# SignalDesk AI OSV Record Lookup

> SignalDesk AI OSV Record Lookup is a paid API for AI agents from x402-agent.kariguetoazul.workers.dev, paid per call via x402, $0.003/call, status unknown (last checked 2026-10-13).

Fetches a structured OSV vulnerability record by ID, returning full advisory details including affected packages, severity, and references.

## Facts

- Endpoint: GET https://x402-agent.kariguetoazul.workers.dev/api/security/osv-record?utm_source=zero.xyz
- Price: $0.003/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/signaldesk-ai-osv-record-lookup-2b7ee1b2
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_qiI7aFxyYXq36KEfwzO4u

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability signaldesk-ai-osv-record-lookup-2b7ee1b2
```

Example prompt: Can you pull up the full OSV vulnerability record for GHSA-vh95-rmgr-6w4m and tell me which package versions are affected and whether there's a fix?

## When to prefer this

Use this endpoint when you need a fully structured, evidence-backed OSV vulnerability record by a known ID (GHSA-*, CVE-*, etc.) including affected version ranges and references. Prefer this over raw OSV API calls when you need a pre-transformed, normalized JSON response served through a paid x402-authenticated gateway with caching (expires_at metadata included). Best for agents doing automated dependency auditing, security enrichment pipelines, or advisory lookups where a specific vulnerability ID is already known.

## Known failure modes

- Invalid or malformed OSV ID (fails schema pattern validation)
- ID not found in OSV database — returns empty or error response
- Network or upstream OSV API unavailability causing timeout
- Payment failure via x402 protocol blocking the request
- ID too short (< 3 chars) or too long (> 100 chars) rejected by schema

## How this service works

Evidence-backed autonomous AI jobs and paid data tools. Queue/D1/cron run outside the chat; free quotas and bounded execution apply.

## Output

Returns a structured JSON object containing the OSV record: vulnerability ID, aliases (e.g. CVE IDs), a plain-language summary, list of affected packages with ecosystem and semver ranges (introduced/fixed), published and modified timestamps, source metadata including fetch time and original OSV URL, and a list of external references (advisories, commits, package pages).

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET",
      "HEAD",
      "DELETE"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "id"
     ],
     "properties": {
      "id": {
       "type": "string",
       "pattern": "^[A-Za-z0-9._-]+$",
       "maxLength": 100,
       "minLength": 3,
       "description": "OSV record ID."
      }
     },
     "additionalProperties": false
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "id": "GHSA-vh95-rmgr-6w4m",
  "source": {
   "provider": "OSV",
   "expires_at": "2026-10-02T10:44:47.968Z",
   "fetched_at": "2026-10-02T09:44:47.967Z",
   "source_url": "https://api.osv.dev/v1/vulns/GHSA-vh95-rmgr-6w4m",
   "transformed": true
  },
  "aliases": [
   "CVE-2020-7598"
  ],
  "summary": "Prototype Pollution in minimist",
  "affected": [
   {
    "ranges": [
     {
      "type": "SEMVER",
      "events": [
       {
        "introduced": "0"
       },
       {
        "fixed": "0.2.1"
       }
      ]
     }
    ],
    "package": {
     "name": "minimist",
     "purl": "pkg:npm/minimist",
     "ecosystem": "npm"
    },
    "versions_count": 0
   },
   {
    "ranges": [
     {
      "type": "SEMVER",
      "events": [
       {
        "introduced": "1.0.0"
       },
       {
        "fixed": "1.2.3"
       }
      ]
     }
    ],
    "package": {
     "name": "minimist",
     "purl": "pkg:npm/minimist",
     "ecosystem": "npm"
    },
    "versions_count": 0
   }
  ],
  "modified": "2026-03-13T22:11:31.390433Z",
  "published": "2020-04-03T21:48:32Z",
  "references": [
   {
    "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-7598",
    "type": "ADVISORY"
   },
   {
    "url": "https://github.com/minimistjs/minimist/commit/10bd4cdf49d9686d48214be9d579a9cdfda37c68",
    "type": "WEB"
   },
   {
    "url": "https://github.com/minimistjs/minimist/commit/38a4d1caead72ef99e824bb420a2528eec03d9ab",
    "type": "WEB"
   },
   {
    "url": "https://github.com/minimistjs/minimist/commit/4cf1354839cb972e38496d35e12f806eea92c11f#diff-a1e0ee62c91705696ddb71aa30ad4f95",
    "type": "WEB"
   },
   {
    "url": "https://github.com/minimistjs/minimist/commit/63e7ed05aa4b1889ec2f3b196426db4500cbda94",
    "type": "WEB"
   },
   {
    "url": "https://github.com/substack/minimist",
    "type": "PACKAGE"
   },
   {
    "url": "https://snyk.io/vuln/SNYK-JS-MINIMIST-559764",
    "type": "WEB"
   },
   {
    "url": "https://www.npmjs.com/advisories/1179",
    "type": "WEB"
   },
   {
    "url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00024.html",
    "type": "WEB"
   }
  ]
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/signaldesk-ai-osv-record-lookup-2b7ee1b2/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from x402-agent.kariguetoazul.workers.dev](https://www.zero.xyz/host/x402-agent.kariguetoazul.workers.dev/llms.txt)