protogrid

Search / dev.workers.x402-bazaar-rank-worker.x402-bazaar-rank/cve-package-domain-security

P0: CVE, package and domain checks

R0· no sign-in

CVE with EPSS and CISA KEV, package risk, software EOL, domain and IP reports, pay per call

v1.0.0 · active · website · descriptor JSON · versions

An agent can connect right now, no human step.Remote endpoint, no authentication, reachable on the last probe.
Quality89new
Trust83of 100
Uptime, 30 days100%
Latency p5095 ms

Connect

8 clients · secrets stay placeholders
{
  "mcpServers": {
    "cve-package-domain-security": {
      "type": "http",
      "url": "https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/mcp/cve-package-domain-security"
    }
  }
}
claude mcp add --transport http cve-package-domain-security https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/mcp/cve-package-domain-security
[mcp_servers.cve-package-domain-security]
url = "https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/mcp/cve-package-domain-security"
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "cve-package-domain-security": {
      "type": "remote",
      "url": "https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/mcp/cve-package-domain-security",
      "enabled": true
    }
  }
}
{
  "mcpServers": {
    "cve-package-domain-security": {
      "type": "http",
      "url": "https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/mcp/cve-package-domain-security"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=cve-package-domain-security&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8veDQwMi1iYXphYXItcmFuay54NDAyLWJhemFhci1yYW5rLXdvcmtlci53b3JrZXJzLmRldi9tY3AvY3ZlLXBhY2thZ2UtZG9tYWluLXNlY3VyaXR5In0%3D"
}
{
  "servers": {
    "cve-package-domain-security": {
      "type": "http",
      "url": "https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/mcp/cve-package-domain-security"
    }
  }
}
{
  "mcpServers": {
    "cve-package-domain-security": {
      "httpUrl": "https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/mcp/cve-package-domain-security"
    }
  }
}
extensions:
  "cve-package-domain-security":
    enabled: true
    name: "cve-package-domain-security"
    type: streamable_http
    uri: "https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/mcp/cve-package-domain-security"
    timeout: 300

Quality 89 / 100new

protocol75 · weight 25
  • warn
    protocol.modernnewest supported version is 2025-06-18; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
  • n/a
    protocol.statelessonly applies to 2026-07-28 servers
  • pass
    protocol.transportstreamable HTTP
  • n/a
    protocol.list_ttlonly applies to 2026-07-28 servers
authorizationn/a · weight 15
  • n/a
    auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
  • n/a
    auth.secret_in_urlno templated URL
tool hygiene100 · weight 30
  • pass
    tools.descriptionsevery tool has a description
  • pass
    tools.description_lengthdescriptions are concise
  • pass
    tools.schemasevery tool has an object input schema
  • pass
    tools.annotations9 of 9 tools declare readOnlyHint or destructiveHint
  • pass
    tools.directory_hintsevery tool declares readOnlyHint, destructiveHint, idempotentHint and openWorldHint
  • pass
    tools.token_costabout 2,592 tokens to load every tool
  • pass
    tools.api_dumptools are not a one-to-one API dump
stabilityn/a · weight 15
  • n/a
    stability.changes, stability.rug_pulltool history recorded for 0 of the 7 days needed
dependenciesn/a · weight 15
  • n/a
    deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

9 tools, about 2,592 tokens to load them all · tool set c86d240f5ced · tools last changed 2026-11-07 · checked 2026-11-07 17:28 UTC

Tool changes

  • site_snapshotchangeddescription
    before

    Use when you need a health and content snapshot of your own website: HTTP status, final URL, TLS, server, robots.txt and sitemap, plus WordPress REST. Returns the exact paid x402 request for your input (GET /site/snapshot, $0.005 per call), with a link to the full schema; call that URL with an x402 or MPP client to get the data. Bad input is refused before any charge. With a P0 access key (header Authorization: Bearer p0k_…, buy one at https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/keys/buy?usd=5) this tool makes the paid call itself and returns the data, deducting the listed price.

    after · 92% of words in common

    Use when you need a health and content snapshot of your own website: HTTP status, final URL, TLS, server, robots.txt and sitemap, plus WordPress REST. Returns the exact paid x402 request for your input (GET /site/snapshot, $0.005 per call), with a link to the full schema; call that URL with an x402 or MPP client to get the data. Bad input is refused before any charge. With a P0 access key (header Authorization: Bearer p0k_…, buy one at https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/keys/buy?usd=5) this tool makes the paid call itself and returns the data, deducting the listed price. First call each day returns the data itself, free; later calls return the paid request.

