# Macaroon Network Cyber Vulnerability Risk Search

> Macaroon Network Cyber Vulnerability Risk Search is a paid API for AI agents from api.macaroonnetwork.com, paid per call via x402, $0.003/call, status unknown (last checked 2026-09-14).

Search CVEs, CISA Known Exploited Vulnerabilities status, and GitHub Security Advisory package/ecosystem metadata in a single API call, combining NVD CVSS scoring, CISA KEV catalog, and GitHub-reviewed advisories.

## Facts

- Endpoint: POST https://api.macaroonnetwork.com/execute/cyber-vulnerability-risk-search-v1
- Price: $0.003/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/macaroon-network-cyber-vulnerability-risk-search-eb1926c8
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_Sr3fxrJafOvT1dhlVb5_c

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability macaroon-network-cyber-vulnerability-risk-search-eb1926c8 -d '<json body>'
```

Example prompt: Can you look up CVE-2021-44228 (Log4Shell) and tell me if it's in the CISA Known Exploited Vulnerabilities catalog, what its CVSS score is, and whether there are any GitHub Security Advisory records for affected Java packages?

## When to prefer this

Choose this endpoint when you need a single-call cross-source vulnerability lookup that combines NVD CVSS scores, CISA active-exploitation status, and GitHub-reviewed package advisory metadata — especially useful for software supply chain security checks, dependency auditing, or CVE triage workflows where you don't want to call three separate APIs and reconcile licenses yourself. Prefer alternatives if you need real-time GitHub Security Advisories API data (this uses a local checkout), or if you need bulk/streaming vulnerability feeds rather than targeted search queries.

## Known failure modes

- CVE not found in NVD — returns empty or partial results if the CVE ID is invalid or too recently published
- Package/ecosystem not indexed in GitHub advisory database — returns no GitHub advisory records
- CISA KEV catalog may lag real-world exploitation discoveries by days to weeks
- Malformed or missing query body — returns 400-level error
- Temporary upstream NVD API rate limit or downtime — may return 503 or degraded partial response
- GitHub advisory data sourced from a local git checkout, so may be slightly behind the live repository

## How this service works

Search CVEs, CISA Known Exploited Vulnerabilities status, and GitHub Security Advisory package/ecosystem metadata in one call. Composes three separately licence-cleared sources: the NVD CVE API (CVSS scoring, descriptions), CVE Program data from cve.org (delivered via NVD), the CISA KEV catalog (CC0 1.0), and the GitHub Security Advisory Database's github-reviewed set (CC-BY-4.0), ingested only via a local git checkout of the public repository -- never the live GitHub Security Advisories API. Do

## Output

Returns structured vulnerability data combining: CVE identifiers with CVSS v3 scores and descriptions (from NVD), CISA KEV catalog status indicating whether each CVE is known to be actively exploited, and GitHub Security Advisory records with affected package names and ecosystem metadata (npm, PyPI, Maven, etc.) for the github-reviewed advisory set.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method",
    "bodyType",
    "body"
   ],
   "properties": {
    "body": {
     "type": "object"
    },
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "POST",
      "PUT",
      "PATCH"
     ],
     "type": "string"
    },
    "bodyType": {
     "enum": [
      "json",
      "form-data",
      "text"
     ],
     "type": "string"
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/macaroon-network-cyber-vulnerability-risk-search-eb1926c8/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.macaroonnetwork.com](https://www.zero.xyz/host/api.macaroonnetwork.com/llms.txt)