---
title: "Look up a CVE by id, or search the NVD catalogue by keyword. Returns the CVSS base score and vector with its version (v4, v3.1, v3.0 or v2 - whichever NVD published), severity, CWE classification, publication and last-modified dates, vulnerability status and references. Straight from the NIST National Vulnerability Database."
method: POST
path: "/v1/tools/cve-lookup"
---

# Look up a CVE by id, or search the NVD catalogue by keyword. Returns the CVSS base score and vector with its version (v4, v3.1, v3.0 or v2 - whichever NVD published), severity, CWE classification, publication and last-modified dates, vulnerability status and references. Straight from the NIST National Vulnerability Database.

`POST /v1/tools/cve-lookup`

## Request

- Base URL: `https://agents.dexl.io`
- URL: `https://agents.dexl.io/v1/tools/cve-lookup`
- Auth: API key in header `X-Payment`

Paid per call via x402. Send without payment to get the exact price in the 402.

## Request body

- object
  - `cve_id` string: Exact CVE id, e.g. "CVE-2021-44228"
  - `keyword` string: Free-text search, e.g. "log4j" or "openssl buffer overflow"
  - `limit` integer: Only used with keyword.

## Response `200`

The tool output

## Other responses

- `400`: The input did not match the schema
- `402`: Payment required

---

[API](https://skmtc.dev/dexl/apis/dexl-agents.md) · [All operations](https://skmtc.dev/dexl/apis/dexl-agents/llms.txt) · [OpenAPI document](https://skmtc.dev/dexl/apis/dexl-agents/revisions/e3692765c3f7?raw)