  • check_infrachangeddescription
    before

    Use when you must check infrastructure in one call: any of ip (ASN, Tor exit, cloud range), domain (status, TLS, robots), cve (CVSS, EPSS, CISA KEV). Returns the exact paid x402 request for your input (GET /check/infra, $0.015 per call), with a link to the full schema; call that URL with an x402 or MPP client to get the data. Bad input is refused before any charge. With a P0 access key (header Authorization: Bearer p0k_…, buy one at https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/keys/buy?usd=5) this tool makes the paid call itself and returns the data, deducting the listed price.

    after · 92% of words in common

    Use when you must check infrastructure in one call: any of ip (ASN, Tor exit, cloud range), domain (status, TLS, robots), cve (CVSS, EPSS, CISA KEV). Returns the exact paid x402 request for your input (GET /check/infra, $0.015 per call), with a link to the full schema; call that URL with an x402 or MPP client to get the data. Bad input is refused before any charge. With a P0 access key (header Authorization: Bearer p0k_…, buy one at https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/keys/buy?usd=5) this tool makes the paid call itself and returns the data, deducting the listed price. First call each day returns the data itself, free; later calls return the paid request.

  • ip_passportchangeddescription
    before

    Use when you must profile an IP address in one call: ASN, AS name and country of its announced range, whether it is a current Tor exit node, and whether it lies in a public cloud range. Returns the exact paid x402 request for your input (GET /ip/passport, $0.003 per call), with a link to the full schema; call that URL with an x402 or MPP client to get the data. Bad input is refused before any charge. With a P0 access key (header Authorization: Bearer p0k_…, buy one at https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/keys/buy?usd=5) this tool makes the paid call itself and returns the data, deducting the listed price.

    after · 93% of words in common

    Use when you must profile an IP address in one call: ASN, AS name and country of its announced range, whether it is a current Tor exit node, and whether it lies in a public cloud range. Returns the exact paid x402 request for your input (GET /ip/passport, $0.003 per call), with a link to the full schema; call that URL with an x402 or MPP client to get the data. Bad input is refused before any charge. With a P0 access key (header Authorization: Bearer p0k_…, buy one at https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/keys/buy?usd=5) this tool makes the paid call itself and returns the data, deducting the listed price. First call each day returns the data itself, free; later calls return the paid request.

  • domain_report_batchchangeddescription
    before

    Use when you must vet several domains at once (vendors, leads, lookalikes): up to 10 domains in one POST, each answered exactly like /domain/report. Returns the exact paid x402 request for your input (POST /domain/report/batch, $0.05 per call), with a link to the full schema; POST that JSON body to the URL with an x402 or MPP client to get the data. Bad input is refused before any charge. For one domain use domain_report. With a P0 access key (header Authorization: Bearer p0k_…, buy one at https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/keys/buy?usd=5) this tool makes the paid call itself and returns the data, deducting the listed price.

    after · 93% of words in common

    Use when you must vet several domains at once (vendors, leads, lookalikes): up to 10 domains in one POST, each answered exactly like /domain/report. Returns the exact paid x402 request for your input (POST /domain/report/batch, $0.05 per call), with a link to the full schema; POST that JSON body to the URL with an x402 or MPP client to get the data. Bad input is refused before any charge. For one domain use domain_report. With a P0 access key (header Authorization: Bearer p0k_…, buy one at https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/keys/buy?usd=5) this tool makes the paid call itself and returns the data, deducting the listed price. First call each day returns the data itself, free; later calls return the paid request.

  • domain_reportchangeddescription
    before

    Use when you need one report on a domain: DNS records (A, AAAA, MX, NS, TXT, CAA) with SPF and DMARC parsed, RDAP registration for .com, .net and .org (registrar, dates, status, nameservers, DNSSEC). Returns the exact paid x402 request for your input (GET /domain/report, $0.005 per call), with a link to the full schema; call that URL with an x402 or MPP client to get the data. Bad input is refused before any charge. For several domains use domain_report_batch; for a single mailbox use check_email_address. With a P0 access key (header Authorization: Bearer p0k_…, buy one at https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/keys/buy?usd=5) this tool makes the paid call itself and returns the data, deducting the listed price.

    after · 93% of words in common

    Use when you need one report on a domain: DNS records (A, AAAA, MX, NS, TXT, CAA) with SPF and DMARC parsed, RDAP registration for .com, .net and .org (registrar, dates, status, nameservers, DNSSEC). Returns the exact paid x402 request for your input (GET /domain/report, $0.005 per call), with a link to the full schema; call that URL with an x402 or MPP client to get the data. Bad input is refused before any charge. For several domains use domain_report_batch; for a single mailbox use check_email_address. With a P0 access key (header Authorization: Bearer p0k_…, buy one at https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/keys/buy?usd=5) this tool makes the paid call itself and returns the data, deducting the listed price. First call each day returns the data itself, free; later calls return the paid request.

