# Kevscope CVE Prioritization Watchlist API

> Kevscope CVE Prioritization Watchlist API is a paid API for AI agents from kevscope-api.cybermaxtools.com, paid per call via x402, $0.003/call, status unknown (last checked 2026-10-11).

Returns a prioritized list of CVEs to patch first, combining KEV, EPSS, CVSS, and SSVC scoring signals in a single API call

## Facts

- Endpoint: GET https://kevscope-api.cybermaxtools.com/x402/api/watchlist?utm_source=zero.xyz
- Price: $0.003/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-11
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/kevscope-cve-prioritization-watchlist-api-cbe9ce48
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_UaW-ZwxzZmdMZRzcjdwN7

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability kevscope-cve-prioritization-watchlist-api-cbe9ce48
```

Example prompt: Show me the top 20 CVEs I should patch first from 2024, but only ones with an EPSS score of at least 0.3 — I want to see the KEV, EPSS, CVSS, and SSVC data all in one go.

## When to prefer this

Choose this endpoint when you need a single-call, multi-signal CVE prioritization answer that combines KEV, EPSS, CVSS, and SSVC data rather than querying each source separately. It is ideal for security teams building automated patch prioritization workflows, generating risk reports, or triaging vulnerability backlogs without manually correlating data from CISA, FIRST, and NVD. Prefer it over raw NVD or EPSS APIs when you want a pre-ranked, actionable watchlist rather than raw vulnerability data.

## Known failure modes

- Invalid year parameter returns an error or empty result set
- minEpss value outside 0-1 range may cause a validation error
- limit parameter exceeding 50 may be capped or rejected
- Payment not processed (x402 protocol failure) results in 402 response before data is returned
- No CVEs matching the filter criteria returns an empty list

## How this service works

Which CVEs to patch first, in one call. CVE priority API + MCP: KEV, EPSS, CVSS and SSVC, 20 CVEs per call Try it free in one click, no sign-up.

## Output

A ranked JSON list of up to 50 CVEs with combined scoring data including KEV (Known Exploited Vulnerabilities) status, EPSS exploit probability score, CVSS severity score, and SSVC classification — giving a composite priority signal to guide patch sequencing decisions.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {
      "year": {
       "type": "string",
       "description": "CVE ID year (e.g. 2026), or all"
      },
      "limit": {
       "type": "integer",
       "default": 25,
       "description": "Rows to return (1-50)"
      },
      "minEpss": {
       "type": "number",
       "default": 0,
       "description": "Only EPSS at or above this probability (0-1)"
      }
     }
    }
   }
  },
  "output": {
   "type": "object",
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {}
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/kevscope-cve-prioritization-watchlist-api-cbe9ce48/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from kevscope-api.cybermaxtools.com](https://www.zero.xyz/host/kevscope-api.cybermaxtools.com/llms.txt)