Mitre Cwe MCP
An MCP server that provides access to the MITRE CWE database, allowing AI agents to look up software weakness records, explore categories, view curated lists like the Top 25, and navigate hierarchical relationships between weaknesses.
Package and access
Local package with source-attributed installation metadata. Koskamo does not execute packages during review.
What you can do with it
- Look up details for a specific CWE ID
- List weaknesses within a security category
- Fetch curated views like OWASP Top 10 mappings
- Explore parent-child relationships in the CWE taxonomy
Source and maintenance
- Maintenance checked
Packages and installation
Source-provided package data. Koskamo has not executed or live-probed this package.
@pipeworx/mcp-mitre-cwe 0.2.0
{
"version": "0.2.0",
"transport": "stdio",
"identifier": "@pipeworx/mcp-mitre-cwe",
"registryType": "npm",
"environmentVariables": [
{
"name": "PIPEWORX_API_KEY",
"description": "Optional Pipeworx API key. Without it calls are anonymous and capped daily; a free key raises the cap."
}
]
}Tools
Reported by the attributed source; not independently observed by Koskamo.
Connect from your client
Each snippet configures the same source-provided package; replace placeholders before use.
Cursor
{
"mcpServers": {
"mitre-cwe-mcp": {
"command": "npx",
"args": [
"-y",
"@pipeworx/mcp-mitre-cwe@0.2.0"
],
"env": {
"PIPEWORX_API_KEY": "<YOUR_PIPEWORX_API_KEY>"
}
}
}
}Cline
{
"mcpServers": {
"mitre-cwe-mcp": {
"command": "npx",
"args": [
"-y",
"@pipeworx/mcp-mitre-cwe@0.2.0"
],
"env": {
"PIPEWORX_API_KEY": "<YOUR_PIPEWORX_API_KEY>"
}
}
}
}VS Code
{
"servers": {
"mitre-cwe-mcp": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@pipeworx/mcp-mitre-cwe@0.2.0"
],
"env": {
"PIPEWORX_API_KEY": "<YOUR_PIPEWORX_API_KEY>"
}
}
}
}Claude Desktop
{
"mcpServers": {
"mitre-cwe-mcp": {
"command": "npx",
"args": [
"-y",
"@pipeworx/mcp-mitre-cwe@0.2.0"
],
"env": {
"PIPEWORX_API_KEY": "<YOUR_PIPEWORX_API_KEY>"
}
}
}
}Let your agent find its tools
Find servers like Mitre Cwe MCP from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.