{"uid":"cap_xxUmVyjDAqJQskn1qTwQs","slug":"stack-facts-cisa-kev-snapshot-6bb38377","name":"Stack Facts CISA KEV Snapshot","description":"Check a package before install: malware, known vulnerabilities (OSV), exploited CVEs (CISA KEV) and end-of-life, plus LLM prices; signed answers, pay per call in USDC, no account or API key.","url":"https://g5joilnmeep4ntz3nwezxt5dmu.srv.us/v1/kev/snapshot?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","properties":{"properties":{"type":"string"}}},"responseSchema":{"type":"json","example":{"data":{"verify":"sha256 of the canonical JSON (R…","licence":{"spdx":"CC0-1.0","text":"The KEV database is distributed…","source":"https://www.cisa.gov/sites/defa…","sources":["CISA KEV"],"attribution":"Source: CISA Known Exploited Vu…"},"manifest":{"key_id":"sf-test-1","sha256":"f4586cc54bee30640f4364100eb70b7…","dataset":"kev","licence":"CC0-1.0","version":1,"signature":"Tne7KlsSRbohZK45rjItkYBKFOd8sEd…","fetched_at":"2026-10-09T06:00:00Z","source_url":"https://www.cisa.gov/sites/defa…","attribution":"Source: CISA Known Exploited Vu…","snapshot_id":"kev-20261009T060000Z-f4586cc5","record_count":31,"upstream_etag":null,"upstream_meta":{},"prev_snapshot_id":"kev-20261009T050000Z-013e1b3f"},"snapshot":{"dataset":"kev","records":[{}],"version":1}},"meta":{"as_of":"2026-10-09T06:00:00Z","stale":false,"key_id":"sf-test-1","notice":"Normalised (modified) from the …","sha256":"f4586cc54bee30640f4364100eb70b7…","source":"https://www.cisa.gov/sites/defa…","dataset":"kev","licence":"CC0-1.0","signature":"Tne7KlsSRbohZK45rjItkYBKFOd8sEd…","attribution":"Source: CISA Known Exploited Vu…","snapshot_id":"kev-20261009T060000Z-f4586cc5","manifest_url":"/v1/kev/manifest","retrieved_at":"2026-10-09T06:00:00.000Z"}}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.05","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.05/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.05","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.05","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_XPNT5ZX0oHABeiQjn-QcV","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.05","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Returns the latest signed snapshot of the CISA Known Exploited Vulnerabilities (KEV) catalog, including CVE details, vendor/product info, due dates, and ransomware flags","exampleAgentPrompt":"Pull the latest CISA Known Exploited Vulnerabilities snapshot for me — I need the full signed KEV catalog with CVE details, vendor names, due dates, and ransomware flags so I can check our exposure.","exampleUseCases":[{"title":"Pre-install package security check","prompt":"Before I install this dependency, can you grab the latest CISA KEV snapshot and tell me if any of the CVEs associated with it are on the actively exploited list?"},{"title":"Compliance deadline tracking","prompt":"I need to know which vulnerabilities in the CISA KEV catalog have remediation due dates coming up in the next 30 days — can you fetch the latest signed snapshot and filter for upcoming deadlines?"},{"title":"Ransomware exposure audit","prompt":"Pull the current CISA KEV snapshot and give me only the entries flagged as linked to known ransomware campaigns — I want the CVE IDs, affected products, and due dates."}],"resultDescription":"A signed JSON payload containing the full CISA KEV dataset snapshot, including: an array of CVE records (CVE ID, vulnerability name, vendor, product, date added, due date, required action, ransomware flag, notes URLs), a manifest with snapshot ID, SHA-256 hash, cryptographic signature, key ID, record count, upstream catalog version, fetch timestamp, and previous snapshot ID, plus licence metadata (CC0-1.0) and source attribution to CISA.","failureModes":["Payment not received or invalid USDC payment — returns HTTP 402 Payment Required","Upstream CISA source temporarily unavailable — snapshot may be stale (stale flag set to true in meta)","Invalid or malformed request parameters — returns 400 Bad Request","Service temporarily unavailable — returns 503"],"whenToPreferThis":"Choose this endpoint when you need a cryptographically signed, verifiable snapshot of the complete CISA KEV catalog with no account setup or API key, paying only per call in USDC. Prefer it over direct CISA API calls when you need tamper-evident signed data with provenance metadata, or when operating in an agent context that supports x402 micropayments. Best for compliance workflows, security audits, and pre-install checks where data integrity verification matters.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-13T12:44:24.789Z","isFirstParty":false,"canonicalSlug":"stack-facts-cisa-kev-snapshot-6bb38377"}