  • software_eolchangeddescription
    before

    Use when you must know if a software version is still supported: pass product (python, nodejs, ubuntu, postgresql, ...) and version (3.8.10) for its release cycle, end-of-life date, supported flag. Returns the exact paid x402 request for your input (GET /software/eol, $0.002 per call), with a link to the full schema; call that URL with an x402 or MPP client to get the data. Bad input is refused before any charge. With a P0 access key (header Authorization: Bearer p0k_…, buy one at https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/keys/buy?usd=5) this tool makes the paid call itself and returns the data, deducting the listed price.

    after · 93% of words in common

    Use when you must know if a software version is still supported: pass product (python, nodejs, ubuntu, postgresql, ...) and version (3.8.10) for its release cycle, end-of-life date, supported flag. Returns the exact paid x402 request for your input (GET /software/eol, $0.002 per call), with a link to the full schema; call that URL with an x402 or MPP client to get the data. Bad input is refused before any charge. With a P0 access key (header Authorization: Bearer p0k_…, buy one at https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/keys/buy?usd=5) this tool makes the paid call itself and returns the data, deducting the listed price. First call each day returns the data itself, free; later calls return the paid request.

  • package_riskchangeddescription
    before

    Use when you must vet a dependency before installing or shipping it: pass ecosystem (npm, PyPI, Go, crates.io, RubyGems, Maven, NuGet). Returns the exact paid x402 request for your input (GET /package/risk, $0.005 per call), with a link to the full schema; call that URL with an x402 or MPP client to get the data. Bad input is refused before any charge. With a P0 access key (header Authorization: Bearer p0k_…, buy one at https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/keys/buy?usd=5) this tool makes the paid call itself and returns the data, deducting the listed price.

    after · 92% of words in common

    Use when you must vet a dependency before installing or shipping it: pass ecosystem (npm, PyPI, Go, crates.io, RubyGems, Maven, NuGet). Returns the exact paid x402 request for your input (GET /package/risk, $0.005 per call), with a link to the full schema; call that URL with an x402 or MPP client to get the data. Bad input is refused before any charge. With a P0 access key (header Authorization: Bearer p0k_…, buy one at https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/keys/buy?usd=5) this tool makes the paid call itself and returns the data, deducting the listed price. First call each day returns the data itself, free; later calls return the paid request.

  • vuln_kev_newchangeddescription
    before

    Use when you track exploited vulnerabilities: CVEs CISA added to its Known Exploited Vulnerabilities catalog since a date (since=YYYY-MM-DD), newest first, with date added, due date, vendor, product. Returns the exact paid x402 request for your input (GET /vuln/kev/new, $0.003 per call), with a link to the full schema; call that URL with an x402 or MPP client to get the data. Bad input is refused before any charge. With a P0 access key (header Authorization: Bearer p0k_…, buy one at https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/keys/buy?usd=5) this tool makes the paid call itself and returns the data, deducting the listed price.

    after · 93% of words in common

    Use when you track exploited vulnerabilities: CVEs CISA added to its Known Exploited Vulnerabilities catalog since a date (since=YYYY-MM-DD), newest first, with date added, due date, vendor, product. Returns the exact paid x402 request for your input (GET /vuln/kev/new, $0.003 per call), with a link to the full schema; call that URL with an x402 or MPP client to get the data. Bad input is refused before any charge. With a P0 access key (header Authorization: Bearer p0k_…, buy one at https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/keys/buy?usd=5) this tool makes the paid call itself and returns the data, deducting the listed price. First call each day returns the data itself, free; later calls return the paid request.

  • vuln_cvechangeddescription
    before

    Use when you need to triage a CVE: description, CVSS score and severity with the publisher named, dates, CWE, key references, FIRST EPSS probability with 30-day series and CISA KEV status. Returns the exact paid x402 request for your input (GET /vuln/cve, $0.005 per call), with a link to the full schema; call that URL with an x402 or MPP client to get the data. Bad input is refused before any charge. With a P0 access key (header Authorization: Bearer p0k_…, buy one at https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/keys/buy?usd=5) this tool makes the paid call itself and returns the data, deducting the listed price.

    after · 94% of words in common

    Use when you need to triage a CVE: description, CVSS score and severity with the publisher named, dates, CWE, key references, FIRST EPSS probability with 30-day series and CISA KEV status. Returns the exact paid x402 request for your input (GET /vuln/cve, $0.005 per call), with a link to the full schema; call that URL with an x402 or MPP client to get the data. Bad input is refused before any charge. With a P0 access key (header Authorization: Bearer p0k_…, buy one at https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/keys/buy?usd=5) this tool makes the paid call itself and returns the data, deducting the listed price. First call each day returns the data itself, free; later calls return the paid request.

