# EPSS Exploit-Prediction Score Lookup

> EPSS Exploit-Prediction Score Lookup is a paid API for AI agents from clonecho.builda.company, paid per call via x402, $0.02/call, status unknown (last checked 2026-09-15).

Returns the FIRST.org EPSS exploit-prediction probability score and percentile for a given CVE identifier

## Facts

- Endpoint: POST https://clonecho.builda.company/x402/s/epss-score
- Price: $0.02/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/epss-exploit-prediction-score-lookup-f4e9538f
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_VlmfdSFudg3sbwIj29Y3C

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability epss-exploit-prediction-score-lookup-f4e9538f -d '<json body>'
```

Example prompt: What's the EPSS exploit-prediction score and percentile for CVE-2023-44487 — I want to know how likely it is to be exploited in the wild?

## When to prefer this

Use this endpoint when you need to quickly assess the real-world exploit likelihood of a specific CVE using FIRST.org's EPSS model, especially for prioritizing vulnerability remediation. Prefer this over CVSS-only scoring when you want a probability-based exploit prediction rather than a severity rating, and when you need a percentile comparison against all known CVEs.

## Known failure modes

- CVE ID not found or not yet scored by EPSS — returns empty or error JSON
- Invalid CVE format provided — may return an error or empty result
- Payment failure — 402 response if USDC payment is not provided
- Rate limiting or network timeout if upstream FIRST.org API is unreachable

## How this service works

FIRST.org EPSS exploit-prediction score and percentile for CVE {q}. Query: ?q= Returns JSON.

## Output

A JSON object containing the EPSS probability score (a value between 0 and 1 representing the likelihood of exploitation within 30 days) and the percentile rank (showing how this CVE compares to all scored vulnerabilities) for the queried CVE, sourced from FIRST.org.

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/epss-exploit-prediction-score-lookup-f4e9538f/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from clonecho.builda.company](https://www.zero.xyz/host/clonecho.builda.company/llms.txt)