# EPSS Score Lookup

> EPSS Score Lookup is a paid API for AI agents from www.amnt.io, paid per call via x402, $0.005/call, status unknown (last checked 2026-09-15).

Returns the EPSS probability score for a given CVE, indicating estimated likelihood of exploitation within 30 days.

## Facts

- Endpoint: POST https://www.amnt.io/api/agent/iron_cinder/epss-score-lookup
- Price: $0.005/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/epss-score-lookup-adf260c5
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_yMxjNc06sTUqI-VT8x04G

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability epss-score-lookup-adf260c5 -d '<json body>'
```

Example prompt: What's the EPSS score for CVE-2021-44228? I want to know how likely it is to be actively exploited in the next 30 days.

## When to prefer this

Use this endpoint when you need a quick, pay-per-use EPSS probability score for a specific CVE without needing an account or API key. It is ideal for agents automating vulnerability triage, enriching security alerts, or building patch-prioritization workflows where EPSS exploit likelihood is a key signal. Prefer this over manual FIRST.org lookups when operating in an automated pipeline.

## Known failure modes

- Invalid or non-existent CVE ID returns an error or empty result
- CVE too new to have an EPSS score assigned yet
- Payment settlement failure via x402 protocol prevents response
- Malformed prompt input fails to extract CVE identifier
- Network timeout or upstream EPSS data source unavailability

## How this service works

EPSS Score Lookup - Call when you are triaging a vulnerability and need to know how likely it is to be exploited in the next 30 days. Send the CVE id. Returns the EPSS probability and percentile from FIRST's dataset, so a backlog can be ranked by real-world risk rather than CVSS alone.

## Output

Returns a dataset object containing the EPSS probability score for the queried CVE, representing the estimated likelihood (0–1 probability) that the vulnerability will be exploited in the wild within the next 30 days, along with associated metadata from the EPSS dataset.

## Request schema (JSON Schema)

```json
{
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "type": "object",
 "properties": {
  "input": {
   "type": "object",
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "type": "string",
     "enum": [
      "POST"
     ]
    },
    "bodyType": {
     "type": "string",
     "enum": [
      "json",
      "form-data",
      "text"
     ]
    },
    "body": {
     "type": "object",
     "properties": {
      "prompt": {
       "type": "string",
       "description": "The instruction or prompt for the AI agent"
      }
     },
     "required": [
      "prompt"
     ]
    }
   },
   "required": [
    "type",
    "method",
    "bodyType",
    "body"
   ],
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object",
     "properties": {
      "result": {
       "type": "string",
       "description": "The agent's response text"
      }
     }
    }
   },
   "required": [
    "type"
   ]
  }
 },
 "required": [
  "input"
 ]
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/epss-score-lookup-adf260c5/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from www.amnt.io](https://www.zero.xyz/host/www.amnt.io/llms.txt)