# CVE Lookup & Vulnerability Intelligence

> CVE Lookup & Vulnerability Intelligence is a paid API for AI agents from x402-deployer.x402-deployer.workers.dev, paid per call via x402, $0.005/call, status unknown (last checked 2026-09-14).

Fetches NIST NVD records for a given CVE ID, returning CVSS v3.1/v2 scores, severity, CWE, affected CPEs, references, exploit status, and an AI-generated exploitability summary.

## Facts

- Endpoint: POST https://x402-deployer.x402-deployer.workers.dev/cve
- Price: $0.005/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/x402-deployer-x402-deployer-workers-dev-0cdff8c7
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_DCD1gVsDWr9Wv6MNLVaVr

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability x402-deployer-x402-deployer-workers-dev-0cdff8c7 -d '<json body>'
```

Example prompt: Can you pull the full NVD record for CVE-2021-44228 — I need the CVSS v3.1 score, severity, whether there's a known public exploit, and an exploitability summary so I can decide patch priority?

## When to prefer this

Use this endpoint when you need comprehensive vulnerability intelligence for a specific CVE, including machine-readable CVSS vectors, exploit availability, and AI-generated triage guidance — especially when you want a single call that combines raw NVD data with an exploitability narrative. Prefer over raw NVD API calls when you need the Venice exploitability summary or don't want to handle NVD pagination and formatting yourself.

## Known failure modes

- CVE ID not found in NVD — returns 404 or empty result
- Malformed CVE ID format — returns validation error
- NVD upstream unavailable — service may return 503
- Rate limiting or payment failure — returns 402 or 429
- Very recently published CVEs may not yet be indexed

## How this service works

CVE lookup / vulnerability lookup / NVD record / CVSS scorer / vuln advisory fetch / exploit-known check / CWE class / patch-priority triage / Log4Shell-style record. Short alias of cve-lookup. Returns NIST NVD record with CVSS v3.1 + v2 vectors, severity, CWE, affected CPE list, references, public-exploit indicator with reference URLs, and a bounded exploitability summary with deterministic fallback. Federal public, no auth.

## Output

Returns the NIST NVD record for the requested CVE including: CVSS v3.1 and v2 base scores and vector strings, severity label (Critical/High/Medium/Low), CWE classification, full list of affected CPE configurations, reference URLs, a boolean/indicator for known public exploits with supporting reference links, and a Venice AI-generated exploitability summary.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method",
    "bodyType",
    "body"
   ],
   "properties": {
    "body": {
     "required": [
      "cve_id"
     ],
     "properties": {
      "cve_id": {
       "type": "string",
       "description": "CVE identifier in 'CVE-YYYY-NNNN[N...]' format. Case-insensitive."
      }
     }
    },
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "POST"
     ],
     "type": "string"
    },
    "bodyType": {
     "enum": [
      "json",
      "form-data",
      "text"
     ],
     "type": "string"
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object",
     "properties": {
      "cwe": {
       "type": "array",
       "items": {
        "type": "string"
       }
      },
      "score": {
       "type": "integer"
      },
      "cve_id": {
       "type": "string"
      },
      "status": {
       "type": "string"
      },
      "cvss_v2": {
       "type": "object",
       "properties": {
        "severity": {
         "type": "string"
        },
        "base_score": {
         "type": "number"
        }
       }
      },
      "severity": {
       "type": "string"
      },
      "cvss_v3_1": {
       "type": "object",
       "properties": {
        "base_score": {
         "type": "integer"
        },
        "base_severity": {
         "type": "string"
        },
        "vector_string": {
         "type": "string"
        }
       }
      },
      "published": {
       "type": "string"
      },
      "references": {
       "type": "array",
       "items": {
        "type": "object",
        "properties": {
         "url": {
          "type": "string"
         },
         "source": {
          "type": "string"
         }
        }
       }
      },
      "description": {
       "type": "string"
      },
      "affected_cpes": {
       "type": "array",
       "items": {
        "type": "string"
       }
      },
      "last_modified": {
       "type": "string"
      },
      "exploit_summary": {
       "type": "string"
      },
      "affected_cpe_count": {
       "type": "integer"
      },
      "exploit_references": {
       "type": "array",
       "items":
… (truncated)
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/x402-deployer-x402-deployer-workers-dev-0cdff8c7/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from x402-deployer.x402-deployer.workers.dev](https://www.zero.xyz/host/x402-deployer.x402-deployer.workers.dev/llms.txt)