mitre-cwe-mcp-server
An MCP server that allows agents to explore MITRE CWE weaknesses and CAPEC attack patterns, including retrieving details, searching by text or platform, and viewing mappings and mitigations.
Endpoint and access
No sign-in to connect and list tools. Individual tools may still need a vendor account, credentials, or permissions; check the documented prerequisites.
MCP endpoint (Streamable HTTP)
https://mitre-cwe.caseyjhand.com/mcpWhat you can do with it
- Retrieve CWE weaknesses and categories by ID
- Search weaknesses by text, platform, or consequences
- Retrieve CAPEC attack patterns and mappings
- List CWE views and catalog versions
Source and maintenance
Community listingRegistry 0.2.0
- Maintenance checked
Protocol and capabilities
- Server
- mitre-cwe-mcp-server 0.2.0
- MCP protocol
- 2025-06-18
- Tools
- 7 advertised
- Resources
- 1 advertised
- Resource templates
- 1 advertised
- Prompts
- 0 advertised
Server-advertised capabilities
{
"tools": {
"listChanged": true
},
"logging": {},
"prompts": {
"listChanged": true
},
"resources": {
"subscribe": true,
"listChanged": true
},
"extensions": {
"io.modelcontextprotocol/skills": {
"directoryRead": true
}
}
}Server-provided instructions
Untrusted server output shown for inspection. It is not Koskamo guidance and is excluded from knowledge search.
Tools
7 advertised
cwe_list_reference — List CWE and CAPEC reference values
Advertised read-onlyOpen-world
List loaded CWE/CAPEC vocabulary, every CWE view, workflow guidance, or catalog versions and refresh health. Filter requires every whitespace-separated token in an item label, each at a word start or camelCase hump (script finds JavaScript). Tokens of at least four Unicode letters also match after exactly one un or mis prefix at a word start; spelling coincidences can match. Omit filter to browse. Platforms distinguishes example code languages from platform names and classes. Follow nextCursor for complete lists; limits above 100 are capped with disclosure.
cwe_list_reference input schema
{
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"required": [
"topic"
],
"properties": {
"limit": {
"type": "integer",
"default": 20,
"maximum": 1000,
"minimum": 1,
"description": "Maximum page size; capped at 100 and a 24,000-byte response budget with disclosure."
},
"topic": {
"enum": [
"views",
"abstraction_levels",
"mitigation_phases",
"platforms",
"relationship_natures",
"filter_values",
"workflow",
"versions"
],
"type": "string",
"description": "views lists CWE view IDs; abstraction_levels explains CWE and CAPEC levels; mitigation_phases lists prevention phases; platforms lists platform dimensions and exampleLanguages; relationship_natures lists relation labels; filter_values lists statuses, consequence impacts, CWE mapping usage, CWE taxonomy names, severity, and likelihood; workflow explains navigation; versions reports catalog freshness and refresh health."
},
"cursor": {
"type": "string",
"description": "Opaque continuation returned by this tool."
},
"filter": {
"type": "string",
"maxLength": 500,
"description": "All-token case-insensitive label filter; each token matches at a word start or camelCase hump. Tokens of at least four Unicode letters also match after exactly one un or mis prefix at a word start; spelling coincidences can match. Blank means unset."
}
},
"additionalProperties": false
}cwe_list_reference output schema
{
"type": "object",
"anyOf": [
{
"not": {
"required": [
"error"
]
},
"required": [
"topic",
"items",
"pagination",
"provenance",
"appliedFilters",
"totalCount"
]
},
{
"required": [
"error"
]
}
],
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"cap": {
"type": "integer",
"maximum": 9007199254740991,
"minimum": -9007199254740991,
"description": "Effective page limit."
},
"error": {
"type": "object",
"required": [
"code",
"message"
],
"properties": {
"code": {
"type": "integer",
"maximum": 9007199254740991,
"minimum": -9007199254740991,
"description": "JSON-RPC error code for this failure."
},
"data": {
"type": "object",
"properties": {
"reason": {
"type": "string",
"examples": [
"invalid_cursor"
],
"description": "Machine-readable failure mode. Declared by this tool: `invalid_cursor`: Cursor is modified, stale, or incompatible with the normalized query. Other values are possible when a failure originates below the handler."
},
"recovery": {
"type": "object",
"required": [
"hint"
],
"properties": {
"hint": {
"type": "string"
}
},
"description": "Actionable next step for the caller.",
"additionalProperties": {}
},
"retryable": {
"type": "boolean",
"description": "Whether retrying may succeed."
