{"uid":"cap_ipAYbu1rghM6QCBAoh7Cs","slug":"signaldesk-ai-cisa-kev-lookup-958f0b7e","name":"SignalDesk AI – CISA KEV Lookup","description":"Evidence-backed autonomous AI jobs and paid data tools. Queue/D1/cron run outside the chat; free quotas and bounded execution apply.","url":"https://x402-agent.kariguetoazul.workers.dev/api/security/kev?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET","HEAD","DELETE"],"type":"string"},"queryParams":{"type":"object","required":["cve"],"properties":{"cve":{"type":"string","pattern":"^CVE-[0-9]{4}-[0-9]{4,7}$","maxLength":22,"description":"CVE identifier."}},"additionalProperties":false}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":{"type":"json","example":{"cve":"CVE-2021-44228","source":{"license":"US government public data","provider":"CISA","expires_at":"2026-10-02T10:44:48.006Z","fetched_at":"2026-10-02T09:44:48.006Z","source_url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","transformed":true},"listed_in_kev":true,"vulnerability":{"name":"Apache Log4j2 Remote Code Execution Vulnerability","action":"For all affected software assets for which updates exist, the only acceptable remediation actions are: 1) Apply updates; OR 2) remove affected assets from agency networks. Temporary mitigations using one of the measures provided at https://www.cisa.gov/uscert/ed-22-02-apache-log4j-recommended-mitigation-measures are only acceptable until updates are available.","vendor":"Apache","product":"Log4j2","due_date":"2021-12-24","date_added":"2021-12-10","ransomware_use":"Known"},"catalog_version":"2026.10.01"}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.003","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.003/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_tj8dvQTcN89RH5Do0Hqon","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.003","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Checks whether a given CVE identifier is listed in CISA's Known Exploited Vulnerabilities catalog and returns detailed vulnerability metadata","exampleAgentPrompt":"Can you check if CVE-2021-44228 is in the CISA Known Exploited Vulnerabilities catalog and tell me the remediation action, due date, and whether it's linked to ransomware?","exampleUseCases":[{"title":"Urgent patch prioritization triage","prompt":"I need to know if CVE-2023-23397 is in the CISA KEV list — if it is, tell me the patch due date and whether ransomware groups are using it so I can prioritize remediation."},{"title":"Compliance audit CVE verification","prompt":"For our FCEB compliance audit, can you confirm whether CVE-2022-30190 appears in the CISA Known Exploited Vulnerabilities catalog and pull the full entry including the vendor, product, and required action?"},{"title":"Threat intel enrichment for SOC alert","prompt":"We just got an alert mentioning CVE-2021-26084 — look it up in the CISA KEV catalog and tell me when it was added, what the remediation action is, and if it's associated with ransomware."}],"resultDescription":"Returns a JSON object indicating whether the CVE is listed in CISA's KEV catalog (listed_in_kev boolean), along with full vulnerability details (name, vendor, product, date added, patch due date, ransomware use status, and remediation action), plus source metadata including the CISA data provider, license, fetch timestamp, and current catalog version.","failureModes":["Invalid CVE format (must match ^CVE-[0-9]{4}-[0-9]{4,7}$) returns a validation error","CVE not found in KEV catalog returns listed_in_kev: false with no vulnerability details","CISA upstream data source unavailable may return stale or error response","Missing required 'cve' query parameter causes request failure","Payment not settled (x402) results in 402 response before any data is returned"],"whenToPreferThis":"Choose this endpoint when you need authoritative CISA KEV data for a specific CVE — particularly for federal compliance (CISA BOD 22-01 obligations), SOC triage, or patch prioritization workflows. Prefer this over generic NVD or CVE database lookups when the specific question is 'is this actively exploited and federally mandated for patching?' rather than general CVSS scoring or technical vulnerability details.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-10T06:41:00.397Z","isFirstParty":false,"canonicalSlug":"signaldesk-ai-cisa-kev-lookup-958f0b7e"}