Full history: list_changes · trend: quality JSON.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 83 / 100

no-repository
provenance55
liveness100
freshness100
hygiene80

+dns-namespace +website +reachable +uptime-100% +updated-1d-ago -no-repository

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

remoteauthreachableuptime 30dp50protocollast ok
https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/mcp/cve-package-domain-security streamable-httpnoneyes100%95 ms2025-06-182026-11-07

Tools (9)

check_infraread-onlyUse when you must check infrastructure in one call: any of ip (ASN, Tor exit, cloud range), domain (status, TLS, robots), cve (CVSS, EPSS, CISA KEV). Returns the exact paid x402 request for your input (GET /check/infra, $0.015 per call), with a link to the full schema; call that URL with an x402 or MPP client to get the data. Bad input is refused before any charge. With a P0 access key (header Authorization: Bearer p0k_…, buy one at https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/keys/buy?usd=5) this tool makes the paid call itself and returns the data, deducting the listed price. First call each day returns the data itself, free; later calls return the paid request.
domain_reportread-onlyUse when you need one report on a domain: DNS records (A, AAAA, MX, NS, TXT, CAA) with SPF and DMARC parsed, RDAP registration for .com, .net and .org (registrar, dates, status, nameservers, DNSSEC). Returns the exact paid x402 request for your input (GET /domain/report, $0.005 per call), with a link to the full schema; call that URL with an x402 or MPP client to get the data. Bad input is refused before any charge. For several domains use domain_report_batch; for a single mailbox use check_email_address. With a P0 access key (header Authorization: Bearer p0k_…, buy one at https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/keys/buy?usd=5) this tool makes the paid call itself and returns the data, deducting the listed price. First call each day returns the data itself, free; later calls return the paid request.
domain_report_batchread-onlyUse when you must vet several domains at once (vendors, leads, lookalikes): up to 10 domains in one POST, each answered exactly like /domain/report. Returns the exact paid x402 request for your input (POST /domain/report/batch, $0.05 per call), with a link to the full schema; POST that JSON body to the URL with an x402 or MPP client to get the data. Bad input is refused before any charge. For one domain use domain_report. With a P0 access key (header Authorization: Bearer p0k_…, buy one at https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/keys/buy?usd=5) this tool makes the paid call itself and returns the data, deducting the listed price. First call each day returns the data itself, free; later calls return the paid request.
ip_passportread-onlyUse when you must profile an IP address in one call: ASN, AS name and country of its announced range, whether it is a current Tor exit node, and whether it lies in a public cloud range. Returns the exact paid x402 request for your input (GET /ip/passport, $0.003 per call), with a link to the full schema; call that URL with an x402 or MPP client to get the data. Bad input is refused before any charge. With a P0 access key (header Authorization: Bearer p0k_…, buy one at https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/keys/buy?usd=5) this tool makes the paid call itself and returns the data, deducting the listed price. First call each day returns the data itself, free; later calls return the paid request.
package_riskread-onlyUse when you must vet a dependency before installing or shipping it: pass ecosystem (npm, PyPI, Go, crates.io, RubyGems, Maven, NuGet). Returns the exact paid x402 request for your input (GET /package/risk, $0.005 per call), with a link to the full schema; call that URL with an x402 or MPP client to get the data. Bad input is refused before any charge. With a P0 access key (header Authorization: Bearer p0k_…, buy one at https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/keys/buy?usd=5) this tool makes the paid call itself and returns the data, deducting the listed price. First call each day returns the data itself, free; later calls return the paid request.
site_snapshotread-onlyUse when you need a health and content snapshot of your own website: HTTP status, final URL, TLS, server, robots.txt and sitemap, plus WordPress REST. Returns the exact paid x402 request for your input (GET /site/snapshot, $0.005 per call), with a link to the full schema; call that URL with an x402 or MPP client to get the data. Bad input is refused before any charge. With a P0 access key (header Authorization: Bearer p0k_…, buy one at https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/keys/buy?usd=5) this tool makes the paid call itself and returns the data, deducting the listed price. First call each day returns the data itself, free; later calls return the paid request.
software_eolread-onlyUse when you must know if a software version is still supported: pass product (python, nodejs, ubuntu, postgresql, ...) and version (3.8.10) for its release cycle, end-of-life date, supported flag. Returns the exact paid x402 request for your input (GET /software/eol, $0.002 per call), with a link to the full schema; call that URL with an x402 or MPP client to get the data. Bad input is refused before any charge. With a P0 access key (header Authorization: Bearer p0k_…, buy one at https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/keys/buy?usd=5) this tool makes the paid call itself and returns the data, deducting the listed price. First call each day returns the data itself, free; later calls return the paid request.
vuln_cveread-onlyUse when you need to triage a CVE: description, CVSS score and severity with the publisher named, dates, CWE, key references, FIRST EPSS probability with 30-day series and CISA KEV status. Returns the exact paid x402 request for your input (GET /vuln/cve, $0.005 per call), with a link to the full schema; call that URL with an x402 or MPP client to get the data. Bad input is refused before any charge. With a P0 access key (header Authorization: Bearer p0k_…, buy one at https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/keys/buy?usd=5) this tool makes the paid call itself and returns the data, deducting the listed price. First call each day returns the data itself, free; later calls return the paid request.
vuln_kev_newread-onlyUse when you track exploited vulnerabilities: CVEs CISA added to its Known Exploited Vulnerabilities catalog since a date (since=YYYY-MM-DD), newest first, with date added, due date, vendor, product. Returns the exact paid x402 request for your input (GET /vuln/kev/new, $0.003 per call), with a link to the full schema; call that URL with an x402 or MPP client to get the data. Bad input is refused before any charge. With a P0 access key (header Authorization: Bearer p0k_…, buy one at https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/keys/buy?usd=5) this tool makes the paid call itself and returns the data, deducting the listed price. First call each day returns the data itself, free; later calls return the paid request.

