Changelog

Updated 2026-10-12. Data changes: GET /v1/kev/changes and GET /v1/models/changes.

x402 payments are now on Base mainnet (eip155:8453) in USDC (0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913).

New paid route POST /v1/stack/watch ($0.012, all rails): start with a stack as for POST /v1/stack/check and get the full check plus a signed watch token; send the token back later to get only what changed since then (an end-of-life date passed or near, a CVE newly in CISA KEV, a new OSV advisory), the worst severity and a new token. No watch state is stored: the token holds the stack in readable form. MCP tool stackfacts_stack_watch.
New error codes token_invalid (400), token_expired (410) and watch_unavailable (503) for POST /v1/stack/watch, all uncharged. too_many_items also covers a watch token over 32,000 characters at the start or 48,000 on a re-check.

New paid route GET /v1/eol/image?image=node:18-alpine3.19 ($0.005, all rails): a container image tag read for the runtime, Java and base OS it names, each with its end-of-life cycle and status, and the worst of them.
New field complete on GET /v1/eol/image: true when every part of the image matched a product and cycle. The headline is unknown when the image's own product did not match.

New paid route POST /v1/osv/check ($0.005): up to 50 open-source packages as purls (npm, PyPI, Maven, Go, crates.io, NuGet, RubyGems, Packagist), answered with the OSV.dev advisories that match each version, their aliases, fixed versions and a kev flag when a CVE alias is in the CISA KEV catalog. MCP tool stackfacts_osv_check.
OSV source licences (CC-BY 4.0, Apache-2.0, CC0) and attributions added to /licences.

First version, on the Base test network (eip155:84532).
Three datasets: software end-of-life dates (endoflife.date), actively exploited CVEs (CISA KEV), and LLM prices and limits (LiteLLM and models.dev), refreshed every 24, 4 and 12 hours.
14 paid tools on 15 priced routes over x402 v2 exact, including POST /v1/stack/check; free preview, try, index, validate and manifest routes; every answer signed with Ed25519.
MCP at POST /mcp. Discovery: llms.txt, llms-full.txt, openapi.json, /.well-known/x402, /.well-known/api-catalog, the MCP server card, pricing.json, robots.txt and sitemap.xml.
Free docs pages from the live data, each with a markdown twin: /docs/eol/<product>, /docs/kev-recent and /docs/models-changes.
Examples: /examples/curl.md, /examples/fetch-x402.mjs (Node) and /examples/python_x402.py (Python).