{"uid":"cap_iHFRpvc4_ZkvobmfD1FN7","slug":"fhi-cve-priority-report-api-ce2718ae","name":"FHI CVE Priority Report API","description":"Stateful remote-MCP change evidence, payable per call with x402 Base USDC.","url":"https://polished-truth-c514.fhi-llc-1118.workers.dev/api/v1/cve-priority-report?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"cves":{"type":"array","items":{"type":"string","pattern":"^CVE-[0-9]{4}-[0-9]{4,}$"},"maxItems":20,"minItems":1},"assetExposure":{"enum":["internet","internal","unknown"],"type":"string"},"patchSlaHours":{"type":"integer","minimum":1}}},"responseSchema":{"type":"json","example":{"findings":[{"cve":"CVE-2021-44228","score":100,"priority":"P0"}]}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.05","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.05/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.05","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.05","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_meTg8v0b1Y-yUcPzXH5TR","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.05","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Analyzes a list of CVEs and returns a prioritized vulnerability report with remediation urgency, factoring in asset exposure and patch SLA constraints.","exampleAgentPrompt":"We have a batch of CVEs — CVE-2024-1234, CVE-2023-5678, and CVE-2022-9999 — on internet-facing assets, and our patch SLA is 72 hours. Can you run a priority report to tell us which ones to fix first?","exampleUseCases":[{"title":"Security triage for internet-exposed systems","prompt":"I have these CVEs from our latest scan — CVE-2024-21413, CVE-2023-44487, CVE-2024-3400 — and they're all on internet-facing hosts. Our patch window is 48 hours. Can you give me a priority report so we know what to tackle first?"},{"title":"Internal network vulnerability ranking","prompt":"We just got flagged on CVE-2021-44228, CVE-2022-26134, and CVE-2023-23397 — these are on internal systems only. Our SLA for patching is 168 hours. Can you prioritize them so my team knows where to start?"},{"title":"Automated CVE triage in a SecOps agent workflow","prompt":"As part of our nightly security sweep, we found CVE-2024-29988 and CVE-2023-36884. Asset exposure is unknown. Our SLA is 96 hours — run a priority report and flag which ones need immediate action."}],"resultDescription":"A structured CVE priority report that ranks each submitted CVE by remediation urgency, incorporating asset exposure context (internet-facing, internal, or unknown) and patch SLA deadline constraints. Likely includes severity scores, priority tiers, and recommended remediation order per CVE.","failureModes":["Empty or malformed CVE array returns a validation error","Invalid assetExposure value (not one of 'internet', 'internal', 'unknown') causes request rejection","Payment failure or insufficient USDC balance results in 402 response blocking the request","Unknown or unrecognized CVE IDs may return incomplete or missing priority data for those entries","Negative or zero patchSlaHours may cause a validation error"],"whenToPreferThis":"Choose this endpoint when an AI agent or security automation pipeline needs to programmatically triage and rank a batch of CVEs with awareness of asset exposure and patch deadlines — especially in agentic workflows where pay-per-use micropayments (x402/USDC) are preferred over subscription APIs. Ideal for SecOps automation, vulnerability management agents, and CI/CD security gates that need fast, on-demand CVE prioritization without standing up a full SIEM or vulnerability management platform.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-12T00:31:53.569Z","isFirstParty":false,"canonicalSlug":"fhi-cve-priority-report-api-ce2718ae"}