# DexL Agents CVE Lookup

> DexL Agents CVE Lookup is a paid API for AI agents from agents.dexl.io, paid per call via x402, $0.01/call, status unknown (last checked 2026-09-13).

Look up CVE vulnerability records by exact CVE ID or keyword search, returning structured vulnerability details per call.

## Facts

- Endpoint: POST https://agents.dexl.io/v1/tools/cve-lookup
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/dexl-agents-cve-lookup-c7b50790
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_bikw_ArY-iQS-J46qKOXf

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability dexl-agents-cve-lookup-c7b50790 -d '<json body>'
```

Example prompt: Look up the CVE details for CVE-2021-44228 — the Log4Shell vulnerability — and give me a summary of its severity and affected components.

## When to prefer this

Choose this endpoint when an AI agent needs programmatic, pay-per-call access to CVE vulnerability data without managing API keys or accounts. Ideal for security automation pipelines, incident response agents, or vulnerability triage workflows that need to resolve CVE IDs or search by keyword on demand. Prefer over NIST NVD or Shodan integrations when operating in an x402 machine-to-machine payment context or when no persistent credentials are desired.

## Known failure modes

- No matching CVE found for the given ID returns an empty output object
- Keyword search with no results returns empty output
- Invalid CVE ID format may return no results or an error
- Exceeding the maximum limit of 20 results causes a validation error
- Payment failure (x402) results in a 402 response before any data is returned

## How this service works

Look up a CVE by id, or search the NVD catalogue by keyword. Returns the CVSS base score and vector with its version (v4, v3.1, v3.0 or v2 - whichever NVD published), severity, CWE classification, publication and last-modified dates, vulnerability status and references. Straight from the NIST National Vulnerability Database.

## Output

Returns a JSON object with CVE records matching the query — including CVE identifier, description, severity information, affected products, and publication metadata. The response also indicates whether the result was served from cache and the number of billing units consumed.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "limit": {
   "type": "integer",
   "default": 5,
   "maximum": 20,
   "minimum": 1,
   "description": "Only used with keyword."
  },
  "cve_id": {
   "type": "string",
   "description": "Exact CVE id, e.g. \"CVE-2021-44228\""
  },
  "keyword": {
   "type": "string",
   "description": "Free-text search, e.g. \"log4j\" or \"openssl buffer overflow\""
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "units": 1,
  "cached": false,
  "output": {}
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/dexl-agents-cve-lookup-c7b50790/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from agents.dexl.io](https://www.zero.xyz/host/agents.dexl.io/llms.txt)