# OIX CVEWatch Health — Healthcare IT Vulnerability Intelligence

> OIX CVEWatch Health — Healthcare IT Vulnerability Intelligence is a paid API for AI agents from oix-autonomous-economy.fly.dev, paid per call via x402, $0.1/call, status down (last checked 2026-09-03).

Returns scored CVE vulnerability observations and evidence for Healthcare IT software, backed by NVD source data with cryptographic proof of report integrity.

## Facts

- Endpoint: GET https://oix-autonomous-economy.fly.dev/api/x402/portfolio/cvewatch-health
- Price: $0.1/call
- Payment: x402
- Status: down
- Last checked: 2026-09-03
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/oix-cvewatch-health-healthcare-it-vulnerability-intelligence-006d5218
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_hL16xipUuH-Vl9s9sb9Hu

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability oix-cvewatch-health-healthcare-it-vulnerability-intelligence-006d5218
```

Example prompt: Pull me a CVEWatch Health report for healthcare IT — show up to 25 observations with a minimum evidence score of 70, and filter for anything related to 'EHR'.

## When to prefer this

Choose this endpoint when you need scored, source-backed CVE observations specifically for the Healthcare IT domain with cryptographic proof of data integrity. Prefer it over generic CVE databases when you need NVD-grounded evidence scores, machine-verifiable report digests for compliance purposes, and x402 micropayment-gated access without subscription overhead. Best for healthcare software operators or security teams needing a lightweight, pay-per-query vulnerability intelligence signal.

## Known failure modes

- Payment not provided or insufficient — x402 payment required before data is returned
- minScore filter too high — may return zero observations if no CVEs meet the threshold
- Search term 'q' too broad or misspelled — may return irrelevant or empty observation set
- NVD upstream unavailable — source-backed observations may be stale or incomplete
- limit parameter out of range (must be 1–25) — returns validation error

## How this service works

Package any earning logic as an autonomous asset. OIX provides identity, runtime, capital policy, ownership, proof, settlement, and exchange infrastructure.

## Output

Returns a JSON object containing: the asset name and market (Healthcare IT), a product offer description and x402/Base mainnet settlement details, a decision block with buyer context and up to 25 scored CVE observations each with URL, title, evidence object, and OIX evidence score, total monitored record count, and cryptographic sha256 digests of the report and source data for tamper verification. Protocol is oix.machine-report/v1.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET",
      "HEAD",
      "DELETE"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {
      "q": {
       "type": "string",
       "maxLength": 120,
       "description": "Optional term matched against the current source-backed observations."
      },
      "limit": {
       "type": "integer",
       "default": 25,
       "maximum": 25,
       "minimum": 1,
       "description": "Maximum observations returned."
      },
      "minScore": {
       "type": "integer",
       "default": 0,
       "maximum": 100,
       "minimum": 0,
       "description": "Minimum OIX evidence score."
      }
     },
     "additionalProperties": false
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "asset": {
   "name": "CVEWatch Health",
   "slug": "cvewatch-health",
   "market": "Healthcare IT"
  },
  "proof": {
   "reportDigest": "sha256:…",
   "sourceDigest": "sha256:…"
  },
  "product": {
   "offer": "Stack-specific vulnerability decision report",
   "price": "0.1 USDC",
   "settlement": "x402 · Base mainnet"
  },
  "decision": {
   "buyer": "Healthcare software operators",
   "observations": [
    {
     "url": "https://nvd.nist.gov/developers/vulnerabilities",
     "score": 90,
     "title": "Primary-source market signal",
     "evidence": {}
    }
   ],
   "monitoredRecords": 40,
   "returnedObservations": 25
  },
  "protocol": "oix.machine-report/v1"
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/oix-cvewatch-health-healthcare-it-vulnerability-intelligence-006d5218/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from oix-autonomous-economy.fly.dev](https://www.zero.xyz/host/oix-autonomous-economy.fly.dev/llms.txt)