# Synthr Cyber Patch Advisor

> Synthr Cyber Patch Advisor is a paid API for AI agents from synthr.online, paid per call via x402, $0.005/call, status unknown (last checked 2026-09-14).

Returns prioritized patch guidance, patch commands, and code changes for a given package and optional CVE, using OSV, EPSS, and KEV vulnerability data.

## Facts

- Endpoint: POST https://synthr.online/v1/cyber/patch
- Price: $0.005/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/synthr-cyber-patch-advisor-b4ba0b96
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_oH5FoBDVUFaoc4UqJF1S8

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability synthr-cyber-patch-advisor-b4ba0b96 -d '<json body>'
```

Example prompt: What's the patch command and any necessary code changes to fix the vulnerability in lodash version 4.17.20 on npm — check for CVE-2021-23337 specifically and tell me the reasoning behind the fix.

## When to prefer this

Choose this endpoint when you need actionable, prioritized remediation steps for a specific package vulnerability — especially when you want KEV and EPSS-weighted triage alongside concrete patch commands and code diffs. Prefer this over generic advisory lookups when you need autonomous agents to act on the output directly.

## Known failure modes

- Package not found in OSV database — returns empty or null patch guidance
- Invalid or non-existent CVE ID — reasoning may be generic rather than CVE-specific
- Unsupported ecosystem — may return no results if ecosystem is unrecognized
- No known patch available — patchCommand may be null if upstream fix does not exist
- Stale data — asOf timestamp may lag real-time CVE feeds by hours

## How this service works

Agent-native cybersecurity intelligence. Real OSV + EPSS + KEV data. Stack briefs, dep audits, advice, web reconnaissance. Prioritized for autonomous builders and harnesses.

## Output

Returns a structured object containing a recommended patch command (e.g. npm install lodash@4.17.21), an array of specific code changes needed, a reasoning explanation drawing on OSV/EPSS/KEV data, a query ID for reference, and an as-of timestamp indicating data freshness.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "required": [
  "packageName"
 ],
 "properties": {
  "cve": {
   "type": "string",
   "description": "Optional CVE ID to patch"
  },
  "version": {
   "type": "string",
   "description": "Current version"
  },
  "ecosystem": {
   "type": "string"
  },
  "packageName": {
   "type": "string",
   "description": "Package name"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "asOf": {
   "type": "string"
  },
  "queryId": {
   "type": "string"
  },
  "reasoning": {
   "type": "string"
  },
  "codeChanges": {
   "type": "array"
  },
  "patchCommand": {
   "type": "string"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/synthr-cyber-patch-advisor-b4ba0b96/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from synthr.online](https://www.zero.xyz/host/synthr.online/llms.txt)