Vulnerability Intelligence
Patch priority P0-P3 for a CVE from CISA exploited-in-the-wild status, EPSS exploit probability and advisory severity.
OtherLiveeip155:8453Exactvia cdp
CvePatch-priorityEpssKev
Calls · 30d
1
This endpoint's own trailing-30-day call count, as published by the upstream catalog and snapshotted daily. 4 snapshots so far.
$24.31
Verified settled volume
1,175 settlements proven x402 by their on-chain EIP-3009 marker.
$0.030
Listed price
As published in the catalog. Always read the live 402 before paying.
1
Calls · 30d
Upstream's own call count for this endpoint, not ours.
1
Unique payers · 30d
Last called 2026-10-20 20:47Z
—
Upstream on-chain volume
Reported by the source catalog.
Paid to
0xb531320805C5BED1D46AEaDcF4F008FDF172DBDaThe wallet the 402 directs payment to. Its whole payment record — every payer, every chain — is on the merchant page.
Asset 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913
Provider
The payTo wallet does not resolve to a registered ERC-8004 agent. That is not a verdict on the service — most of the catalog is unregistered.
Live 402 challenge
Captured by the enrichment pass, not read just now. Prices can change — always read the 402 the endpoint answers with.
{
"error": "Payment required",
"accepts": [
{
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"extra": {
"name": "USD Coin",
"version": "2"
},
"payTo": "0xb531320805C5BED1D46AEaDcF4F008FDF172DBDa",
"scheme": "exact",
"network": "base",
"mimeType": "application/json",
"resource": "https://vuln-intel.x402tookit.com/vuln-cve",
"description": "Patch priority P0-P3 for a CVE from CISA exploited-in-the-wild status, EPSS exploit probability and advisory severity.",
"outputSchema": {
"input": {
"type": "http",
"method": "GET",
"queryParams": {
"cve": "CVE-2021-44228"
}
},
"output": {
"cve": "CVE-2021-44228",
"kev": {
"name": "Apache Log4j2 Remote Code Execution Vulnerability",
"vendor": "Apache",
"dueDate": "2021-12-24",
"product": "Log4j2",
"dateAdded": "2021-12-10",
"ransomwareUse": "Known",
"requiredAction": "For all affected software assets for which updates exist, the only acceptable remediation actions are: 1) Apply updates; OR 2) remove affected assets from agency networks. Temporary mitigations using "
},
"asOf": "2026-10-11T03:32:38.137Z",
"epss": {
"asOf": "2026-10-10",
"percentile": 1,
"probability": 0.99999
},
"inKev": true,
"source": "CISA KEV + FIRST EPSS + OSV.dev",
"reasons": [
"In CISA's Known Exploited Vulnerabilities catalog (added 2021-12-10; used in ransomware campaigns).",
"EPSS is provided by FIRST (first.org/epss).",
"…1 more"
],
"summary": "CVE-2021-44228: p0 patch now. In CISA's Known Exploited Vulnerabilities catalog (added 2021-12-10; used in ransomware campaigns).",
"verdict": "P0_PATCH_NOW",
"degraded": false,
"sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
"disclaimer": "Screening signal computed from the named public source. Not financial, legal or investment advice; provided as is. Verify at the source before acting.",
"notChecked": [
"whether you run the affected software",
"compensating controls",
"…2 more"
],
"thresholds": {
"p1EpssAtLeast": 0.5,
"p2EpssAtLeast": 0.1
},
"advisorySummary": "",
"advisorySeverity": null
}
},
"maxAmountRequired": "30000",
"maxTimeoutSeconds": 300
},
{
"asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
"extra": {
"feePayer": "BFK9TLC3edb13K6v4YyH3DwPb5DSUpkWvb7XnqCL9b4F"
},
"payTo": "DUPiupXtuox38dcGoXUKer5mAydCzmaHjrbQ66qeEm8s",
"scheme": "exact",
"network": "solana",
"mimeType": "application/json",
"resource": "https://vuln-intel.x402tookit.com/vuln-cve",
"description": "Patch priority P0-P3 for a CVE from CISA exploited-in-the-wild status, EPSS exploit probability and advisory severity.",
"outputSchema": {
"input": {
"type": "http",
"method": "GET",
"queryParams": {
"cve": "CVE-2021-44228"
}
},
"output": {
"cve": "CVE-2021-44228",
"kev": {
"name": "Apache Log4j2 Remote Code Execution Vulnerability",
"vendor": "Apache",
"dueDate": "2021-12-24",
"product": "Log4j2",
"dateAdded": "2021-12-10",
"ransomwareUse": "Known",
"requiredAction": "For all affected software assets for which updates exist, the only acceptable remediation actions are: 1) Apply updates; OR 2) remove affected assets from agency networks. Temporary mitigations using "
