P0: CVE, package and domain checks

dev.workers.x402-bazaar-rank-worker.x402-bazaar-rank/cve-package-domain-securityVersion 1.0.2

CVE with EPSS and CISA KEV, package risk, software EOL, domain and IP reports, pay per call

Status

Responds549 msNov 14, 2026, 14:34 UTCAnswered our handshake without sign-in.

Registry data may be out of date

We could not refresh it, so this page shows the last copy.

Last checked: Nov 14, 2026, 14:34 UTC
Latency: 549 ms
Remotes responding: 1 of 1
Sign-in: No sign-in
Hosting: Hosted outside the EU (detected)
Registry data as of: Nov 14, 2026, 22:14 UTC

Data from the official MCP Registry, checked by run.zero. How we check

Connect

Streamable HTTP

https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/mcp/cve-package-domain-securityResponds549 msNov 14, 2026, 14:34 UTC

No sign-in

Claude Code

claude mcp add --transport http cve-package-domain-security https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/mcp/cve-package-domain-security

Claude Desktop and claude.ai

1
2
3

Settings > Connectors > Add custom connector
Name: cve-package-domain-security
Remote MCP server URL: https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/mcp/cve-package-domain-security

Cursor

{
  "mcpServers": {
    "cve-package-domain-security": {
      "url": "https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/mcp/cve-package-domain-security"
    }
  }
}

VS Code

code --add-mcp '{"name":"cve-package-domain-security","type":"http","url":"https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/mcp/cve-package-domain-security"}'

Built your own server? run.zero hosts MCP servers on European infrastructure.

