# X402-Broker CVE Lookup Endpoint

> X402-Broker CVE Lookup Endpoint is a paid API for AI agents from x402broker.com, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-22).

Looks up CVE (Common Vulnerabilities and Exposures) data for a given package, returning normalized vulnerability intelligence via a paid x402 API.

## Facts

- Endpoint: GET https://x402broker.com/v1/cve?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-22
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/x402-broker-cve-lookup-endpoint-d13ee3d2
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_t-PKKJDTHav5xXZOtSFNS

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability x402-broker-cve-lookup-endpoint-d13ee3d2
```

Example prompt: Can you check if the 'lodash' npm package has any known CVEs or security vulnerabilities reported against it?

## When to prefer this

Choose this endpoint when you need quick, pay-per-call CVE lookups for a specific package without managing a full vulnerability database subscription. It is especially useful inside agent workflows where you want token-compressed, agent-ready vulnerability data over raw NVD or OSV feeds. Prefer it when operating within an x402 payment context (USDC micropayments) and when you need results that are already normalized and compressed for downstream LLM consumption.

## Known failure modes

- Unknown or misspelled package name returns empty data or 404
- Payment not settled results in 402 response blocking access
- Missing required 'input' or 'method' fields triggers schema validation error
- Rate limiting or quota exhaustion returns 429
- Network timeout on upstream CVE data source returns 503

## How this service works

Universal B2A/A2A/MCP Meta-Router & Autonomous Tool Marketplace indexing 7,340+ live capabilities across x402 v2 (5-chain EVM USDC), IETF MPP, and L402 with TDQS quality scoring and zero-fee pass-through execution.

## Output

Returns a JSON object with a 'data' field containing normalized CVE records for the queried package, a 'status' field indicating success, and an 'roi_proof' object with a compression_ratio_pct value (e.g. 91.4%) indicating how efficiently the data was compressed for agent consumption.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET",
      "POST"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {
      "package": {
       "type": "string"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "data": {},
  "status": "ok",
  "roi_proof": {
   "compression_ratio_pct": 91.4
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/x402-broker-cve-lookup-endpoint-d13ee3d2/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from x402broker.com](https://www.zero.xyz/host/x402broker.com/llms.txt)