Agent Exchange x402 census and directory

x402 census · saylorinnovations.com · 2e2d05dfdcd0 · JSON

GET /api/vuln/kev

live

Actively Exploited Vulnerabilities (CISA KEV + EPSS). What attackers are exploiting now: CISA Known Exploited Vulnerabilities added in the last N days, filterable by vendor, text and known ransomware use, each with EPSS exploit probability, due date and required action, plus top vendors.

Verdict: live. The unpaid GET reached a valid 402 (confirmed by the re-probe of 2026-10-01). The live amount equals the catalog price.

Facts from the catalogs

FieldValue
URLhttps://saylorinnovations.com/api/vuln/kev
MethodGET
Price$0.002 USDC = 2000 atomic units of 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913
Networkeip155:8453 (base); also accepts solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp, eip155:137, eip155:42161
payTo0xA2A8dF0f7CaaBEa4e120a2568118f141569fc8aa
Sellersaylorinnovations.com
Catalogscdp (row updated 2026-09-25), payai (row updated 2026-09-29)
Listed since (lower bound)2026-09-25 (earliest catalog timestamp; catalogs report last-update times only)
Last catalog update2026-09-29
CDP quality counters2 calls and 1 unique payers in 30 days, last call 2026-09-25 (catalog-reported, not verified on chain)
Category (keyword rule)other/unknown
Templated pathno
x402Version in catalog2
Service name / tags · security, vulnerabilities, dependencies, osv, cve

Unpaid probe (census of 2026-09-30)

FieldValue
Probed at2026-09-30T23:45:45.048Z
HEAD402
GET402
Verdictlive live: valid 402 to an unpaid GET
402 carried inheader+body
x402Version in the 4022
accepts[0]{"scheme":"exact","network":"eip155:8453","amount":"2000","payTo":"0xA2A8dF0f7CaaBEa4e120a2568118f141569fc8aa","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","maxTimeoutSeconds":120,"extra":{"name":"USD Coin","version":"2"}}
Live amount equals catalog priceyes
Live payTo equals catalog payToyes
extensions.bazaar in the 402yes
PAYMENT-REQUIRED headeryes
WWW-Authenticate offernone
Content type / server / CORSapplication/json / cloudflare / *
Latency1,984 ms
ErrorPayment required to access this resource.

Latest re-probe

FieldValue
Re-probed at2026-10-01T07:13:42.000Z (cron)
Verdict nowlive unchanged
HEAD / GET402 / 402
accepts[0]{"scheme":"exact","network":"eip155:8453","amount":"2000","payTo":"0xA2A8dF0f7CaaBEa4e120a2568118f141569fc8aa","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","maxTimeoutSeconds":120,"extra":{"name":"USD Coin","version":"2"}}
Live amount equals catalog priceyes
Latency701 ms
Errornone

On-chain facts for the payTo (public address)

FieldValue
Distinct payers2
Payments6
USDC volume$0.02
Median payment$0.0025
First / last payment2026-09-27 / 2026-09-29
Sampler-shaped share of payments100.0%
Payers that are not samplers0
Sourceforensics-2026-09-30
Address0xA2A8dF0f7CaaBEa4e120a2568118f141569fc8aa

Declared input and output (extensions.bazaar)

{
 "input": {
  "method": "GET",
  "queryParams": {
   "days": "30"
  },
  "type": "http"
 },
 "output": {
  "type": "json",
  "example": {
   "catalog_version": "2026.09.24",
   "count": 1,
   "days": 30,
   "matches": 21,
   "top_vendors": [
    {
     "n": 6,
     "vendor": "Microsoft"
    }
   ],
   "vulnerabilities": [
    {
     "added": "2026-09-24",
     "cve": "CVE-2026-5430",
     "due_date": "2026-10-15",
     "epss": {
      "percentile": 0.998,
      "probability_30d": 0.91
     },
     "product": "Connect Secure",
     "ransomware_use": false,
     "vendor": "Ivanti"
    }
   ]
  }
 }
}

Try it (unpaid: shows the 402)

curl -si -X GET 'https://saylorinnovations.com/api/vuln/kev' -H 'accept: application/json'

The catalog declares GET. A 402 answer carries the payment requirements in the JSON body and, for x402 v2, base64 in the PAYMENT-REQUIRED header. This page never sends a payment.

Paid checks (x402, USDC on Base)

GET https://bazaar.agentexchange.work/r/2e2d05dfdcd0/probe.json re-runs this probe right now for $0.01 and writes the result here. POST https://bazaar.agentexchange.work/featured with {"id":"2e2d05dfdcd0"} places this resource at the top of the report and search pages for 30 days for $1.00, labelled. Unpaid requests answer 402 with the terms. Pricing.

Catalog references: PayAI listing status · agentic.market (CDP Bazaar front end) · this record as JSON · all resources on saylorinnovations.com.