Host your own MCP server on run.zero

Tools

9 tools

Tools of P0: CVE, package and domain checks
	Description		Read-only	Idempotent	Open world
`check_infra`Use when you need to check infrastructure in one call: any combination (at least one) of ip (ASN, Tor exit, cloud range), domain (status, TLS, robots), cve (CVSS, EPSS, CISA KEV). Returns the paid x402 request for your input (GET /check/infra, $0.015 per call; schema linked). Call that URL with an x402 or MPP client to get the data. Bad input is refused before any charge. For one input use ip_passport, vuln_cve, package_risk or software_eol; for DNS, SPF, DMARC and registration use domain_report; for sitemap or WordPress use site_snapshot. First call each day returns the data itself, free; later calls return the paid request.	Use when you need to check infrastructure in one call: any combination (at least one) of ip (ASN, Tor exit, cloud range), domain (status, TLS, robots), cve (CVSS, EPSS, CISA KEV). Returns the paid x402 request for your input (GET /check/infra, $0.015 per call; schema linked). Call that URL with an x402 or MPP client to get the data. Bad input is refused before any charge. For one input use ip_passport, vuln_cve, package_risk or software_eol; for DNS, SPF, DMARC and registration use domain_report; for sitemap or WordPress use site_snapshot. First call each day returns the data itself, free; later calls return the paid request.	No	Yes	Yes	Yes
`domain_report`Use when you need one report on a domain: DNS records (A, AAAA, MX, NS, TXT, CAA) with SPF and DMARC parsed, RDAP registration for .com, .net and .org (registrar, dates, status, nameservers, DNSSEC). Returns the paid x402 request for your input (GET /domain/report, $0.005 per call; schema linked). Call that URL with an x402 or MPP client to get the data. Bad input is refused before any charge. For several domains use domain_report_batch. First call each day returns the data itself, free; later calls return the paid request.	Use when you need one report on a domain: DNS records (A, AAAA, MX, NS, TXT, CAA) with SPF and DMARC parsed, RDAP registration for .com, .net and .org (registrar, dates, status, nameservers, DNSSEC). Returns the paid x402 request for your input (GET /domain/report, $0.005 per call; schema linked). Call that URL with an x402 or MPP client to get the data. Bad input is refused before any charge. For several domains use domain_report_batch. First call each day returns the data itself, free; later calls return the paid request.	No	Yes	Yes	Yes
`domain_report_batch`Use when you need to vet several domains at once (vendors, leads, lookalikes): up to 10 domains in one POST, each answered exactly like /domain/report. Returns the paid x402 request for your input (POST /domain/report/batch, $0.05 per call; schema linked). POST that JSON body to the URL with an x402 or MPP client to get the data. Bad input is refused before any charge. For one domain use domain_report. First call each day returns the data itself, free; later calls return the paid request.	Use when you need to vet several domains at once (vendors, leads, lookalikes): up to 10 domains in one POST, each answered exactly like /domain/report. Returns the paid x402 request for your input (POST /domain/report/batch, $0.05 per call; schema linked). POST that JSON body to the URL with an x402 or MPP client to get the data. Bad input is refused before any charge. For one domain use domain_report. First call each day returns the data itself, free; later calls return the paid request.	No	Yes	Yes	Yes
`ip_passport`Use when you need to profile an IP address in one call: ASN, AS name and country of its announced range, whether it is a current Tor exit node, and whether it lies in a public cloud range. Returns the paid x402 request for your input (GET /ip/passport, $0.003 per call; schema linked). Call that URL with an x402 or MPP client to get the data. Bad input is refused before any charge. One public IP only (private and reserved addresses are refused before any charge); to check it together with a domain, CVE, package or software version in one call use check_infra. First call each day returns the data itself, free; later calls return the paid request.	Use when you need to profile an IP address in one call: ASN, AS name and country of its announced range, whether it is a current Tor exit node, and whether it lies in a public cloud range. Returns the paid x402 request for your input (GET /ip/passport, $0.003 per call; schema linked). Call that URL with an x402 or MPP client to get the data. Bad input is refused before any charge. One public IP only (private and reserved addresses are refused before any charge); to check it together with a domain, CVE, package or software version in one call use check_infra. First call each day returns the data itself, free; later calls return the paid request.	No	Yes	Yes	Yes
`package_risk`Use when you need to vet a dependency before installing or shipping it: pass ecosystem (npm, PyPI, Go, crates.io, RubyGems, Maven, NuGet). Returns the paid x402 request for your input (GET /package/risk, $0.005 per call; schema linked). Call that URL with an x402 or MPP client to get the data. Bad input is refused before any charge. One exact package version. For a single CVE id use vuln_cve; to know whether a product or runtime version is still supported use software_eol. First call each day returns the data itself, free; later calls return the paid request.	Use when you need to vet a dependency before installing or shipping it: pass ecosystem (npm, PyPI, Go, crates.io, RubyGems, Maven, NuGet). Returns the paid x402 request for your input (GET /package/risk, $0.005 per call; schema linked). Call that URL with an x402 or MPP client to get the data. Bad input is refused before any charge. One exact package version. For a single CVE id use vuln_cve; to know whether a product or runtime version is still supported use software_eol. First call each day returns the data itself, free; later calls return the paid request.	No	Yes	Yes	Yes
