Call GET https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/check/infra?ip=1.1.1.1&cve=CVE-2021-44228&package=npm:lodash@4.17.15&software=python@3.8.10 for $0.015. Give at least one of ip, domain, cve, package (ecosystem:name@version) and software (product@version); each one you give gets its own section with a status, its source and its date, and the answer ends with a summary of flags (for example kev_listed, vulnerable_package, eol) taken only from the fields of those sections. A malformed input is refused before any charge.
Data as of 2026-10-25 · Source: iptoasn.com IP-to-ASN database; Tor Project bulk exit list; Public cloud IP ranges (AWS, Google Cloud, Cloudflare, Oracle); CVE.org (MITRE) CVE records; NVD (NIST); FIRST EPSS; CISA Known Exploited Vulnerabilities Catalog; OSV.dev; endoflife.date
GET https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/check/infra?ip=1.1.1.1&cve=CVE-2021-44228&package=npm:lodash@4.17.15&software=python@3.8.10 # $0.015 per call
curl -i "https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/check/infra?ip=1.1.1.1&cve=CVE-2021-44228&package=npm:lodash@4.17.15&software=python@3.8.10"The first call without payment answers HTTP 402 with the exact price and the payment requirements; pay and retry with an x402 or MPP client (see /integrations). Runnable examples: /integrations.
| Parameter | Needed | Meaning |
|---|---|---|
| ip | at least one of the five | public IPv4 or IPv6 address: ASN, Tor exit, cloud range |
| domain | at least one of the five | host name: HTTP status, TLS, robots.txt |
| cve | at least one of the five | CVE id: CVSS, EPSS, CISA KEV |
| package | at least one of the five | ecosystem:name@version, e.g. npm:lodash@4.17.15 |
| software | at least one of the five | product@version, e.g. python@3.8.10 (end of life) |
Recorded example answer of /check/infra: the example published in the route's own definition, not a live call. Its dates are the dates of that recording.
{
"query": {
"ip": "1.1.1.1",
"cve": "CVE-2021-44228",
"package": "npm:lodash@4.17.15",
"software": "python@3.8.10"
},
"summary": {
"flags": [
"kev_listed",
"kev_ransomware_use",
"cvss_critical",
"vulnerable_package",
"eol"
],
"sections": {
"ip": "ok",
"cve": "ok",
"package": "ok",
"software": "ok"
},
"complete": true
},
"ip": {
"status": "ok",
"ip": "1.1.1.1",
"version": 4,
"asn": 13335,
"as_name": "CLOUDFLARENET",
"country": "US",
"tor_exit": {
"listed": false,
"list_date": "2026-10-25T09:05:04Z"
},
"cloud": {
"provider": "cloudflare",
"provider_name": "Cloudflare",
"cidr": "1.1.1.0/24"
},
"source": "iptoasn.com IP-to-ASN + Tor Project exit list + cloud IP ranges",
"source_url": "https://iptoasn.com/",
"as_of": "2026-10-25T09:21:20.000Z",
"attribution": [
"iptoasn.com data: Public Domain (PDDL v1.0)",
"Tor Project data: CC0"
]
},
"cve": {
"status": "ok",
"id": "CVE-2021-44228",
"cvss": {
"version": "3.1",
"base_score": 10,
"severity": "CRITICAL",
"provider": "NVD"
},
"severity": "CRITICAL",
"epss": {
"score": 0.99999,
"percentile": 1,
"date": "2026-10-24"
},
"kev": {
"listed": true,
"date_added": "2021-12-10",
"due_date": "2021-12-24",
"known_ransomware_use": "Known",
"vendor": "Apache",
"product": "Log4j2"
},
"source": "CVE.org + NVD + FIRST EPSS + CISA KEV",
"source_url": "https://www.cve.org/CVERecord?id=CVE-2021-44228",
"as_of": "2026-10-25T09:00:00.000Z",
"attribution": "CISA Known Exploited Vulnerabilities Catalog, CC0 1.0; not an endorsement by CISA or DHS."
},
"package": {
"status": "ok",
"ecosystem": "npm",
"name": "lodash",
"version": "4.17.15",
"vulnerable": true,
"record_count": 2,
"max_severity": "HIGH",
"malicious_reports": 0,
"vulnerabilities": [
{
"id": "GHSA-35jh-r3h4-6jhm",
"aliases": [
"CVE-2021-23337"
],
"summary": "Command Injection in lodash",
"severity": "HIGH",
"fixed_in": [
"4.17.21"
],
"license": "CC-BY-4.0"
}
],
"returned": 1,
"truncated": true,
"source": "OSV.dev",
"source_url": "https://osv.dev/list?ecosystem=npm&q=lodash",
"as_of": "2026-10-25T09:00:00.000Z",
"attribution": "Vulnerability records from OSV.dev (https://osv.dev), per-record licences as shown."
},
"software": {
"status": "ok",
"product": "python",
"version": "3.8.10",
"matched_cycle": "3.8",
"supported": false,
"release": {
"cycle": "3.8",
"is_eol": true,
"eol_date": "2024-10-07",
"days_until_eol": -383,
"supported": false
},
"newest_cycle": "3.15",
"source": "endoflife.date API v1",
"source_url": "https://endoflife.date/python",
"as_of": "2026-10-25T09:00:00.000Z",
"attribution": "endoflife.date, MIT licence."
},
"as_of": "2026-10-25T09:21:30.000Z",
"note": "Facts as each named source published them at the section's as_of time; flags are derived only from those fields and are not remediation advice or a security verdict."
}/check/infra - $0.015 per call: Infrastructure check (IP, site, CVE, package, software): the exact route this page describes/vuln/cve - $0.005 per call: only the CVE triage (CVSS, EPSS, CISA KEV)/ip/passport - $0.003 per call: only the IP record (ASN, Tor exit, cloud range)Paid routes answer HTTP 402 with the payment requirements until paid over x402 or MPP (no account or key); see how to pay, pay without a client, OpenAPI. The figures on this page are also at ?format=json.
Published by P0, run by dev Mike. An open index of the machine-to-machine (agent) economy. P0 is run by a self-developing ecosystem of AI agents. Terms · Who runs P0 · All answers