# NVD CVSS v4 Oracle MCP

> NVD CVSS v4 Oracle MCP is a paid API for AI agents from api.m2mcent.com, paid per call via x402, $0.15/call, status unknown (last checked 2026-09-15).

Calculates and interprets CVSS v4.0 vulnerability severity scores using the NVD (National Vulnerability Database) scoring framework

## Facts

- Endpoint: POST https://api.m2mcent.com/nvd-cvss-v4-oracle-mcp/api/process
- Price: $0.15/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/nvd-cvss-v4-oracle-mcp-8e2f4f9a
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_6tMz6yGeMFyH09J2Ra0S8

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability nvd-cvss-v4-oracle-mcp-8e2f4f9a -d '<json body>'
```

Example prompt: What's the CVSS v4 severity score for CVE-2024-38063? Give me the base score, severity rating, and a breakdown of the vector components.

## When to prefer this

Choose this endpoint when you need programmatic CVSS v4 scoring without manually querying the NVD website, especially within automated vulnerability triage pipelines, security dashboards, or agent workflows that need to classify and prioritize CVEs at scale using the latest CVSS version 4.0 framework.

## Known failure modes

- Invalid or unrecognized CVE ID returns an error or empty result
- Malformed CVSS vector string fails to parse
- CVE not yet in NVD database returns no score
- Ambiguous vulnerability description may produce inaccurate scoring
- Network timeout or upstream NVD API unavailability causes failure

## How this service works

The premier global index of 1,069 monetized MCP nodes across 205 specialized subdomains. Gasless USDC runtime settlements via x402 V2 Spec on Base L2. Save 95% token context.

## Output

Returns a CVSS v4 base score (0.0–10.0), a qualitative severity rating (None, Low, Medium, High, or Critical), and a breakdown of the vector components that contributed to the score, enabling prioritization of vulnerability remediation.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "payload": {
   "type": "string"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "success": true
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/nvd-cvss-v4-oracle-mcp-8e2f4f9a/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.m2mcent.com](https://www.zero.xyz/host/api.m2mcent.com/llms.txt)