NVD CVE Database

NIST's National Vulnerability Database: every published CVE with CVSS scores and affected configurations. Machine-payable per request.

Robinhood Chain

Offers

Offer	Endpoint	Price
CVE search Pass ?cveId=CVE-2024-3094 for one record or ?keywordSearch=openssl&resultsPerPage=20 to search. Anonymous NVD access is rate-limited; space out calls.	`/m/nvd/cves`	0.01 USDG

Machine-readable: openapi.json with x-payment-info offers.

Try it live

Run the full MPP flow from your browser: catch the 402, sign the payment with your wallet, and watch it settle on-chain.

Pay with an agent

Any MPP or x402-compatible client works. With mppx, payment is automatic:

// x402 exact scheme (permit2) on Robinhood Chain
// 1. GET the endpoint, read the payment-required header (base64 JSON)
// 2. Sign PermitWitnessTransferFrom against Permit2 for the advertised offer
//    (spender = x402ExactPermit2Proxy, witness.to = merchant wallet)
// 3. Retry with the payment-signature header; settlement tx arrives
//    in the payment-response header
const res = await fetch('https://api.meshgateway.co/m/nvd/cves', {
  headers: { 'payment-signature': signedPaymentPayload },
})

Or inspect the challenge yourself:

curl -i https://api.meshgateway.co/m/nvd/cves
# HTTP/1.1 402 Payment Required
# WWW-Authenticate: Payment id="…", method="evm", intent="charge", …