dev.workers.x402-bazaar-rank-worker.x402-bazaar-rank/cve-package-domain-security · v1.0.0 · security
P0: CVE, package and domain checks is healthy: it completed an MCP handshake in 168 ms and exposes 9 tools.
CVE with EPSS and CISA KEV, package risk, software EOL, domain and IP reports, pay per call
Endpoint: https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/mcp/cve-package-domain-security (streamable-http)
No repository listed · Website · JSON · Add to my inventory
| Users (last 30 days) | 0 |
| Handshake | Healthy |
| Auth needed | None |
| Tool count | 9 |
| Latency | 168 ms |
| Last checked (UTC) | 2026-11-07T03:30:46.360Z |
| Checked (UTC) | Status | Latency | Error |
|---|---|---|---|
| 2026-11-07T03:30:46.360Z | Healthy | 168 |
vuln_cve | Use when you need to triage a CVE: description, CVSS score and severity with the publisher named, dates, CWE, key references, FIRST EPSS probability with 30-day series and CISA KEV status. Returns the exact paid x402 request for your input (GET /vuln/cve, $0.005 per call), with a link to the full sc |
vuln_kev_new | Use when you track exploited vulnerabilities: CVEs CISA added to its Known Exploited Vulnerabilities catalog since a date (since=YYYY-MM-DD), newest first, with date added, due date, vendor, product. Returns the exact paid x402 request for your input (GET /vuln/kev/new, $0.003 per call), with a link |
package_risk | Use when you must vet a dependency before installing or shipping it: pass ecosystem (npm, PyPI, Go, crates.io, RubyGems, Maven, NuGet). Returns the exact paid x402 request for your input (GET /package/risk, $0.005 per call), with a link to the full schema; call that URL with an x402 or MPP client to |
software_eol | Use when you must know if a software version is still supported: pass product (python, nodejs, ubuntu, postgresql, ...) and version (3.8.10) for its release cycle, end-of-life date, supported flag. Returns the exact paid x402 request for your input (GET /software/eol, $0.002 per call), with a link t |
domain_report | Use when you need one report on a domain: DNS records (A, AAAA, MX, NS, TXT, CAA) with SPF and DMARC parsed, RDAP registration for .com, .net and .org (registrar, dates, status, nameservers, DNSSEC). Returns the exact paid x402 request for your input (GET /domain/report, $0.005 per call), with a lin |
domain_report_batch | Use when you must vet several domains at once (vendors, leads, lookalikes): up to 10 domains in one POST, each answered exactly like /domain/report. Returns the exact paid x402 request for your input (POST /domain/report/batch, $0.05 per call), with a link to the full schema; POST that JSON body to |
ip_passport | Use when you must profile an IP address in one call: ASN, AS name and country of its announced range, whether it is a current Tor exit node, and whether it lies in a public cloud range. Returns the exact paid x402 request for your input (GET /ip/passport, $0.003 per call), with a link to the full sc |
check_infra | Use when you must check infrastructure in one call: any of ip (ASN, Tor exit, cloud range), domain (status, TLS, robots), cve (CVSS, EPSS, CISA KEV). Returns the exact paid x402 request for your input (GET /check/infra, $0.015 per call), with a link to the full schema; call that URL with an x402 or |
site_snapshot | Use when you need a health and content snapshot of your own website: HTTP status, final URL, TLS, server, robots.txt and sitemap, plus WordPress REST. Returns the exact paid x402 request for your input (GET /site/snapshot, $0.005 per call), with a link to the full schema; call that URL with an x402 |