# NVD CVE Lookup (x402-endpoints)

> NVD CVE Lookup (x402-endpoints) is a paid API for AI agents from x402-endpoints.onrender.com, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-12).

Looks up security vulnerabilities by exact CVE ID or keyword/product name against the official NIST National Vulnerability Database, returning severity, weaknesses, and references.

## Facts

- Endpoint: GET https://x402-endpoints.onrender.com/cve/lookup?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-12
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/nvd-cve-lookup-x402-endpoints-71b396d3
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_9AmpQeotvH7Z5LqwLgnmE

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability nvd-cve-lookup-x402-endpoints-71b396d3
```

Example prompt: Can you look up CVE-2021-44228 in the NVD database and tell me the CVSS severity score, what CWE weaknesses it has, and any official references?

## When to prefer this

Use this endpoint when you need authoritative, official vulnerability data from NIST NVD — the gold standard for CVE information. Prefer this over third-party vuln databases when you need CVSS scores, CWE classifications, and canonical references. Best for security audits, patch prioritization, compliance checks, or enriching security alerts with official severity data.

## Known failure modes

- CVE ID not found in NVD — returns empty or 404-equivalent response
- Invalid CVE ID format — may return error or no results
- Keyword too broad returning no useful results — try more specific term
- NVD upstream API unavailable — service may time out
- Limit parameter out of range (must be 1-20) — validation error

## How this service works

Security vulnerability lookup (CVE) against the official NVD (NIST) database — by exact CVE id or by keyword/product. Returns description, CVSS severity, CWE weaknesses and references. Worldwide.

## Output

Returns structured vulnerability data from NVD including: the CVE description, CVSS severity score and vector, associated CWE weakness identifiers, and a list of official references. For keyword searches, returns up to the requested number of matching CVE records.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET",
      "HEAD",
      "DELETE"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [],
     "properties": {
      "limit": {
       "type": "integer",
       "description": "Max results for keyword search [1-20], e.g. 10"
      },
      "cve_id": {
       "type": "string",
       "description": "Exact CVE id, e.g. 'CVE-2021-44228'"
      },
      "keyword": {
       "type": "string",
       "description": "Keyword / product search, e.g. 'log4j'"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "cves": [
   {
    "id": "CVE-2021-44228",
    "cvss": {
     "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
     "version": "3.1",
     "base_score": 10,
     "base_severity": "CRITICAL"
    },
    "status": "Analyzed",
    "published": "2021-12-10T10:15:09.143",
    "references": [
     "https://logging.apache.org/log4j/2.x/security.html"
    ],
    "weaknesses": [
     "CWE-502",
     "CWE-917"
    ],
    "description": "Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints...",
    "last_modified": "2026-06-17T04:12:05.460"
   }
  ],
  "count": 1,
  "query": {
   "cve_id": "CVE-2021-44228",
   "keyword": null
  },
  "cached": false,
  "source": "NVD — NIST National Vulnerability Database v2.0 (services.nvd.nist.gov)",
  "timestamp": "2026-06-24T15:20:00Z",
  "total_results": 1
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/nvd-cve-lookup-x402-endpoints-71b396d3/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from x402-endpoints.onrender.com](https://www.zero.xyz/host/x402-endpoints.onrender.com/llms.txt)