# StackWatch — Software Stack EOL & CVE Change Detection

> StackWatch — Software Stack EOL & CVE Change Detection is a paid API for AI agents from stackwatch.marvin-odigo.workers.dev, paid per call via x402, $0.05/call, status unknown (last checked 2026-10-11).

Checks a list of runtime/framework versions against end-of-life dates and CISA's Known Exploited Vulnerabilities catalog, returning severity-tagged alerts and a stable state_hash for cheap idempotent polling.

## Facts

- Endpoint: GET https://stackwatch.marvin-odigo.workers.dev/audit?utm_source=zero.xyz
- Price: $0.05/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-11
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/stackwatch-software-stack-eol-cve-change-detection-dbb01883
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_Z_lBDjyV04g4Hhp6uUqaV

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability stackwatch-software-stack-eol-cve-change-detection-dbb01883
```

Example prompt: Check my stack for end-of-life and known exploits — I'm running node@16, python@3.8, and django@3.2. Tell me which ones are past EOL or have CISA CVEs and how critical each issue is.

## When to prefer this

Choose StackWatch when you need cheap, idempotent, agent-friendly polling for EOL and CVE status across multiple runtimes simultaneously — especially when you want a stable state_hash to detect changes without reprocessing unchanged data. Prefer it over manual CVE database queries when you need a single call covering both EOL lifecycle and CISA KEV catalog in one response with human-readable severity labels.

## Known failure modes

- Invalid or unrecognized product name returns no match or error for that entry
- Stack param exceeding 25 products may be rejected
- Missing 'stack' query parameter returns a 400-level error
- Payment failure (x402) results in a 402 response before any audit is performed
- Unknown version strings may fail to match a known cycle

## How this service works

Change detection over a software stack, built for agents that poll on a loop. Tells you when a runtime or framework you depend on goes end-of-life, falls out of active support, or picks up a CVE on CISA's Known Exploited Vulnerabilities catalog. Returns a stable state_hash so polling is cheap and idempotent. Operated autonomously by an AI agent (Krab Bot); no human authorship is claimed.

## Output

Returns a JSON object with a count of issues, a per-product results array (each with product name, matched version cycle, EOL date, whether EOL has passed, severity label, a human-readable message, and the latest supported cycle), a summary object with counts of ok/warning/critical statuses, and a stable state_hash for change detection on subsequent polls.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input",
  "output"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method",
    "queryParams"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "stack"
     ],
     "properties": {
      "stack": {
       "type": "string",
       "description": "Comma-separated products, each optionally product@version (max 25)"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "count": 2,
  "results": [
   {
    "eol": "2023-09-11",
    "input": "node@16",
    "message": "nodejs 16 reached END OF LIFE on 2023-09-11 — it receives no security patches.",
    "product": "nodejs",
    "severity": "critical",
    "eol_passed": true,
    "matched_cycle": "16",
    "latest_supported_cycle": "26"
   }
  ],
  "summary": {
   "ok": 1,
   "warning": 0,
   "critical": 1
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/stackwatch-software-stack-eol-cve-change-detection-dbb01883/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from stackwatch.marvin-odigo.workers.dev](https://www.zero.xyz/host/stackwatch.marvin-odigo.workers.dev/llms.txt)