# Vulnerability Intelligence

Known vulnerabilities, exploited-in-the-wild status and exploit probability for software packages and CVEs.

## How to pay

Machine-payable over x402. USDC on: Base (eip155:8453), Solana (solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp), Polygon (eip155:137), Arbitrum One (eip155:42161).
No accounts. No API keys. No signup. The paying wallet is the account.

## Machine-readable

- OpenAPI: https://vuln-intel.x402tookit.com/openapi.json
- x402 manifest: https://vuln-intel.x402tookit.com/.well-known/x402
- Catalog (free): https://vuln-intel.x402tookit.com/catalog
- Health (free): https://vuln-intel.x402tookit.com/health
- Uptime (free): https://vuln-intel.x402tookit.com/uptime

## Endpoints (8)

### GET /epss-score — $0.02
EPSS exploit-probability score and percentile for up to 10 CVEs, ranked, with a high/elevated/low verdict.
Params: cves: string
Example: https://vuln-intel.x402tookit.com/epss-score?cves=CVE-2021-44228%2CCVE-2023-4863

### GET /kev-check — $0.02
Is a CVE in CISA's Known Exploited Vulnerabilities catalog? Date added, due date, ransomware use and required action.
Params: cve: string
Example: https://vuln-intel.x402tookit.com/kev-check?cve=CVE-2021-44228

### GET /kev-recent — $0.02
CVEs CISA added to the Known Exploited Vulnerabilities catalog in the last 1-90 days, newest first, with vendor and product.
Params: days?: integer
Example: https://vuln-intel.x402tookit.com/kev-recent?days=30

### GET /kev-vendor — $0.02
Exploited-vulnerability record of a vendor in CISA KEV: total CVEs, products, ransomware use and latest additions.
Params: vendor: string
Example: https://vuln-intel.x402tookit.com/kev-vendor?vendor=Fortinet

### GET /vuln-advisory — $0.02
One security advisory by GHSA or CVE id: severity, affected packages and ranges, fixed versions and exploited flag.
Params: id: string
Example: https://vuln-intel.x402tookit.com/vuln-advisory?id=GHSA-35jh-r3h4-6jhm

### GET /vuln-batch — $0.05
Check up to 10 package versions at once for known vulnerabilities: list as npm:lodash@4.17.15,PyPI:requests@2.19.0.
Params: packages: string
Example: https://vuln-intel.x402tookit.com/vuln-batch?packages=npm%3Alodash%404.17.15%2Cnpm%3Aexpress%404.19.2%2CPyPI%3Arequests%402.19.0

### GET /vuln-cve — $0.03
Patch priority P0-P3 for a CVE from CISA exploited-in-the-wild status, EPSS exploit probability and advisory severity.
Params: cve: string
Example: https://vuln-intel.x402tookit.com/vuln-cve?cve=CVE-2021-44228

### GET /vuln-package — $0.02
Known vulnerabilities for an exact package version (npm, PyPI, Go, Maven...): fixed version, exploited-in-the-wild flag.
Params: ecosystem: string, name: string, version: string
Example: https://vuln-intel.x402tookit.com/vuln-package?ecosystem=npm&name=lodash&version=4.17.15

## Terms

Vulnerability data computed from OSV.dev, the CISA Known Exploited Vulnerabilities catalog (CC0) and FIRST EPSS scores, provided as is, with no warranty of completeness or timeliness. Absence of a known advisory is not evidence of safety. Not security, legal or compliance advice; verify against the vendor advisory before acting. EPSS is provided by FIRST (first.org/epss).