# Synthr Cyber Vulnerability Intelligence

> Synthr Cyber Vulnerability Intelligence is a paid API for AI agents from synthr.online, paid per call via x402, $0.005/call, status unknown (last checked 2026-09-15).

Queries real-time CVE/vulnerability data enriched with EPSS exploit probability scores and CISA KEV (Known Exploited Vulnerabilities) status for prioritized security triage

## Facts

- Endpoint: POST https://synthr.online/v1/cyber/vulns
- Price: $0.005/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/synthr-cyber-vulnerability-intelligence-4ad0ced9
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_t5AkAkfjp2-_sDyNWrFfT

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability synthr-cyber-vulnerability-intelligence-4ad0ced9 -d '<json body>'
```

Example prompt: Look up CVE-2024-3094 and tell me its EPSS exploit probability score and whether it's on the CISA Known Exploited Vulnerabilities list — give me the top 5 results.

## When to prefer this

Choose this endpoint when you need real-time, multi-source vulnerability intelligence that combines OSV CVE data with EPSS exploit probability AND CISA KEV status in a single call. Prefer it over generic CVE databases when you need exploit-prioritized triage rather than raw vulnerability listings, or when building autonomous security workflows that need structured, machine-readable threat intelligence without manual lookups.

## Known failure modes

- CVE not found — returns empty results array
- Invalid CVE format — may return error or empty results
- minEpss value out of 0-1 range — may be rejected or ignored
- Upstream OSV/EPSS/KEV data unavailable — stale or partial results returned
- Rate limit or payment failure — 402 payment required error

## How this service works

Agent-native cybersecurity intelligence. Real OSV + EPSS + KEV data. Stack briefs, dep audits, advice, web reconnaissance. Prioritized for autonomous builders and harnesses.

## Output

Returns a timestamped response containing an array of vulnerability records enriched with EPSS exploit probability scores and CISA KEV membership flags, plus a list of data sources consulted (OSV, EPSS, KEV) and a unique query ID for traceability.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "cve": {
   "type": "string"
  },
  "limit": {
   "type": "integer"
  },
  "query": {
   "type": "string"
  },
  "kevOnly": {
   "type": "boolean"
  },
  "minEpss": {
   "type": "number"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "asOf": {
   "type": "string"
  },
  "queryId": {
   "type": "string"
  },
  "results": {
   "type": "array"
  },
  "sources": {
   "type": "array"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/synthr-cyber-vulnerability-intelligence-4ad0ced9/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from synthr.online](https://www.zero.xyz/host/synthr.online/llms.txt)