P0: CVE, package and domain checks MCP Server

Use when you need one report on a domain: DNS records (A, AAAA, MX, NS, TXT, CAA) with SPF and DMARC parsed, RDAP registration for .com, .net and .org (registrar, dates, status, nameservers, DNSSEC). Returns the paid x402 request for your input (GET /domain/report, $0.005 per call; schema linked). Call that URL with an x402 or MPP client to get the data. Bad input is refused before any charge. For several domains use domain_report_batch. With an access key (Authorization: Bearer p0k_..., buy at https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/keys/buy?usd=5) the tool pays the call itself, returns the data and deducts the price. First call each day returns the data itself, free; later calls return the paid request.

Use when you must vet several domains at once (vendors, leads, lookalikes): up to 10 domains in one POST, each answered exactly like /domain/report. Returns the paid x402 request for your input (POST /domain/report/batch, $0.05 per call; schema linked). POST that JSON body to the URL with an x402 or MPP client to get the data. Bad input is refused before any charge. For one domain use domain_report. With an access key (Authorization: Bearer p0k_..., buy at https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/keys/buy?usd=5) the tool pays the call itself, returns the data and deducts the price. First call each day returns the data itself, free; later calls return the paid request.

Use when you need to triage a CVE: description, CVSS per publisher, dates, CWE, key references, affected products, CISA SSVC, FIRST EPSS with a 30-day series and CISA KEV status in one call. Returns the paid x402 request for your input (GET /vuln/cve, $0.005 per call; schema linked). Call that URL with an x402 or MPP client to get the data. Bad input is refused before any charge. One CVE id. For CVEs newly added to CISA KEV since a date use vuln_kev_new; for the vulnerabilities of a package version use package_risk. With an access key (Authorization: Bearer p0k_..., buy at https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/keys/buy?usd=5) the tool pays the call itself, returns the data and deducts the price. First call each day returns the data itself, free; later calls return the paid request.

Use when you track exploited vulnerabilities: CVEs CISA added to its Known Exploited Vulnerabilities catalog since a date (since=YYYY-MM-DD), newest first, with date added, due date, vendor, product. Returns the paid x402 request for your input (GET /vuln/kev/new, $0.003 per call; schema linked). Call that URL with an x402 or MPP client to get the data. Bad input is refused before any charge. KEV additions since a date, newest first (limit up to 200), not a lookup; for CVSS, EPSS and KEV status of one CVE use vuln_cve. With an access key (Authorization: Bearer p0k_..., buy at https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/keys/buy?usd=5) the tool pays the call itself, returns the data and deducts the price. First call each day returns the data itself, free; later calls return the paid request.

Use when you must check infrastructure in one call: any combination (at least one) of ip (ASN, Tor exit, cloud range), domain (status, TLS, robots), cve (CVSS, EPSS, CISA KEV). Returns the paid x402 request for your input (GET /check/infra, $0.015 per call; schema linked). Call that URL with an x402 or MPP client to get the data. Bad input is refused before any charge. For one input use ip_passport, vuln_cve, package_risk or software_eol; for DNS, SPF, DMARC and registration use domain_report; for sitemap or WordPress use site_snapshot. With an access key (Authorization: Bearer p0k_..., buy at https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/keys/buy?usd=5) the tool pays the call itself, returns the data and deducts the price. First call each day returns the data itself, free; later calls return the paid request.

Use when you must vet a dependency before installing or shipping it: pass ecosystem (npm, PyPI, Go, crates.io, RubyGems, Maven, NuGet). Returns the paid x402 request for your input (GET /package/risk, $0.005 per call; schema linked). Call that URL with an x402 or MPP client to get the data. Bad input is refused before any charge. One exact package version. For a single CVE id use vuln_cve; to know whether a product or runtime version is still supported use software_eol. With an access key (Authorization: Bearer p0k_..., buy at https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/keys/buy?usd=5) the tool pays the call itself, returns the data and deducts the price. First call each day returns the data itself, free; later calls return the paid request.

Use when you must profile an IP address in one call: ASN, AS name and country of its announced range, whether it is a current Tor exit node, and whether it lies in a public cloud range. Returns the paid x402 request for your input (GET /ip/passport, $0.003 per call; schema linked). Call that URL with an x402 or MPP client to get the data. Bad input is refused before any charge. One public IP only (private and reserved addresses are refused before any charge); to check it together with a domain, CVE, package or software version in one call use check_infra. With an access key (Authorization: Bearer p0k_..., buy at https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/keys/buy?usd=5) the tool pays the call itself, returns the data and deducts the price. First call each day returns the data itself, free; later calls return the paid request.

Use when you need a health and content snapshot of your own website: HTTP status, final URL, TLS, server, robots.txt and sitemap, plus WordPress REST. Returns the paid x402 request for your input (GET /site/snapshot, $0.005 per call; schema linked). Call that URL with an x402 or MPP client to get the data. Bad input is refused before any charge. For DNS, SPF, DMARC and registration use domain_report; to check a site together with an IP, CVE or package use check_infra. With an access key (Authorization: Bearer p0k_..., buy at https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/keys/buy?usd=5) the tool pays the call itself, returns the data and deducts the price. First call each day returns the data itself, free; later calls return the paid request.

Use when you must know if a software version is still supported: pass product (python, nodejs, ubuntu, postgresql, ...) and version (3.8.10) for its release cycle, end-of-life date, supported flag. Returns the paid x402 request for your input (GET /software/eol, $0.002 per call; schema linked). Call that URL with an x402 or MPP client to get the data. Bad input is refused before any charge. Support and end-of-life status only; for known vulnerabilities of a package version use package_risk, of a CVE id use vuln_cve. With an access key (Authorization: Bearer p0k_..., buy at https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/keys/buy?usd=5) the tool pays the call itself, returns the data and deducts the price. First call each day returns the data itself, free; later calls return the paid request.