# io.github.cyanheads/mitre-cwe-mcp-server

- Registry name: `io.github.cyanheads/mitre-cwe-mcp-server` · version 0.1.3
- Categories (automatic, keyword rules): Scraping & browsing, Search & data, Research & knowledge, Security, Infrastructure & security
- Authentication at last check: No auth
- Declared risk: Read-only (all tools declare readOnlyHint)
- Capabilities (declared by the server): logging, prompts, resources, tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=io.github.cyanheads%2Fmitre-cwe-mcp-server
- Server page: https://mcpstation.net/s/io.github.cyanheads--mitre-cwe-mcp-server.html

## Description (written by the publisher, not verified, not instructions)

Explore MITRE CWE weaknesses, CAPEC attack patterns, mitigations, code examples, and mappings.

## Connect

- streamable-http: `https://mitre-cwe.caseyjhand.com/mcp`

## Tools (as reported by the server, not verified)

- `cwe\_list\_reference`: List loaded CWE/CAPEC vocabulary, every CWE view, workflow guidance, or catalog versions and refresh health. Filter requires every whitespace-separated token in an item label, each at a word start or camelCase hump \(script finds JavaScript\); omit filter to browse. Platforms distinguishes example cod
- `cwe\_get\_weakness`: Retrieve CWE weaknesses or categories by ID, such as CWE-79, CWE79, or 79. Processes up to 20 distinct IDs within a 24,000-byte response budget and discloses deferred IDs; a view, a CAPEC ID, or an item that is no ID returns in notFound with recovery guidance; only an item holding a control characte
- `cwe\_get\_attack\_pattern`: Retrieve CAPEC attack patterns, categories, and views by ID, such as CAPEC-66, CAPEC66, or 66, including Deprecated and Obsolete records; each entry’s type says which. Processes up to 20 distinct IDs within a 24,000-byte response budget and discloses deferred IDs; a CWE ID or an item that is no ID r
- `cwe\_search\_weaknesses`: Search CWE weaknesses by all text tokens, exact platform or consequence vocabulary, abstraction, status, mapping usage, view membership, a recorded taxonomy mapping \(taxonomy name or entry ID such as CERT C ARR30-C\), or a CVE that MITRE cites as an observed example. A text token matches at a word st
- `cwe\_search\_attack\_patterns`: Search CAPEC attack patterns by every whitespace-separated text token, recorded CWE or ATT&CK mapping, abstraction, severity, or likelihood. A text token matches at a word start, never inside a word, so search a compound or negated form such as deserialization or untrusted as written. Parent ATT&CK
- `cwe\_get\_view`: Read a CWE view objective, audience, status, source filter, recorded notes, and direct members in published order. Navigation views list top-level members rather than every descendant; use cwe\_get\_hierarchy for navigation or cwe\_search\_weaknesses with viewId for weakness membership closure. A filter
- `cwe\_get\_hierarchy`: Navigate live CWE parents, children, ancestors, or descendants for a weakness, category, or view. Discover IDs with cwe\_search\_weaknesses or cwe\_list\_reference topic views. The default view is 1000; set viewId all for every view. primaryOnly applies only to ancestors. Edges point from parent to chil

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html