Vulnerability Intelligence

vuln-intel.x402tookit.com · 6 paid endpoints · listed 2026-11-02

Known vulnerabilities for an exact package version (npm, PyPI, Go, Maven...): fixed version, exploited-in-the-wild flag.

pendinglast check not yet
–valid x402 answers, 72 h
sharedUSDC received on Base, 7 days
2distinct payers, 7 days
10.5score (0-100)

Paid endpoints

MethodEndpointPriceNetworks
GETvuln-intel.x402tookit.com/epss-score
EPSS exploit-probability score and percentile for up to 10 CVEs, ranked, with a high/elevated/low verdict.
$0.02Polygon, Arbitrum, Base, Solana
GETvuln-intel.x402tookit.com/kev-check
Is a CVE in CISA's Known Exploited Vulnerabilities catalog? Date added, due date, ransomware use and required action.
$0.02Polygon, Arbitrum, Base, Solana
GETvuln-intel.x402tookit.com/kev-recent
CVEs CISA added to the Known Exploited Vulnerabilities catalog in the last 1-90 days, newest first, with vendor and product.
$0.02Polygon, Arbitrum, Base, Solana
GETvuln-intel.x402tookit.com/kev-vendor
Exploited-vulnerability record of a vendor in CISA KEV: total CVEs, products, ransomware use and latest additions.
$0.02Polygon, Arbitrum, Base, Solana
GETvuln-intel.x402tookit.com/vuln-package
Known vulnerabilities for an exact package version (npm, PyPI, Go, Maven...): fixed version, exploited-in-the-wild flag.
$0.02Polygon, Arbitrum, Base, Solana
GETvuln-intel.x402tookit.com/vuln-cve
Patch priority P0-P3 for a CVE from CISA exploited-in-the-wild status, EPSS exploit probability and advisory severity.
$0.03Polygon, Arbitrum, Base, Solana

Latest checks

WhenEndpointHTTPmsResult
Not checked yet.

Income on Base (7 days)

This provider's payout address is shared by several providers, so its income is not shown as its own.

Is this your API?

Add the live badge to your docs:
<a href="https://logicnodes.io/observatory/p/vuln-intel.x402tookit.com"><img src="https://logicnodes.io/observatory/badge/vuln-intel.x402tookit.com.svg" alt="x402 status"></a>
x402 status badge
Claim it for free with x402_provider_claim (sign with your payout address), and get an alert within minutes when it stops answering with x402_monitor_create ($5 for 30 days). Both work over MCP (https://logicnodes.io/mcp/v2) or POST https://logicnodes.io/v1/tools/<tool>.

Income is all USDC received by the provider's payout address on Base, whatever the source. Score: 0-100: 50 x share of checks in the last 72 h that returned valid x402 payment terms + 30 x min(1, log10(1 + USDC received in 7 days) / 4) + 20 x min(1, log10(1 + distinct payers in 7 days) / 3). A provider never checked scores on income only; income is all USDC received by its payout address on Base, whatever the source. JSON: /v1/observatory/providers/vuln-intel.x402tookit.com