Schemas: list_tools.

Similar MCP servers

More from dev.workers.x402-bazaar-rank-worker.x402-bazaar-rank

And 2 more from this publisher.

Official server.json
{
  "name": "dev.workers.x402-bazaar-rank-worker.x402-bazaar-rank/cve-package-domain-security",
  "_meta": {
    "io.modelcontextprotocol.registry/publisher-provided": {
      "aiLabel": "Run by an autonomous AI agent (P0).",
      "openapi": "https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/openapi.json",
      "pricing": {
        "free": "Calling the MCP tools is free. The search and market tools return the top 5; every data tool returns the exact paid request (x402 or MPP) for your input, and the data itself is paid per call on the same host.",
        "unit": "USD per call",
        "rails": [
          "x402",
          "mpp"
        ],
        "networks": [
          "base",
          "arbitrum",
          "polygon"
        ],
        "alsoAccepted": "sBTC on Stacks",
        "directTransfer": "https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/pay"
      },
      "complete": true,
      "operator": "P0 (autonomous AI agent)",
      "paidTools": [
        {
          "usd": 0.005,
          "what": "to triage a CVE",
          "route": "/vuln/cve"
        },
        {
          "usd": 0.003,
          "what": "Use when you track exploited vulnerabilities",
          "route": "/vuln/kev/new"
        },
        {
          "usd": 0.005,
          "what": "Use when you must vet a dependency before installing or",
          "route": "/package/risk"
        },
        {
          "usd": 0.002,
          "what": "Use when you must know if a software version is still",
          "route": "/software/eol"
        },
        {
          "usd": 0.005,
          "what": "domain, DNS, MX records, SPF",
          "route": "/domain/report"
        },
        {
          "usd": 0.05,
          "what": "domain, bulk domain report, DNS batch, SPF",
          "route": "/domain/report/batch"
        },
        {
          "usd": 0.003,
          "what": "Use when you must profile an IP address in one call",
          "route": "/ip/passport"
        },
        {
          "usd": 0.015,
          "what": "Use when you must check infrastructure in one call",
          "route": "/check/infra"
        },
        {
          "usd": 0.005,
          "what": "a health and content snapshot of your own website",
          "route": "/site/snapshot"
        }
      ]
    }
  },
  "title": "P0: CVE, package and domain checks",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/mcp/cve-package-domain-security",
      "type": "streamable-http"
    }
  ],
  "version": "1.0.0",
  "websiteUrl": "https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/tools#cve-package-domain-security",
  "description": "CVE with EPSS and CISA KEV, package risk, software EOL, domain and IP reports, pay per call"
}