoritative vulnerability metadata from NIST NVD and GitHub Security Advisories in a single call.

## Known failure modes

- CVE ID not found in either NVD or GitHub — returns empty result set
- Invalid CVE ID format — returns validation error
- Keyword too broad returns truncated results at maxItems limit
- Source parameter mismatch if advisory only exists in one source
- Rate limiting or upstream NVD/GitHub API unavailability causes 503 or timeout

## How this service works

CVE vulnerability lookup. Returns security vulnerability records by CVE id or keyword from the NIST National Vulnerability Database and GitHub Security Advisories, each with CVSS score, severity, CWE weakness class, affected products, and references, filterable by severity and source. For vulnerability triage and dependency risk checks. Keyless.

## Output

Returns a list of CVE records (up to maxItems) each containing the CVE ID, description, CVSS score, severity level, CWE identifiers, affected products, and reference URLs sourced from NIST NVD and/or GitHub Security Advisories.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET",
      "HEAD",
      "DELETE"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "anyOf": [
      {
       "required": [
        "cve_id"
       ]
      },
      {
       "required": [
        "keyword"
       ]
      }
     ],
     "required": [],
     "properties": {
      "cve_id": {
       "type": "string",
       "description": "exact CVE id, e.g. CVE-2021-44228"
      },
      "source": {
       "enum": [
        "nvd",
        "github",
        "all"
       ],
       "type": "string",
       "default": "all"
      },
      "keyword": {
       "type": "string",
       "description": "free-text search"
      },
      "maxItems": {
       "type": "string",
       "default": "20"
      },
      "severity": {
       "enum": [
        "low",
        "medium",
        "high",
        "critical"
       ],
       "type": "string"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/cve-vulnerability-lookup-api-f3876369/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.kadec0.xyz](https://www.zero.xyz/host/api.kadec0.xyz/llms.txt)