tooloracle.io · cve_lookup

CVE lookup + vulnerability check + threat intelligence — search NIST NVD + CISA KEV (Known Exploited Vulnerabilities) by keyword, vendor, product, or CVE ID. Returns CVSS score, severity rating, exploitability, MITRE ATT&CK technique mapping. For security agents, threat intelligence, EU DORA ICT risk assessment, NIS2 vendor due diligence, supply chain security audit, SOC2 evidence, ISO 27001 gap analysis.

Call it in 30 seconds

// npm i x402-fetch viem
import { wrapFetchWithPayment } from "x402-fetch";
import { createWalletClient, http } from "viem";
import { privateKeyToAccount } from "viem/accounts";
import { base } from "viem/chains";

const account = privateKeyToAccount(process.env.PRIVATE_KEY); // funds USDC on Base
const wallet = createWalletClient({ account, chain: base, transport: http() });
const fetchWithPay = wrapFetchWithPayment(fetch, wallet);

// Pays the $0.005 USDC automatically on the 402, then returns the real response:
const res = await fetchWithPay("https://tooloracle.io/v2/cve_lookup", { method: "POST" });
console.log(await res.json());

# pip install x402 eth-account httpx
import os, asyncio
from eth_account import Account
from x402.clients.httpx import x402HttpxClient

account = Account.from_key(os.environ["PRIVATE_KEY"])  # funds USDC on Base

async def main():
    async with x402HttpxClient(account=account) as client:
        # x402 handles the 402 -> pay ($0.005 USDC) -> retry automatically
        r = await client.get("https://tooloracle.io/v2/cve_lookup")
        print((await r.aread()).decode())

asyncio.run(main())

# 1) An unpaid request returns HTTP 402 with the exact payment terms:
curl -i -X POST "https://tooloracle.io/v2/cve_lookup" \
  -H 'content-type: application/json' \
  -d '{"keyword": {"description": "Search keyword, vendor, or product name", "required": true, "type": "string"}, "limit": {"description": "Max results (default 10, max 50)", "required": false, "type": "integer"}}'

# 2) Paying + retrying requires an x402 client that can sign the USDC
#    authorization (curl alone cannot). See the JS / Python tabs below.

New to x402? Read the 5-minute quickstart →