# Datakoot CVE Lookup

> Datakoot CVE Lookup is a paid API for AI agents from x402.datakoot.com, paid per call via x402, $0.002/call, status unknown (last checked 2026-10-11).

Looks up detailed vulnerability data for a given CVE identifier, returning CVSS score, severity, CWE, status, description, references, and timestamps.

## Facts

- Endpoint: POST https://x402.datakoot.com/api/cve_lookup?utm_source=zero.xyz
- Price: $0.002/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-11
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/datakoot-cve-lookup-9a1593fe
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_xsXHeDT_XCbZ6z7foAcl3

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability datakoot-cve-lookup-9a1593fe -d '<json body>'
```

Example prompt: Can you look up CVE-2024-3094 and tell me the CVSS score, severity, and a summary of what the vulnerability is about?

## When to prefer this

Use this endpoint when an agent needs structured, authoritative vulnerability data for a specific CVE — including CVSS scoring, CWE classification, and official references — without building NVD API integration. Prefer it over generic web search when structured, machine-readable fields are required. The per-call micropayment model via x402 on Base makes it suitable for pay-as-you-go agent pipelines without subscription overhead.

## Known failure modes

- CVE ID not found in the database — returns an error or empty result
- Malformed CVE identifier format — rejected with a validation error
- Network or upstream NVD API outage — service unavailable response
- Rate limiting or payment failure — 402 response with no charge if payment not settled

## How this service works

48 live public-data tools (security, packages, SEC filings, economy, FX, weather, domains, Federal Register, Base) for AI agents. $0.002 USDC per call on Base via x402, charged only on success. The same tools are free for 100 calls/day via MCP at <server>.datakoot.com/mcp.

## Output

A JSON object containing the canonical CVE record: the CVE ID, list of CWE identifiers, CVSS details (numeric score, vector string, version, and severity label such as CRITICAL/HIGH/MEDIUM/LOW), vulnerability status (e.g. Modified, Analyzed), published and last-modified timestamps, a plain-text description of the vulnerability, and a list of reference URLs from authoritative sources.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "cve_id": {
   "type": "string",
   "description": "CVE identifier, e.g. CVE-2021-44228 (case-insensitive; a bare 2021-44228 also works)."
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "id": "CVE-2024-3094",
  "cwe": [
   "CWE-506"
  ],
  "cvss": {
   "score": 10,
   "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
   "version": "3.1",
   "severity": "CRITICAL"
  },
  "status": "Modified",
  "published": "2024-03-29T17:15:21.150",
  "references": [
   "https://access.redhat.com/security/cve/CVE-2024-3094",
   "https://bugzilla.redhat.com/show_bug.cgi?id=2272210"
  ],
  "description": "Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. \r\nThrough a series of complex",
  "last_modified": "2026-06-17T07:43:17.830"
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/datakoot-cve-lookup-9a1593fe/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from x402.datakoot.com](https://www.zero.xyz/host/x402.datakoot.com/llms.txt)