{"name":"ZeroWorker Security API","version":"0.7.0","tagline":"Pay-per-request CVE prioritization for security automation and AI agents.","purpose":"Turn a caller-supplied CVE list into a deterministic, machine-readable priority queue using public exploitation signals.","value":["Combine FIRST EPSS probability/percentile, CISA KEV membership, and known ransomware-use signals in one request.","Prioritize up to 50 CVEs with deterministic scores and urgency tiers.","Return vendor/product context, KEV remediation metadata, and reasons suitable for downstream automation.","Use a free sample endpoint before paying; no account or API key is required for the paid endpoint.","x402 settlement occurs only after a successful paid resource response; invalid, no-signal, and temporary upstream-failure paths do not settle."],"useCases":["Vulnerability scanner output prioritization","Patch queue triage","AI security-agent enrichment","CVE alert prioritization","CI/CD and vulnerability-management automation"],"freeSample":{"method":"GET","url":"https://zeroworker-security-api.zeroworker-lab.workers.dev/v1/sample","description":"Free example using fixed CVEs; no payment required."},"paidApi":{"method":"POST","url":"https://zeroworker-security-api.zeroworker-lab.workers.dev/v1/prioritize","description":"Prioritize up to 50 CVEs in one request using FIRST EPSS, CISA KEV, and known ransomware signals. Returns deterministic risk scores, urgency tiers, exploitation signals, vendor/product context, and remediation metadata as machine-readable JSON. Built for security automation and AI agents. No account or API key required. $0.01 per successful request via x402. Invalid input, no-signal results, and temporary resource failures do not settle.","maxCvesPerRequest":50,"contentType":"application/json","requestExample":{"cves":["CVE-2021-44228","CVE-2023-44487"]}},"payment":{"enabled":true,"price":"$0.01","currency":"USDC","network":"eip155:8453","protocol":"x402 v2","accountRequired":false,"apiKeyRequired":false,"settlementPolicy":"Payment settles only after a successful paid resource response. Invalid input, all-no-signal results, and temporary resource failures return without settlement."},"discovery":{"bazaar":"enabled","openapi":"https://zeroworker-security-api.zeroworker-lab.workers.dev/openapi.json"},"endpoints":{"health":"https://zeroworker-security-api.zeroworker-lab.workers.dev/health","sample":"https://zeroworker-security-api.zeroworker-lab.workers.dev/v1/sample","paid":"https://zeroworker-security-api.zeroworker-lab.workers.dev/v1/prioritize","openapi":"https://zeroworker-security-api.zeroworker-lab.workers.dev/openapi.json"},"sources":["FIRST EPSS","CISA Known Exploited Vulnerabilities (KEV)"],"resilience":"Workers KV last-known-good cache, stale fallback, upstream circuit breaker, request hardening, and x402 authorization-flow payment safety.","disclaimer":"Prioritization assistance only; callers should combine the result with asset context and their vulnerability-management policy."}