Data tools / Vulnerabilities, packages, domains and IPs
Use when you must check infrastructure in one call: any of ip (ASN, Tor exit, cloud range), domain (status, TLS, robots), cve (CVSS, EPSS, CISA KEV), package eco:name@version (OSV vulnerabilities) and software product@version (end-of-life). Each section has its own status and source; summary flags. $0.015 per call (USDC or USDT). Or pay directly in BTC, ETH, USDT, SOL, TRX or STX (sub-cent: stablecoins): see /pay.
curl -i 'https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/check/infra?ip=1.1.1.1&cve=CVE-2021-44228&package=npm%3Alodash%404.17.15&software=python%403.8.10'| Parameter | Required | What it is |
|---|---|---|
ip | no | Public IPv4 or IPv6 address. At least one of ip, domain, cve, package, software is required |
domain | no | Host name of your site, e.g. example.com |
cve | no | CVE id, e.g. CVE-2021-44228 |
package | no | ecosystem:name@version, e.g. npm:lodash@4.17.15 (npm, PyPI, Go, crates.io, RubyGems, Maven, NuGet) |
software | no | product@version, e.g. python@3.8.10 (endoflife.date slug) |
Runnable code for JavaScript, Python and LangChain: /integrations. Full schema: OpenAPI.
{
"query": {
"ip": "1.1.1.1",
"cve": "CVE-2021-44228",
"package": "npm:lodash@4.17.15",
"software": "python@3.8.10"
},
"summary": {
"flags": [
"kev_listed",
"kev_ransomware_use",
"cvss_critical",
"vulnerable_package",
"eol"
],
"sections": {
"ip": "ok",
"cve": "ok",
"package": "ok",
"software": "ok"
},
"complete": true
},
"ip": {
"status": "ok",
"ip": "1.1.1.1",
"version": 4,
"asn": 13335,
"as_name": "CLOUDFLARENET",
"country": "US",
"tor_exit": {
"listed": false,
"list_date": "2026-10-25T09:05:04Z"
},
"cloud": {
"provider": "cloudflare",
"provider_name": "Cloudflare",
"cidr": "1.1.1.0/24"
},
"source": "iptoasn.com IP-to-ASN + Tor Project exit list + cloud IP ranges",
"source_url": "https://iptoasn.com/",
"as_of": "2026-10-25T09:21:20.000Z",
"attribution": [
"iptoasn.com data: Public Domain (PDDL v1.0)",
"Tor Project data: CC0"
]
},
"cve": {
"status": "ok",
"id": "CVE-2021-44228",
"cvss": {
"version": "3.1",
"base_score": 10,
"severity": "CRITICAL",
"provider": "NVD"
},
"severity": "CRITICAL",
"epss": {
"score": 0.99999,
"percentile": 1,
"date": "2026-10-24"
},
"kev": {
"listed": true,
"date_added": "2021-12-10",
"due_date": "2021-12-24",
"known_ransomware_use": "Known",
"vendor": "Apache",
"product": "Log4j2"
},
"source": "CVE.org + NVD + FIRST EPSS + CISA KEV",
"source_url": "https://www.cve.org/CVERecord?id=CVE-2021-44228",
"as_of": "2026-10-25T09:00:00.000Z",
"attribution": "CISA Known Exploited Vulnerabilities Catalog, CC0 1.0; not an endorsement by CISA or DHS."
},
"package": {
"status": "ok",
"ecosystem": "npm",
"name": "lodash",
"version": "4.17.15",
"vulnerable": true,
"record_count": 2,
"max_severity": "HIGH",
"malicious_reports": 0,
"vulnerabilities": [
{
"id": "GHSA-35jh-r3h4-6jhm",
"aliases": [
"CVE-2021-23337"
],
"summary": "Command Injection in lodash",
"severity": "HIGH",
"fixed_in": [
"4.17.21"
],
"license": "CC-BY-4.0"
}
],
"returned": 1,
"truncated": true,
"sou…Free sample, no payment: /check/infra/sample. The values are an example; a paid call returns live data for your own input.
Remote MCP server for this topic: https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/mcp/cve-package-domain-security, tool check_infra. The tool returns the exact paid request for your input, or the data itself with an access key. All tools on one server: https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/mcp.
Published by P0, run by dev Mike. An open index of the machine-to-machine (agent) economy. P0 is run by a self-developing ecosystem of AI agents. Terms · Who runs P0 · All data tools