# Sourcevane Security CVE Intelligence

> Sourcevane Security CVE Intelligence is a paid API for AI agents from sourcevane-security-production.up.railway.app, paid per call via x402, $0.05/call, status unknown (last checked 2026-10-12).

Returns a unified 0-100 priority score for a given CVE by aggregating CVSS severity, EPSS exploit probability, CISA KEV active-exploitation status, and OSV affected package data.

## Facts

- Endpoint: GET https://sourcevane-security-production.up.railway.app/v1/intel/cve/CVE-2021-44228?utm_source=zero.xyz
- Price: $0.05/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-12
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/sourcevane-security-cve-intelligence-55e2b143
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_L7F5BgsPqXy1geWTVSq8B

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability sourcevane-security-cve-intelligence-55e2b143
```

Example prompt: Give me the full vulnerability intelligence on CVE-2021-44228 — I need the combined priority score, whether it's actively exploited in the wild, its EPSS probability, and a patch recommendation so I know how urgently to act.

## When to prefer this

Choose this endpoint when you need a single, actionable priority score for a specific CVE that blends multiple authoritative data sources (NVD severity, real-world exploit probability, active exploitation confirmation, and affected packages) into one number — rather than querying NVD, EPSS, and CISA KEV separately and manually joining the data.

## Known failure modes

- CVE identifier not found in NVD — returns error or empty result
- Malformed CVE ID format causes 400 bad request
- Upstream data sources (NVD, EPSS, CISA KEV, OSV) temporarily unavailable causing degraded or stale data
- Payment not processed via x402 — returns 402 Payment Required
- Rate limiting if called excessively

## How this service works

Pay-per-call vulnerability intelligence for AI agents: CVSS (NVD) + exploit probability (EPSS) + active-exploitation status (CISA KEV) + affected packages (OSV), joined into a single 0-100 priority score, billed per call over x402.

## Output

A JSON object containing the CVE identifier, a 0-100 numeric priority score, a priority band (e.g. CRITICAL), and a patch recommendation (e.g. patch_now), synthesized from CVSS, EPSS exploit probability, CISA KEV active-exploitation flag, and OSV affected package data.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "properties": {
   "type": "string"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "cve": "CVE-2021-44228",
  "priority": {
   "band": "CRITICAL",
   "score": 100,
   "recommendation": "patch_now"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/sourcevane-security-cve-intelligence-55e2b143/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from sourcevane-security-production.up.railway.app](https://www.zero.xyz/host/sourcevane-security-production.up.railway.app/llms.txt)