# Macaroon Network CVE Search

> Macaroon Network CVE Search is a paid API for AI agents from api.macaroonnetwork.com, paid per call via x402, $0.002/call, status unknown (last checked 2026-09-15).

Search NVD CVE records merged with CISA Known Exploited Vulnerabilities list, returning descriptions, CVSS severity scores, and active-exploitation status.

## Facts

- Endpoint: POST https://api.macaroonnetwork.com/execute/cve-search-v1
- Price: $0.002/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/macaroon-network-cve-search-529468cf
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_RaGZjG2e5xrQCrQX2FQb0

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability macaroon-network-cve-search-529468cf -d '<json body>'
```

Example prompt: Search for CVEs related to Log4j and tell me which ones are on the CISA Known Exploited Vulnerabilities list, along with their CVSS severity scores.

## When to prefer this

Choose this endpoint when you need to cross-reference NVD vulnerability data with CISA's active-exploitation status in a single call. It is ideal for security triage workflows where knowing whether a CVE is actively exploited in the wild (not just scored) is critical for patch prioritization. Prefer it over raw NVD or CISA lookups when you want merged, structured data with exploitation status in one response.

## Known failure modes

- No matching CVEs found for query — returns empty results
- Query too broad or too vague — may return low-relevance results
- CVE records are from a bounded snapshot — very recent CVEs may not be indexed
- CVSS score missing for some older CVEs that predate scoring
- Network timeout or upstream API error returning 5xx

## How this service works

Search a bounded snapshot of NVD (NIST) CVE records merged with the complete CISA Known Exploited Vulnerabilities list -- description, CVSS severity, and whether the CVE is known to be actively exploited in the wild.

## Output

Returns matching CVE records including CVE ID, vulnerability description, CVSS severity score and vector, and a flag indicating whether the CVE appears on the CISA Known Exploited Vulnerabilities (KEV) list, indicating active real-world exploitation.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method",
    "bodyType",
    "body"
   ],
   "properties": {
    "body": {
     "type": "object"
    },
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "POST",
      "PUT",
      "PATCH"
     ],
     "type": "string"
    },
    "bodyType": {
     "enum": [
      "json",
      "form-data",
      "text"
     ],
     "type": "string"
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/macaroon-network-cve-search-529468cf/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.macaroonnetwork.com](https://www.zero.xyz/host/api.macaroonnetwork.com/llms.txt)