},
"asOf": "2026-10-11T03:32:38.137Z",
"epss": {
"asOf": "2026-10-10",
"percentile": 1,
"probability": 0.99999
},
"inKev": true,
"source": "CISA KEV + FIRST EPSS + OSV.dev",
"reasons": [
"In CISA's Known Exploited Vulnerabilities catalog (added 2021-12-10; used in ransomware campaigns).",
"EPSS is provided by FIRST (first.org/epss).",
"…1 more"
],
"summary": "CVE-2021-44228: p0 patch now. In CISA's Known Exploited Vulnerabilities catalog (added 2021-12-10; used in ransomware campaigns).",
"verdict": "P0_PATCH_NOW",
"degraded": false,
"sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
"disclaimer": "Screening signal computed from the named public source. Not financial, legal or investment advice; provided as is. Verify at the source before acting.",
"notChecked": [
"whether you run the affected software",
"compensating controls",
"…2 more"
],
"thresholds": {
"p1EpssAtLeast": 0.5,
"p2EpssAtLeast": 0.1
},
"advisorySummary": "",
"advisorySeverity": null
}
},
"maxAmountRequired": "30000",
"maxTimeoutSeconds": 300
},
{
"asset": "0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359",
"extra": {
"name": "USD Coin",
"version": "2"
},
"payTo": "0xb531320805C5BED1D46AEaDcF4F008FDF172DBDa",
"scheme": "exact",
"network": "polygon",
"mimeType": "application/json",
"resource": "https://vuln-intel.x402tookit.com/vuln-cve",
"description": "Patch priority P0-P3 for a CVE from CISA exploited-in-the-wild status, EPSS exploit probability and advisory severity.",
"outputSchema": {
"input": {
"type": "http",
"method": "GET",
"queryParams": {
"cve": "CVE-2021-44228"
}
},
"output": {
"cve": "CVE-2021-44228",
"kev": {
"name": "Apache Log4j2 Remote Code Execution Vulnerability",
"vendor": "Apache",
"dueDate": "2021-12-24",
"product": "Log4j2",
"dateAdded": "2021-12-10",
"ransomwareUse": "Known",
"requiredAction": "For all affected software assets for which updates exist, the only acceptable remediation actions are: 1) Apply updates; OR 2) remove affected assets from agency networks. Temporary mitigations using "
},
"asOf": "2026-10-11T03:32:38.137Z",
"epss": {
"asOf": "2026-10-10",
"percentile": 1,
"probability": 0.99999
},
"inKev": true,
"source": "CISA KEV + FIRST EPSS + OSV.dev",
"reasons": [
"In CISA's Known Exploited Vulnerabilities catalog (added 2021-12-10; used in ransomware campaigns).",
"EPSS is provided by FIRST (first.org/epss).",
"…1 more"
],
"summary": "CVE-2021-44228: p0 patch now. In CISA's Known Exploited Vulnerabilities catalog (added 2021-12-10; used in ransomware campaigns).",
"verdict": "P0_PATCH_NOW",
"degraded": false,
"sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
"disclaimer": "Screening signal computed from the named public source. Not financial, legal or investment advice; provided as is. Verify at the source before acting.",
"notChecked": [
"whether you run the affected software",
"compensating controls",
"…2 more"
],
"thresholds": {
"p1EpssAtLeast": 0.5,
"p2EpssAtLeast": 0.1
},
"advisorySummary": "",
"advisorySeverity": null
}
},
"maxAmountRequired": "30000",
"maxTimeoutSeconds": 300
}
],
"x402Version": 1,
"alsoAvailable": {
"llms": "https://vuln-intel.x402tookit.com/llms.txt",
"catalog": "https://vuln-intel.x402tookit.com/catalog",
"message": "Vulnerability Intelligence has 8 pay-per-call endpoints (Known vulnerabilities, exploited-in-the-wild status and exploit probability for software packages and CVEs.), from $0.02 a call. See the full menu and send your agents our way.",
"openapi": "https://vuln-intel.x402tookit.com/openapi.json",
"related": [
{
"url": "https://vuln-intel.x402tookit.com/epss-score",
"path": "/epss-score",
"what": "EPSS exploit-probability score and percentile for up to 10 CVEs, ranked, with a high/elev…",
"price": "$0.02"
},
{
"url": "https://vuln-intel.x402tookit.com/kev-check",
"path": "/kev-check",
"what": "Is a CVE in CISA's Known Exploited Vulnerabilities catalog? Date added, due date, ransomw…",
"price": "$0.02"
},
{
"url": "https://vuln-intel.x402tookit.com/kev-recent",
"path": "/kev-recent",
"what": "CVEs CISA added to the Known Exploited Vulnerabilities catalog in the last 1-90 days, new…",
"price": "$0.02"
}
]
}
}Accepts
The payment requirements as published to the catalog. Read the live 402 before paying — a price here is a claim, not a quote.
