All servers · Scraping & browsing · Research & knowledge · Security

io.github.cyanheads/mitre-cwe-mcp-server

io.github.cyanheads/mitre-cwe-mcp-server · v0.1.3

New (7 days)

Measured by MCP Station

Last check	Reachable
Checked at	—
Check success 7 / 30 days	—
First-try success 30 days	—
Median response	—
Lookups 30 days	—
Authentication	No auth
MCP version	2025-06-18
Rank score	—
Declared risk	Read-only (all tools declare readOnlyHint)
Capabilities declared	logging, prompts, resources, tools
Tool definitions	7 tools · with description 100% · input schema is an object 100% · read/destructive hints 100%

Description written by the publisher, not verified

Explore MITRE CWE weaknesses, CAPEC attack patterns, mitigations, code examples, and mappings.

Connect

streamable-http · https://mitre-cwe.caseyjhand.com/mcp

claude mcp add --transport http mitre-cwe-mcp-server https://mitre-cwe.caseyjhand.com/mcp

{
  "mcpServers": {
    "mitre-cwe-mcp-server": {
      "url": "https://mitre-cwe.caseyjhand.com/mcp"
    }
  }
}

Tools as reported by the server

cwe_list_reference
List loaded CWE/CAPEC vocabulary, every CWE view, workflow guidance, or catalog versions and refresh health. Filter requires every whitespace-separated token in an item label, each at a word start or camelCase hump (script finds JavaScript); omit filter to browse. Platforms distinguishes example cod
cwe_get_weakness
Retrieve CWE weaknesses or categories by ID, such as CWE-79, CWE79, or 79. Processes up to 20 distinct IDs within a 24,000-byte response budget and discloses deferred IDs; a view, a CAPEC ID, or an item that is no ID returns in notFound with recovery guidance; only an item holding a control characte
cwe_get_attack_pattern
Retrieve CAPEC attack patterns, categories, and views by ID, such as CAPEC-66, CAPEC66, or 66, including Deprecated and Obsolete records; each entry’s type says which. Processes up to 20 distinct IDs within a 24,000-byte response budget and discloses deferred IDs; a CWE ID or an item that is no ID r
cwe_search_weaknesses
Search CWE weaknesses by all text tokens, exact platform or consequence vocabulary, abstraction, status, mapping usage, view membership, a recorded taxonomy mapping (taxonomy name or entry ID such as CERT C ARR30-C), or a CVE that MITRE cites as an observed example. A text token matches at a word st
cwe_search_attack_patterns
Search CAPEC attack patterns by every whitespace-separated text token, recorded CWE or ATT&CK mapping, abstraction, severity, or likelihood. A text token matches at a word start, never inside a word, so search a compound or negated form such as deserialization or untrusted as written. Parent ATT&CK
cwe_get_view
Read a CWE view objective, audience, status, source filter, recorded notes, and direct members in published order. Navigation views list top-level members rather than every descendant; use cwe_get_hierarchy for navigation or cwe_search_weaknesses with viewId for weakness membership closure. A filter
cwe_get_hierarchy
Navigate live CWE parents, children, ancestors, or descendants for a weakness, category, or view. Discover IDs with cwe_search_weaknesses or cwe_list_reference topic views. The default view is 1000; set viewId all for every view. primaryOnly applies only to ancestors. Edges point from parent to chil

Repository · JSON · Text for agents · Registry updated 2026-10-23