P0: CVE, package and domain checks

Ingested from the official MCP Registry

FastDrop pulled this entry from the official MCP Registry as dev.workers.x402-bazaar-rank-worker.x402-bazaar-rank/cve-package-domain-security and probed the endpoint. The maker did not submit it, so the outbound link is not endorsed and the description is not theirs.

If this is your server, claim the listing to edit it and take ownership. The registry index lists everything else still awaiting a probe.

Tools this endpoint exposes

Read directly from the endpoint on 7 Nov 2026. Not supplied by the maker.

• vuln_cve

  Use when you need to triage a CVE: description, CVSS score and severity with the publisher named, dates, CWE, key references, FIRST EPSS probability with 30-day series and CISA KEV status. Returns the

• vuln_kev_new

  Use when you track exploited vulnerabilities: CVEs CISA added to its Known Exploited Vulnerabilities catalog since a date (since=YYYY-MM-DD), newest first, with date added, due date, vendor, product.

• package_risk

  Use when you must vet a dependency before installing or shipping it: pass ecosystem (npm, PyPI, Go, crates.io, RubyGems, Maven, NuGet). Returns the exact paid x402 request for your input (GET /package

• software_eol

  Use when you must know if a software version is still supported: pass product (python, nodejs, ubuntu, postgresql, ...) and version (3.8.10) for its release cycle, end-of-life date, supported flag. Re

• domain_report

  Use when you need one report on a domain: DNS records (A, AAAA, MX, NS, TXT, CAA) with SPF and DMARC parsed, RDAP registration for .com, .net and .org (registrar, dates, status, nameservers, DNSSEC).

• domain_report_batch

  Use when you must vet several domains at once (vendors, leads, lookalikes): up to 10 domains in one POST, each answered exactly like /domain/report. Returns the exact paid x402 request for your input

• ip_passport

  Use when you must profile an IP address in one call: ASN, AS name and country of its announced range, whether it is a current Tor exit node, and whether it lies in a public cloud range. Returns the ex

• check_infra

  Use when you must check infrastructure in one call: any of ip (ASN, Tor exit, cloud range), domain (status, TLS, robots), cve (CVSS, EPSS, CISA KEV). Returns the exact paid x402 request for your input