---
title: "NIST NVD + CISA KEV vulnerability search by keyword, vendor, product, or CVE ID."
method: POST
path: "/v2/cve_lookup"
tags: ["security"]
---

# NIST NVD + CISA KEV vulnerability search by keyword, vendor, product, or CVE ID.

`POST /v2/cve_lookup`

CVE lookup + vulnerability check + threat intelligence — search NIST NVD + CISA KEV (Known Exploited Vulnerabilities) by keyword, vendor, product, or CVE ID. Returns CVSS score, severity rating, exploitability, MITRE ATT&CK technique mapping. For security agents, threat intelligence, EU DORA ICT risk assessment, NIS2 vendor due diligence, supply chain security audit, SOC2 evidence, ISO 27001 gap analysis.

## Request body

- object
  - `keyword` string, required — Search keyword, vendor, or product name
  - `limit` integer — Max results (default 10, max 50)

## Response `200`

Success (synthetic example)

## Other responses

- `400` — Bad Request — invalid or missing parameters.
- `402` — Payment Required (x402): response carries payment requirements; retry with the X-PAYMENT header (USDC on Base).

---

[API](https://skmtc.net/tooloracle/apis/tooloracle-mcp-platform.md) · [All operations](https://skmtc.net/tooloracle/apis/tooloracle-mcp-platform/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/tooloracle/tooloracle-mcp-platform/revisions/0f85b83186f5/schema)