# ThreatPulse — CVE exploit intelligence: is this vulnerability exploited, and how urgently should I patch?

Three ways to pay: an AWS Marketplace subscription key (header X-API-Key: mp_..., billed on your AWS bill), $0.01 per query with x402 and no signup, or a prepaid card key (Authorization: Bearer tp_live_...). Errors are never billed.

## Quick Start
```
GET  https://threatpulse.waltsoft.net/v1/cve/CVE-2021-44228
GET  https://threatpulse.waltsoft.net/v1/feed/critical?hours=24&min_severity=CRITICAL
POST https://threatpulse.waltsoft.net/v1/scan        {"packages":["openssl@3.0.1","log4j"]}
POST https://threatpulse.waltsoft.net/v1/prioritize  {"cves":["CVE-2021-44228","CVE-2014-0160"],"stack":["apache"]}
Header: X-API-Key: mp_...   (or PAYMENT-SIGNATURE: <base64 x402 payment proof>)
```

## What You Get
Per CVE: severity, CVSS and its version, FIRST EPSS probability and date, CISA KEV status with first-exploited date and ransomware use, exploit status (none, poc, weaponized) with Metasploit, ExploitDB and GitHub sources, patch and vendor advisory links, affected CPEs, and a 0-100 urgency score (EPSS 40, exploit 30, KEV 15, no patch 15). Every field is always present (null or [] when empty).
/v1/scan accepts package names, vendor:product pairs, or {"sbom": <package-lock | CycloneDX | SPDX>, "format": "package-lock|cyclonedx|spdx"}; the first 200 unique packages are checked per call.

## Data
NVD hourly; CISA KEV and GitHub proof-of-concepts every 6 hours; FIRST EPSS, ExploitDB, Metasploit and vendor advisories daily.

## MCP and A2A
- MCP (Amazon Bedrock AgentCore Gateway): https://waltsoft-marketplace-gateway-xncyjgs1uh.gateway.bedrock-agentcore.us-east-1.amazonaws.com/mcp — tool threatpulse___threatpulseQuery(api_key, cve_id) or (api_key, packages)
- A2A agent card: https://threatpulse.waltsoft.net/.well-known/agent-card.json — skills getCve, getCriticalFeed, scanPackages, prioritizeCves
- OpenAPI 3: https://threatpulse.waltsoft.net/openapi.json

## How to Pay (x402 Protocol)
1. Call the endpoint without payment → receive 402 with payment requirements
2. Sign a USDC transfer authorization for 10000 atomic units ($0.01)
3. Base64-encode the signed proof as PAYMENT-SIGNATURE header
4. Retry the request → get your data

## Networks
- Solana: solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp (USDC: EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v)
- Base: eip155:8453 (USDC: 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913)

## Provider
Waltsoft (https://waltsoft.net) — 16 APIs for AI agents, all on AWS Marketplace