{"uid":"cap_ztSpoqXLTI44of9mx7qr5","slug":"stack-facts-kev-check-8cfe2b46","name":"Stack Facts KEV Check","description":"Check a package before install: malware, known vulnerabilities (OSV), exploited CVEs (CISA KEV) and end-of-life, plus LLM prices; signed answers, pay per call in USDC, no account or API key.","url":"https://g5joilnmeep4ntz3nwezxt5dmu.srv.us/v1/kev/check?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"cves":{"type":"array","items":{"type":"string","pattern":"^[Cc][Vv][Ee]-\\d{4}-\\d{4,}$","maxLength":32},"maxItems":100,"minItems":1}}},"responseSchema":{"type":"json","example":{"data":{"count":2,"in_kev":1,"results":[{"cve":"CVE-2021-44228","name":"Apache Log4j2 Remote Code Execu…","in_kev":true,"vendor":"Apache","product":"Log4j2","due_date":"2021-12-24","date_added":"2021-12-10","notes_urls":["https://nvd.nist.gov/vuln/detai…"],"required_action":"For all affected software asset…","known_ransomware":true}],"catalog_version":"2026.10.10"},"meta":{"as_of":"2026-10-09T06:00:00Z","stale":false,"key_id":"sf-test-1","notice":"Normalised (modified) from the …","sha256":"f4586cc54bee30640f4364100eb70b7…","source":"https://www.cisa.gov/sites/defa…","dataset":"kev","licence":"CC0-1.0","signature":"Tne7KlsSRbohZK45rjItkYBKFOd8sEd…","attribution":"Source: CISA Known Exploited Vu…","snapshot_id":"kev-20261009T060000Z-f4586cc5","manifest_url":"/v1/kev/manifest","retrieved_at":"2026-10-09T06:00:00.000Z"}}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.005","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.005/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_ru7uN1VOzvGFL6abKlOON","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.005","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Checks one or more CVE identifiers against the CISA Known Exploited Vulnerabilities (KEV) catalog, returning exploitation status, vendor/product info, due dates, and ransomware association.","exampleAgentPrompt":"Can you check whether CVE-2021-44228 and CVE-2023-23397 are in the CISA Known Exploited Vulnerabilities catalog and whether either is linked to ransomware?","exampleUseCases":[{"title":"Pre-deploy vulnerability triage","prompt":"I have a list of CVEs from my latest security scan — CVE-2021-44228, CVE-2020-1472, and CVE-2022-30190 — can you check which ones are in the CISA KEV list and flag any tied to ransomware?"},{"title":"Package install safety check","prompt":"Before I install this dependency, can you check if CVE-2017-5638 is in CISA's known exploited vulnerabilities catalog and what the required remediation action is?"},{"title":"Compliance deadline tracking","prompt":"My team needs to know the CISA KEV remediation due dates for CVE-2023-23397 and CVE-2022-41082 so we can prioritize patching — can you pull those details?"}],"resultDescription":"Returns a JSON object with per-CVE results including whether each CVE is in the CISA KEV catalog, the vendor and product name, date added, remediation due date, known ransomware association flag, required action text, and reference URLs. Also includes metadata: catalog version, snapshot ID, data freshness timestamp, staleness flag, CC0 license attribution, and a cryptographic SHA-256 signature for answer integrity verification.","failureModes":["Invalid CVE format (not matching CVE-YYYY-NNNNN pattern) causes validation error","Empty or missing cves array returns an error","More than 100 CVEs in a single request exceeds the maxItems limit","CVE not present in KEV catalog returns in_kev: false (not an error)","Payment failure via x402 protocol prevents response","Stale catalog data indicated by meta.stale: true field","Signature verification failure may indicate tampered response"],"whenToPreferThis":"Choose this endpoint when you need to specifically check whether CVEs are in the CISA Known Exploited Vulnerabilities catalog — a high-signal authoritative list of vulnerabilities actively exploited in the wild. It is ideal for prioritizing remediation, compliance workflows (CISA BOD 22-01), or pre-install security checks. Prefer this over general CVE databases when ransomware association and federal remediation deadlines are relevant. It requires no account or API key, uses pay-per-call USDC micropayments via x402, and returns cryptographically signed answers for auditability.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-13T12:44:37.501Z","isFirstParty":false,"canonicalSlug":"stack-facts-kev-check-8cfe2b46"}