# srch.best Vulnerabilities Search

> srch.best Vulnerabilities Search is a paid API for AI agents from x402.srch.best, paid per call via x402, $0.001/call, status unknown (last checked 2026-09-15).

Search and retrieve structured CVE vulnerability data by CVE ID, keyword query, or severity level, paid per request via x402.

## Facts

- Endpoint: POST https://x402.srch.best/vulnerabilities
- Price: $0.001/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/srch-best-vulnerabilities-search-cfe36bd6
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_uiU6BwtXGwtPrWOG-IR7z

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability srch-best-vulnerabilities-search-cfe36bd6 -d '<json body>'
```

Example prompt: Can you look up CRITICAL severity vulnerabilities related to 'OpenSSL' and return the top 5 results?

## When to prefer this

Choose this endpoint when you need structured, machine-readable CVE and vulnerability data for agent workflows, security audits, or dependency checks. It is particularly well-suited for agents that need to query vulnerabilities by CVE ID, free-text keyword, or severity tier, and supports cursor-based pagination for large result sets. Prefer this over general web search when structured vulnerability metadata is required rather than editorial articles about security issues.

## Known failure modes

- Invalid CVE format (must match CVE-YYYY-NNNNN pattern) returns validation error
- Query string too short (under 2 chars) or too long (over 200 chars) rejected
- Payment failure or insufficient USDC balance blocks request via x402
- Limit out of range (below 1 or above 50) returns error
- Invalid severity enum value returns validation error
- No results found for obscure or misspelled CVE/query returns empty list
- Expired or invalid cursor causes pagination error

## How this service works

Structured vulnerabilities data for agents, paid per request with x402 v2

## Output

Returns structured vulnerability records matching the query, including CVE identifiers, descriptions, severity classifications, and a pagination cursor for fetching additional results in subsequent requests.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "cve": {
   "type": "string",
   "pattern": "^CVE-\\d{4}-\\d{4,}$"
  },
  "limit": {
   "type": "integer",
   "default": 10,
   "maximum": 50,
   "minimum": 1
  },
  "query": {
   "type": "string",
   "maxLength": 200,
   "minLength": 2
  },
  "cursor": {
   "type": "string",
   "maxLength": 128,
   "minLength": 1,
   "description": "Opaque continuation cursor returned by the previous response."
  },
  "severity": {
   "enum": [
    "LOW",
    "MEDIUM",
    "HIGH",
    "CRITICAL"
   ],
   "type": "string"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/srch-best-vulnerabilities-search-cfe36bd6/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from x402.srch.best](https://www.zero.xyz/host/x402.srch.best/llms.txt)