Name: cve
Price: 0.005 USDC
Availability: InStock

$ man cve

agentutility / prooflayer / cve

PRICE / CALL

$0.005

USDC · base mainnet · scheme: exact

METHOD

POST

CLUSTER

prooflayer

CATEGORY

STATUS

● live

NAME

cve — looks up a cve and returns the full nist nvd vulnerability record

SYNOPSIS

POST https://x402.agentutility.ai/cve
     Content-Type: application/json
     X-PAYMENT:    <signed-transferWithAuthorization>

     { ... }

↳ first call → 402 Payment Required. Sign USDCtransferWithAuthorization, retry with theX-PAYMENT header.

DESCRIPTION

Looks up a CVE and returns the full NIST NVD vulnerability record. Short alias of cve-lookup: CVSS v3.1 + v2 vectors, severity, CWE class, affected CPE list, references, public-exploit indicator with reference URLs, and a bounded exploitability summary. Federal public data. Use it as a vulnerability lookup, NVD record fetch, CVSS scorer, vuln advisory fetch, exploit-known check, or patch-priority triage for Log4Shell-style records.

INPUT — request schema

property	type	description	req?
cve_id	string	CVE identifier in 'CVE-YYYY-NNNN[N...]' format. Case-insensitive.	required

OUTPUT — response shape

field	type	description
cve_id	string	CVE identifier in the form CVE-YYYY-NNNNN (e.g., CVE-2024-3094).
description	string	NVD's plain-text summary of the vulnerability and its impact.
published	string	ISO 8601 timestamp when NVD first published the CVE record.
cvss_v3_1	object	CVSS v3.1 metrics object with base score, vector string, and severity breakdown.
cvss_v2	object	Legacy CVSS v2 metrics object with base score, vector, and access/impact subscores.
score	number	Primary numeric CVSS base score (v3.1 preferred, falls back to v2) on the 0.0–10.0 scale.
severity	string	Qualitative severity label: NONE, LOW, MEDIUM, HIGH, or CRITICAL.
cwe	array	Array of associated CWE weakness identifiers (e.g., CWE-79, CWE-787).
affected_cpes	array	Array of CPE 2.3 URIs identifying vulnerable products, versions, and configurations.
exploit_summary	string	LLM-generated plain-English summary of how the vulnerability is exploited and its blast radius.
public_exploit_known	boolean	True if public exploit code, PoC, or active exploitation evidence is referenced.
exploit_references	array	Array of URLs to public PoCs, Metasploit modules, or exploit-DB entries.
references	array	Array of NVD reference URLs (vendor advisories, patches, analysis writeups).

EXAMPLES — two ways to call

EXAMPLE 1 · curl

curl -X POST https://x402.agentutility.ai/cve \
  -H 'Content-Type: application/json' \
  -d '{ }'

first response = 402 Payment Required with payment requirements; sign + retry with X-PAYMENT.

EXAMPLE 2 · mcp

# Install the MCP package for this endpoint's cluster
npx -y @agentutility/mcp-<cluster>

# Required: EVM private key with USDC on Base
export X402_PRIVATE_KEY=0x...

# Then call the cve tool from your MCP-aware agent.

MCP server handles payment automatically — your coding agent just calls the tool by name.

METADATA

tags: cvevulnerabilitysecuritynvdexploit
env: VENICE_API_KEY
methods: POST
cluster: prooflayer
price: $0.005 USDC per call

ADJACENT — other endpoints in prooflayer

endpoint	description	price
cve-lookup	Looks up a CVE and returns its canonical NIST NVD record: description, CVSS v3.1 and v2 vectors plus numeric scores, severity bucket, CWE…	$0.005
pypi-package-risk	Scores the supply-chain risk of a PyPI package before you install it.	$0.01
app-store-rejection-explain	Explains App Store and Google Play rejections and turns them into a resubmission plan.	$0.02
db-migration-risk	Audits database migrations for risky SQL before deploy.	$0.02
deploy-config-risk	Audits deploy configuration files for production risks.	$0.02
secrets-exposure-check	Scans project config files for hardcoded secrets before you deploy.	$0.02
ai-content-detector	Detect AI-generated writing with a calibrated probability score.	$0.03
dep-risk-summary	Scores dependency risk for a whole repo from its manifests and lockfiles.	$0.03