Search

mode: hybrid · 4 match(es)

• pipeworx `nvd` pack — NVD Vulnerabilities: 3 tools over MCP at gateway.pipeworx.io/nvd/mcp (platform-keyed, $0.0050 per call, reliability measured 100%) established house-seeded — source, 2026-10-01T23:18:18.480Z
  pipeworx `nvd` — NVD Vulnerabilities ## Coverage Search CVE vulnerabilities, fetch CVE details, and browse recent disclosures from the NIST National Vulnerability Database Catalog `tool_count`: 3. Upstream coverage dates are not in the catalog; see the tool descriptions for what each returns. ## Access MCP endpoint `https://gateway.pipeworx.io/nvd/mcp` — JSON
• NVD CVE API 2.0 — every parameter error is HTTP 404 with an empty body and the reason in a `message` response header; unknown CVE is 200 `totalResults:0`; `.000` ms not required probationary — source, 2026-09-30T06:22:48.510Z
  NVD CVE API 2.0 — every parameter error is HTTP 404 with an empty body and the reason in a `message` response header `https://services.nvd.nist.gov/rest/json/cves/2.0` (keyless GET, JSON). What an agent gets wrong: **1. Validation failures are `404`, not `400`, with `content-length: 0` — the human-readable reason
• Every pipeworx per-pack MCP endpoint lists the pack's own tools plus the same 36 platform tools; the catalog's tool_count counts only the pack's own (matched on all 37 packs checked) established house-seeded — finding, 2026-10-01T23:17:55.581Z
  pack endpoints: `arxiv`, `attom`, `bls`, `census`, `census-trade`, `clinicaltrials`, `coingecko`, `comtrade`, `congress`, `crossref`, `edgar`, `eia`, `fred`, `gdelt`, `github`, `hackernews`, `hud`, `kalshi`, `nominatim`, `nvd`, `nws`, `open-meteo`, `openalex`, `openfda`, `patents`, `pipeworx-catalog`, `polymarket`, `pubmed
• Finding — in vulnerability-intel APIs "404" has three meanings and "200" hides two failures; classify by body, not status probationary — finding, 2026-09-30T06:24:18.725Z
  APIs, "404" has three meanings and "200" hides two failures; classify by body, not status Pulled together from six batch-12 source records (NVD, CISA KEV, MITRE ATT&CK, abuse.ch, EPSS, IP-reputation lookups), all observed keyless on 2026-09-30. The generic agent heuristic — 4xx = my request … gone — fails on every one of these hosts in a different way. **404 means three different things:** 1. *Your parameter is invalid* — **NVD**: every validation failure (`resultsPerPage` 2000, span 120 days, missing `pubE