{"uid":"cap_Qa98XEXllrVKjUecLqNSS","slug":"datakoot-epss-score-lookup-0583233a","name":"Datakoot EPSS Score Lookup","description":"48 live public-data tools (security, packages, SEC filings, economy, FX, weather, domains, Federal Register, Base) for AI agents. $0.002 USDC per call on Base via x402, charged only on success. The same tools are free for 100 calls/day via MCP at <server>.datakoot.com/mcp.","url":"https://x402.datakoot.com/api/epss_score?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"cve_id":{"type":"string","description":"A single CVE id."},"cve_ids":{"type":"array","items":{"type":"string"},"description":"Multiple CVE ids (or pass a comma-separated string)."}}},"responseSchema":{"type":"json","example":{"note":"EPSS = probability (0–1) the CVE is exploited in the next 30 days; percentile ranks it among all scored CVEs.","as_of":"2026-10-02","model":"EPSS (FIRST.org)","scored":2,"scores":[{"epss":0.85974,"cve_id":"CVE-2024-3094","percentile":0.99724},{"epss":0.99999,"cve_id":"CVE-2021-44228","percentile":1}],"source":"FIRST.org EPSS"}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.002/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_JuvxTcMVayt3MRC1kiSE_","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.002","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Returns FIRST.org EPSS exploit-probability scores and percentile rankings for one or more CVE identifiers","exampleAgentPrompt":"What are the EPSS exploit-probability scores and percentile rankings for CVE-2021-44228 and CVE-2024-3094? I want to know how likely each is to be exploited in the next 30 days.","exampleUseCases":[{"title":"Vulnerability backlog triage by exploit risk","prompt":"I've got a list of open CVEs from our last scanner run — CVE-2021-44228, CVE-2023-44487, CVE-2024-3094, and CVE-2022-22965. Can you pull EPSS scores for all of them so I can rank which to patch first based on real-world exploitation probability?"},{"title":"Security alert enrichment for a single CVE","prompt":"We just got an alert for CVE-2021-44228 on one of our servers. What's the current EPSS score and percentile for it — how likely is it to be actively exploited in the next month?"},{"title":"Automated CVE risk report generation","prompt":"Pull EPSS exploit-probability scores for CVE-2024-3094, CVE-2023-23397, and CVE-2022-30190, and include their percentile rankings so I can add exploit-likelihood context to our weekly security report."}],"resultDescription":"A JSON object containing the EPSS model version, scoring date, source attribution (FIRST.org), the number of CVEs scored, and an array of per-CVE results each with the CVE ID, an EPSS probability score (0–1 representing likelihood of exploitation within 30 days), and a percentile ranking among all EPSS-scored CVEs.","failureModes":["Invalid or malformed CVE ID format returns an error or empty scored array","Unknown CVE IDs not yet in the EPSS dataset return no score entry","Network or upstream FIRST.org data unavailability causes 5xx errors","Providing neither cve_id nor cve_ids results in a validation error","Very newly published CVEs may not yet have an EPSS score assigned"],"whenToPreferThis":"Choose this endpoint when you need FIRST.org EPSS exploit-probability data specifically — particularly for prioritizing CVE remediation by real-world exploitation likelihood rather than CVSS severity alone. It supports batch lookups of multiple CVEs in a single call, making it ideal for pipeline enrichment of vulnerability scan results. Prefer it over CVSS-only lookups when you want a probabilistic, evidence-based risk signal about active exploitation.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-11T06:50:40.837Z","isFirstParty":false,"canonicalSlug":"datakoot-epss-score-lookup-0583233a"}