`site_snapshot`Use when you need a health and content snapshot of your own website: HTTP status, final URL, TLS, server, robots.txt and sitemap, plus WordPress REST. Returns the paid x402 request for your input (GET /site/snapshot, $0.005 per call; schema linked). Call that URL with an x402 or MPP client to get the data. Bad input is refused before any charge. For DNS, SPF, DMARC and registration use domain_report; to check a site together with an IP, CVE or package use check_infra. First call each day returns the data itself, free; later calls return the paid request.	Use when you need a health and content snapshot of your own website: HTTP status, final URL, TLS, server, robots.txt and sitemap, plus WordPress REST. Returns the paid x402 request for your input (GET /site/snapshot, $0.005 per call; schema linked). Call that URL with an x402 or MPP client to get the data. Bad input is refused before any charge. For DNS, SPF, DMARC and registration use domain_report; to check a site together with an IP, CVE or package use check_infra. First call each day returns the data itself, free; later calls return the paid request.	No	Yes	Yes	Yes
`software_eol`Use when you need to know if a software version is still supported: pass product (python, nodejs, ubuntu, postgresql, ...) and version (3.8.10) for its release cycle, end-of-life date. Returns the paid x402 request for your input (GET /software/eol, $0.002 per call; schema linked). Call that URL with an x402 or MPP client to get the data. Bad input is refused before any charge. Support and end-of-life status only; for known vulnerabilities of a package version use package_risk, of a CVE id use vuln_cve. First call each day returns the data itself, free; later calls return the paid request.	Use when you need to know if a software version is still supported: pass product (python, nodejs, ubuntu, postgresql, ...) and version (3.8.10) for its release cycle, end-of-life date. Returns the paid x402 request for your input (GET /software/eol, $0.002 per call; schema linked). Call that URL with an x402 or MPP client to get the data. Bad input is refused before any charge. Support and end-of-life status only; for known vulnerabilities of a package version use package_risk, of a CVE id use vuln_cve. First call each day returns the data itself, free; later calls return the paid request.	No	Yes	Yes	Yes
`vuln_cve`Use when you need to triage a CVE: description, CVSS per publisher, dates, CWE, key references, affected products, CISA SSVC, FIRST EPSS with a 30-day series and CISA KEV status in one call. Returns the paid x402 request for your input (GET /vuln/cve, $0.005 per call; schema linked). Call that URL with an x402 or MPP client to get the data. Bad input is refused before any charge. One CVE id. For CVEs newly added to CISA KEV since a date use vuln_kev_new; for the vulnerabilities of a package version use package_risk. First call each day returns the data itself, free; later calls return the paid request.	Use when you need to triage a CVE: description, CVSS per publisher, dates, CWE, key references, affected products, CISA SSVC, FIRST EPSS with a 30-day series and CISA KEV status in one call. Returns the paid x402 request for your input (GET /vuln/cve, $0.005 per call; schema linked). Call that URL with an x402 or MPP client to get the data. Bad input is refused before any charge. One CVE id. For CVEs newly added to CISA KEV since a date use vuln_kev_new; for the vulnerabilities of a package version use package_risk. First call each day returns the data itself, free; later calls return the paid request.	No	Yes	Yes	Yes
`vuln_kev_new`Use when you track exploited vulnerabilities: CVEs CISA added to its Known Exploited Vulnerabilities catalog since a date (since=YYYY-MM-DD), newest first, with date added, due date, vendor, product. Returns the paid x402 request for your input (GET /vuln/kev/new, $0.003 per call; schema linked). Call that URL with an x402 or MPP client to get the data. Bad input is refused before any charge. KEV additions since a date, newest first (limit up to 200), not a lookup; for CVSS, EPSS and KEV status of one CVE use vuln_cve. First call each day returns the data itself, free; later calls return the paid request.	Use when you track exploited vulnerabilities: CVEs CISA added to its Known Exploited Vulnerabilities catalog since a date (since=YYYY-MM-DD), newest first, with date added, due date, vendor, product. Returns the paid x402 request for your input (GET /vuln/kev/new, $0.003 per call; schema linked). Call that URL with an x402 or MPP client to get the data. Bad input is refused before any charge. KEV additions since a date, newest first (limit up to 200), not a lookup; for CVSS, EPSS and KEV status of one CVE use vuln_cve. First call each day returns the data itself, free; later calls return the paid request.	No	Yes	Yes	Yes

Details

Registry status: Active
Published: Nov 13, 2026
Updated: Nov 13, 2026
Website: https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/tools#cve-package-domain-security⁠ (opens in a new tab)
Repository: Not given
Categories (suggested): SecuritySuggested categories are assigned automatically from the registry text and may be wrong. Verified operators can correct them.
GDPR: Not declared

Are you the operator? Claim this listing