# ZeroWorker CVE Prioritization API

> ZeroWorker CVE Prioritization API is a paid API for AI agents from zeroworker-security-api.zeroworker-lab.workers.dev, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-13).

Prioritizes up to 50 CVEs in a single request using EPSS, CISA KEV, and ransomware signals, returning deterministic risk scores and urgency tiers as JSON.

## Facts

- Endpoint: POST https://zeroworker-security-api.zeroworker-lab.workers.dev/v1/prioritize?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/zeroworker-cve-prioritization-api-d74ebc49
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_RtRltTtK14bgD0hbXCVF8

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability zeroworker-cve-prioritization-api-d74ebc49 -d '<json body>'
```

Example prompt: I have a list of CVEs from our latest scan — CVE-2023-44487, CVE-2024-21412, CVE-2021-44228, CVE-2023-23397, and CVE-2022-30190 — can you prioritize them by exploitation risk using EPSS, CISA KEV, and ransomware signals and tell me which ones need immediate patching?

## When to prefer this

Choose this endpoint when you need deterministic, multi-signal CVE prioritization at scale (up to 50 CVEs per call) without standing up your own vulnerability intelligence pipeline. It is especially valuable for security automation, AI-driven patch management agents, and SOC workflows where EPSS probabilities, CISA KEV status, and ransomware linkage all need to be combined into a single urgency score. It requires no account or API key, making it ideal for lightweight agentic integrations that pay per use via x402.

## Known failure modes

- Invalid or malformed CVE IDs return an error without charging
- CVEs with no signal data (no EPSS, KEV, or ransomware match) return a no-signal result without settling payment
- Temporary upstream resource failures (EPSS/KEV feeds unavailable) return a 5xx error without settling payment
- Exceeding the 50 CVE per-request limit returns a 400-class validation error
- Requests missing the x402 payment header may be rejected before processing

## How this service works

Prioritize up to 50 CVEs in one request using FIRST EPSS, CISA KEV, and known ransomware signals. Returns deterministic risk scores, urgency tiers, exploitation signals, vendor/product context, and remediation metadata as machine-readable JSON. Built for security automation and AI agents. No account or API key required. $0.01 per successful request via x402. Invalid input, no-signal results, and temporary resource failures do not settle.

## Output

Returns a machine-readable JSON object for each submitted CVE containing a deterministic risk score, urgency tier (e.g. critical/high/medium/low), exploitation signals (EPSS probability, CISA KEV membership, ransomware association), vendor and product context, and remediation metadata. CVEs with no available signal data are flagged accordingly.

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/zeroworker-cve-prioritization-api-d74ebc49/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from zeroworker-security-api.zeroworker-lab.workers.dev](https://www.zero.xyz/host/zeroworker-security-api.zeroworker-lab.workers.dev/llms.txt)