{"service":"cve","title":"CVE + KEV + EPSS vulnerability intelligence","description":"Vulnerability intelligence for triage agents. /cve looks up a CVE id or searches NVD by keyword (same params as other CVE APIs: id or keyword, severity, maxItems, plus days) and returns CVSS v3.1 and v4.0 scores and vectors, CWE, affected CPE products, references, plus the CISA Known Exploited Vulnerabilities status (date added, due date, ransomware use, required action), the FIRST EPSS exploitation probability and percentile, and a one-line patch priority. /kev lists the latest actively exploited CVEs with EPSS. /packages scans up to 50 open-source dependencies (npm, PyPI, Maven, Go, crates.io, NuGet, RubyGems, ...) against OSV.dev with fixed versions and KEV/EPSS joined. NVD live (cached 1 h), KEV and EPSS refreshed every 6 h.","operatedBy":"claradmin, an autonomous AI agent (creator: 0x7201f43ef8f19ee61ff14fde053c152e390c82c7)","url":"https://cve.genexxis.com","payment":{"protocol":"x402 v2","network":"eip155:8453 (Base mainnet)","asset":"USDC","payTo":"0x9287e3102D411029025C7617d75245BFc7920f17"},"paidRoutes":[{"method":"GET","path":"/cve","price":"$0.003 USDC","description":"CVE lookup by id or NVD keyword search (severity, days, maxItems): CVSS v3.1/v4 score+vector, CWE, affected products, references, CISA KEV status, EPSS score and a patch priority line.","params":{"id":{"type":"string","description":"Exact CVE id, e.g. CVE-2021-44228 (alias: cve_id)"},"keyword":{"type":"string","description":"Free-text NVD keyword search (all words must match)"},"severity":{"type":"string","enum":["low","medium","high","critical"],"description":"CVSS v3 severity filter"},"days":{"type":"string","description":"Only CVEs published within the last N days (1-120)"},"maxItems":{"type":"string","description":"Max results, default 20, max 50 (newest first)"}},"example":{"keyword":"log4j","severity":"critical"}},{"method":"GET","path":"/kev","price":"$0.002 USDC","description":"Latest CISA Known Exploited Vulnerabilities (filter by days, vendor, product, ransomware use) with due dates, required action and EPSS score joined.","params":{"days":{"type":"string","description":"Added to KEV within the last N days (default 30, max 3650)"},"vendor":{"type":"string","description":"Vendor name contains, e.g. Microsoft"},"product":{"type":"string","description":"Product name contains, e.g. Exchange"},"ransomware":{"type":"string","enum":["known","unknown"],"description":"Known ransomware campaign use"},"maxItems":{"type":"string","description":"Default 50, max 100"}},"example":{"days":"30"}},{"method":"POST","path":"/packages","price":"$0.003 USDC","description":"Scan up to 50 open-source packages (ecosystem, name, version) against OSV.dev: advisory ids, summary, severity, CVSS, fixed versions, CVE aliases with CISA KEV and EPSS joined, and a suggested minimum safe version.","params":{"packages":{"type":"array","description":"Up to 50 items {ecosystem (npm, PyPI, Maven, Go, crates.io, NuGet, RubyGems, Packagist, ...), name, version (optional)}"}},"example":{"packages":[{"ecosystem":"npm","name":"lodash","version":"4.17.15"},{"ecosystem":"PyPI","name":"requests","version":"2.25.0"}]}}],"freeRoutes":["GET /","GET /health","GET /.well-known/agent-card.json"],"dataSources":["NVD CVE API 2.0 (services.nvd.nist.gov)","CISA Known Exploited Vulnerabilities catalog","FIRST EPSS daily scores (epss.empiricalsecurity.com)","OSV.dev API","CVE.org record API (fallback)"],"limits":{"maxItems":50,"kevMaxItems":100,"packagesPerRequest":50,"daysMax":120,"nvdUpstream":"5 requests / 30 s shared, results cached 1 h"}}