0.03USDC≈ $0.03 USD
on Base · exact scheme
Pay 0.03 USDC on Base to 0xb531…2DBDa. The signed payment is good for 5 minutes.
- Paid to
- 0xb531…2DBDa
- USD Coin contract
- 0x8335…02913
- Payment window
- 5 minutes
- As published
- 30000 smallest units
30000units
on solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp · exact scheme
That figure is in the token’s smallest units. Roundhouse does not hold this contract’s decimals, so it is shown as published rather than converted.
- Paid to
- DUPiup…eEm8s
- Token contract
- EPjFWd…TDt1v
- Payment window
- 5 minutes
30000units
on Polygon · exact scheme
That figure is in the token’s smallest units. Roundhouse does not hold this contract’s decimals, so it is shown as published rather than converted.
- Paid to
- 0xb531…2DBDa
- Token contract
- 0x3c49…c3359
- Payment window
- 5 minutes
30000units
on Arbitrum · exact scheme
That figure is in the token’s smallest units. Roundhouse does not hold this contract’s decimals, so it is shown as published rather than converted.
- Paid to
- 0xb531…2DBDa
- Token contract
- 0xaf88…e5831
- Payment window
- 5 minutes
The catalog’s raw entry
[
{
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"extra": {
"name": "USD Coin",
"version": "2"
},
"payTo": "0xb531320805C5BED1D46AEaDcF4F008FDF172DBDa",
"amount": "30000",
"scheme": "exact",
"network": "eip155:8453",
"maxTimeoutSeconds": 300
},
{
"asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
"extra": {
"feePayer": "D6ZhtNQ5nT9ZnTHUbqXZsTx5MH2rPFiBBggX4hY1WePM"
},
"payTo": "DUPiupXtuox38dcGoXUKer5mAydCzmaHjrbQ66qeEm8s",
"amount": "30000",
"scheme": "exact",
"network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
"maxTimeoutSeconds": 300
},
{
"asset": "0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359",
"extra": {
"name": "USD Coin",
"version": "2"
},
"payTo": "0xb531320805C5BED1D46AEaDcF4F008FDF172DBDa",
"amount": "30000",
"scheme": "exact",
"network": "eip155:137",
"maxTimeoutSeconds": 300
},
{
"asset": "0xaf88d065e77c8cC2239327C5EDb3A432268e5831",
"extra": {
"name": "USD Coin",
"version": "2"
},
"payTo": "0xb531320805C5BED1D46AEaDcF4F008FDF172DBDa",
"amount": "30000",
"scheme": "exact",
"network": "eip155:42161",
"maxTimeoutSeconds": 300
}
]Extensions
{
"bazaar": {
"info": {
"input": {
"type": "http",
"method": "GET",
"queryParams": {
"cve": "CVE-2021-44228"
}
},
"output": {
"type": "json",
"example": {
"cve": "CVE-2021-44228",
"kev": {
"name": "Apache Log4j2 Remote Code Execution Vulnerability",
"vendor": "Apache",
"dueDate": "2021-12-24",
"product": "Log4j2",
"dateAdded": "2021-12-10",
"ransomwareUse": "Known",
"requiredAction": "For all affected software assets for which updates exist, the only acceptable remediation actions are: 1) Apply updates; OR 2) remove affected assets from agency networks. Temporary mitigations using "
},
"asOf": "2026-10-11T03:32:38.137Z",
"epss": {
"asOf": "2026-10-10",
"percentile": 1,
"probability": 0.99999
},
"inKev": true,
"source": "CISA KEV + FIRST EPSS + OSV.dev",
"reasons": [
"In CISA's Known Exploited Vulnerabilities catalog (added 2021-12-10; used in ransomware campaigns).",
"EPSS is provided by FIRST (first.org/epss).",
"…1 more"
],
"summary": "CVE-2021-44228: p0 patch now. In CISA's Known Exploited Vulnerabilities catalog (added 2021-12-10; used in ransomware campaigns).",
"verdict": "P0_PATCH_NOW",
"degraded": false,
"sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
"disclaimer": "Screening signal computed from the named public source. Not financial, legal or investment advice; provided as is. Verify at the source before acting.",
"notChecked": [
"whether you run the affected software",
"compensating controls",
"…2 more"
],
"thresholds": {
"p1EpssAtLeast": 0.5,
"p2EpssAtLeast": 0.1
},
"advisorySummary": "",
