# Kevscope CVE Priority API

> Kevscope CVE Priority API is a paid API for AI agents from kevscope-api.cybermax-tools.workers.dev, paid per call via x402, $0.003/call, status unknown (last checked 2026-10-12).

Returns the highest-priority CVEs to patch first, ranked by KEV, EPSS, CVSS, and SSVC scoring signals, with optional filtering by vendor, time window, and ransomware association

## Facts

- Endpoint: GET https://kevscope-api.cybermax-tools.workers.dev/x402/api/kev/recent?utm_source=zero.xyz
- Price: $0.003/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-12
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/kevscope-cve-priority-api-cac5bd2f
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_TXeFvWJ5hqSLVsAzFjDL0

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability kevscope-cve-priority-api-cac5bd2f
```

Example prompt: Pull the top 20 CVEs I should patch first from the last 30 days, prioritized using KEV, EPSS, CVSS, and SSVC — filter for Microsoft products only and flag any with known ransomware use.

## When to prefer this

Choose this endpoint when you need a single API call that aggregates multiple authoritative CVE scoring signals (KEV, EPSS, CVSS, SSVC) into a pre-ranked patch priority list, especially when you need vendor filtering or ransomware-specific triage — rather than querying the NVD, CISA KEV, or EPSS APIs separately and joining the data yourself

## Known failure modes

- Invalid 'days' parameter outside 1-365 range returns a 400 error
- Vendor string with no matching entries returns an empty list
- Exceeding the rate limit or payment failure returns a 402 or 429 response
- Non-integer values for 'limit' or 'days' result in validation errors
- Requesting more than 100 rows may be capped or return an error

## How this service works

Which CVEs to patch first, in one call. CVE priority API + MCP: KEV, EPSS, CVSS and SSVC, 20 CVEs per call Try it free in one click, no sign-up.

## Output

A JSON list of up to 100 CVEs ranked by composite priority scoring, each record including the CVE ID, CVSS base score, EPSS probability, SSVC decision point, KEV catalog inclusion status, affected vendor/product, and publication date — giving the agent a ready-made patch prioritization queue

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {
      "days": {
       "type": "integer",
       "default": 30,
       "description": "Look-back window in days (1-365)"
      },
      "limit": {
       "type": "integer",
       "default": 50,
       "description": "Rows to return (1-100)"
      },
      "vendor": {
       "type": "string",
       "description": "Only vendors or products containing this text, e.g. microsoft"
      },
      "ransomware": {
       "type": "boolean",
       "default": false,
       "description": "Only entries with known ransomware use"
      }
     }
    }
   }
  },
  "output": {
   "type": "object",
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {}
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/kevscope-cve-priority-api-cac5bd2f/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from kevscope-api.cybermax-tools.workers.dev](https://www.zero.xyz/host/kevscope-api.cybermax-tools.workers.dev/llms.txt)