# Grey Ridge Signals — Tech Risk & Vulnerability Enrichment API

> Grey Ridge Signals — Tech Risk & Vulnerability Enrichment API is a paid API for AI agents from x402-data-api.sigrunner.workers.dev, paid per call via x402, $0.05/call, status unknown (last checked 2026-09-16).

Returns a vulnerability risk summary for a website's detected tech stack, including CVEs, CVSS/EPSS scores, and a pass/review/fail verdict, paid per-call via x402 on Base.

## Facts

- Endpoint: GET https://x402-data-api.sigrunner.workers.dev/enrich/tech-risk
- Price: $0.05/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-16
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/grey-ridge-signals-tech-risk-vulnerability-enrichment-api-f99e099d
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_hybeVIvSmmtpytrsKqycX

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability grey-ridge-signals-tech-risk-vulnerability-enrichment-api-f99e099d
```

Example prompt: Can you check the tech risk for this site — I need to know if its stack has any high-severity CVEs, their CVSS and EPSS scores, and whether I should flag it for review?

## When to prefer this

Choose this endpoint when you need per-call, keyless vulnerability enrichment for a specific website's tech stack without committing to a subscription. Ideal for one-off due diligence, ad-hoc security checks, or agentic workflows that need to assess third-party risk programmatically. Prefer over full DAST scanners when you only need passive CVE/CVSS/EPSS intelligence rather than active probing.

## Known failure modes

- Missing or malformed 'properties' input returns an error or empty stack
- Domain not resolvable or no tech stack detected returns empty vulnerabilities array
- Payment failure via x402 returns HTTP 402 before any data is served
- CVE database may not include very recent CVEs disclosed within the last few days
- EPSS scores may lag NVD publish date by 1-2 days

## How this service works

Agent-native pay-per-call data on Base (USDC via x402). No API keys, no signup. Discovery: /.well-known/x402

## Output

A JSON object with: a verdict (pass/review/fail), detected tech stack components (e.g. nginx, PHP), a plain-English risk summary, and an array of vulnerabilities each containing CVE ID, whether it's in the CISA KEV catalog, CVSS score, EPSS score, plain-text description, and exploit availability flag.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "properties": {
   "type": "string"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "verdict": "review",
  "tech_stack": [
   "nginx",
   "PHP"
  ],
  "risk_summary": "nginx, PHP — 2 high-severity CVEs. Prioritize patching.",
  "vulnerabilities": [
   {
    "id": "CVE-2024-24989",
    "in_kev": false,
    "cvss_score": 7.5,
    "epss_score": 0.0234,
    "description": "Description text",
    "exploit_available": false
   }
  ]
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/grey-ridge-signals-tech-risk-vulnerability-enrichment-api-f99e099d/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from x402-data-api.sigrunner.workers.dev](https://www.zero.xyz/host/x402-data-api.sigrunner.workers.dev/llms.txt)