"advisorySeverity": null
}
}
},
"schema": {
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"required": [
"input"
],
"properties": {
"input": {
"type": "object",
"required": [
"type",
"method"
],
"properties": {
"type": {
"type": "string",
"const": "http"
},
"method": {
"enum": [
"GET"
],
"type": "string"
},
"queryParams": {
"type": "object",
"required": [
"cve"
],
"properties": {
"cve": {
"type": "string",
"description": "CVE id, e.g. CVE-2021-44228"
}
}
}
},
"additionalProperties": false
},
"output": {
"type": "object",
"required": [
"type"
],
"properties": {
"type": {
"type": "string"
},
"example": {
"type": "object",
"properties": {
"cve": {
"type": [
"null",
"string"
]
},
"kev": {
"type": [
"null",
"object"
],
"properties": {
"name": {
"type": [
"null",
"string"
]
},
"vendor": {
"type": [
"null",
"string"
]
},
"dueDate": {
"type": [
"null",
"string"
]
},
"product": {
"type": [
"null",
"string"
]
},
"dateAdded": {
"type": [
"null",
"string"
]
},
"ransomwareUse": {
"type": [
"null",
"string"
]
},
"requiredAction": {
"type": [
"null",
"string"
]
}
}
},
"asOf": {
"type": [
"null",
"string"
]
},
"epss": {
"type": [
"null",
"object"
],
"properties": {
"asOf": {
"type": [
"null",
"string"
]
},
"percentile": {
"type": [
"null",
"number"
]
},
"probability": {
"type": [
"null",
"number"
]
}
}
},
"inKev": {
"type": [
"boolean",
"null"
]
},
"source": {
"type": [
"null",
"string"
]
},
"reasons": {
"type": [
"array",
"null"
],
"items": {
"type": "string"
}
},
"summary": {
"type": [
"null",
"string"
]
},
"verdict": {
"type": [
"null",
"string"
]
},
"degraded": {
"type": [
"boolean",
"null"
]
},
"sourceUrl": {
"type": [
"null",
"string"
]
},
"disclaimer": {
"type": [
"null",
"string"
]
},
"notChecked": {
"type": [
"array",
"null"
],
"items": {
"type": "string"
}
},
"thresholds": {
"type": [
"null",
"object"
],
"properties": {
"p1EpssAtLeast": {
"type": [
"null",
"number"
]
},
"p2EpssAtLeast": {
"type": [
"null",
"number"
]
}
}
},
"advisorySummary": {
"type": [
"null",
"string"
]
},
"advisorySeverity": {}
}
}
}
}
}
}
}
}Provenance
- Seen in the source catalog
- 2026-10-20 20:47Z
- Last indexed by Roundhouse
- 2026-10-22 12:40Z
- Last enriched (probe, favicon, geo)
- 2026-10-20 22:45Z
- x402 version
- 2
- Max timeout
- 300s
- Liveness probe
- HTTP 402
Hand this page to an agent
Copy the prompt and paste it into Claude, an MCP client or your own agent — it will vet this service and call it over the free read API. No key, no account.
GET api.roundhouseai.io/v0/endpoints
This endpoint's own trailing-30-day call count, as published by the upstream catalog and snapshotted daily. 4 snapshots so far. Verified volume counts only settlements with an on-chain EIP-3009 marker.
Show the promptHide the prompt
Using Roundhouse, look up the x402 service Vulnerability Intelligence and tell me whether it is worth paying: what a call costs, whether the endpoint answered when last probed, and what its payment record actually shows. curl -s 'https://api.roundhouseai.io/v0/endpoints?q=Vulnerability%20Intelligence' curl -s 'https://api.roundhouseai.io/v0/merchants/<the payTo wallet returned above>' Then call it: read the price from the live 402 at https://vuln-intel.x402tookit.com/vuln-cve, never from a cached figure, and pay with an x402 client. The /v0 API needs an API key (`authorization: Bearer rh_live_…`) on everything except /v0/unified* and /v0/endpoints. Either pay over x402 (mint a personal key for $0.01 at GET https://api.roundhouseai.io/v0/test/x402), or ask me for an organization key, which I create at https://roundhouseai.io/dashboard/connections. If you have neither, ask before going further. If you do not have Roundhouse tools or skills installed, read https://roundhouseai.io/skill.md first — it is the whole procedure.