}
},
"additionalProperties": {}
},
"message": {
"type": "string",
"description": "Human-readable description of what went wrong."
}
},
"description": "Present when the call failed. Absent on success.",
"additionalProperties": {}
},
"items": {
"type": "array",
"items": {
"type": "object",
"required": [
"key",
"label"
],
"properties": {
"id": {
"type": "string",
"description": "Canonical ID."
},
"key": {
"type": "string",
"description": "Stable item key."
},
"label": {
"type": "string",
"description": "Source label or workflow step."
},
"status": {
"type": "string",
"description": "Source status."
},
"catalog": {
"type": "string",
"description": "Supplying catalog."
},
"sourceUrl": {
"type": "string",
"description": "Official source URL."
},
"valueKind": {
"type": "string",
"description": "Vocabulary dimension."
},
"description": {
"type": "string",
"description": "View objective or explanation, in CommonMark."
},
"filterDefinition": {
"type": "string",
"description": "Source XPath filter that defines a filter-defined view’s membership in place of recorded members, exactly as published."
},
"directMemberCount": {
"type": "integer",
"maximum": 9007199254740991,
"minimum": -9007199254740991,
"description": "Direct recorded members."
}
},
"description": "Reference item.",
"additionalProperties": false
},
"description": "Matching reference page."
},
"shown": {
"type": "integer",
"maximum": 9007199254740991,
"minimum": -9007199254740991,
"description": "Reference items on this page."
},
"topic": {
"enum": [
"views",
"abstraction_levels",
"mitigation_phases",
"platforms",
"relationship_natures",
"filter_values",
"workflow",
"versions"
],
"type": "string",
"description": "Requested topic."
},
"notice": {
"type": "string",
"description": "Applicable empty or cap disclosure."
},
"catalogs": {
"type": "array",
"items": {
"type": "object",
"required": [
"catalog",
"sourceUrl",
"version",
"date",
"loadedAt",
"counts",
"nextCheckAt",
"source"
],
"properties": {
"date": {
"type": "string",
"description": "Loaded root date."
},
"etag": {
"type": "string",
"description": "Source ETag."
},
"counts": {
"type": "object",
"description": "Counts by family.",
"propertyNames": {
"type": "string",
"description": "Record family."
},
"additionalProperties": {
"type": "integer",
"maximum": 9007199254740991,
"minimum": -9007199254740991,
"description": "Loaded record count."
}
},
"source": {
"enum": [
"cache",
"upstream"
],
"type": "string",
"description": "Where the served catalog came from: cache is a saved copy loaded at start and not downloaded again since; upstream is a download by this server process."
},
"apiDate": {
"type": "string",
"description": "Observed CWE API date."
},
"catalog": {
"type": "string",
"description": "Catalog identity."
},
"version": {
"type": "string",
"description": "Loaded root version."
},
"loadedAt": {
"type": "string",
"description": "Replacement time."
},
"fetchedAt": {
"type": "string",
"description": "When the served catalog was downloaded from MITRE; absent for a cached copy with no matching download record."
},
"sourceUrl": {
"type": "string",
"description": "Download source."
},
"apiVersion": {
"type": "string",
"description": "Observed CWE API version."
},
"lastCheckAt": {
"type": "string",
"description": "Last attempted check."
},
"nextCheckAt": {
"type": "string",
"description": "Next refresh check."
},
"lastModified": {
"type": "string",
"description": "Source Last-Modified."
},
"lastRefreshError": {
"type": "object",
"required": [
"code",
"message",
"time"
],
"properties": {
"code": {
"type": "number",
"description": "Error code."
},
"time": {
"type": "string",
"description": "Failure time."
},
"message": {
"type": "string",
"description": "Sanitized refresh failure."
}
},
"description": "Refresh failure retaining last good data.",
"additionalProperties": false
},
"lastSuccessfulCheckAt": {
"type": "string",
"description": "Last successful check."
}
},
"description": "Catalog refresh health.",
"additionalProperties": false
},
"description": "Both loaded catalog health records; versions only."
},
"truncated": {
"type": "boolean",
"description": "Whether the page limit omitted matching items."
},
"pagination": {
"type": "object",
"required": [
"total",
"shown",
"hasMore"
],
"properties": {
"shown": {
"type": "integer",
"maximum": 9007199254740991,
"minimum": -9007199254740991,
"description": "Items on this page."
},
"total": {
"type": "integer",
"maximum": 9007199254740991,
"minimum": -9007199254740991,
"description": "Matching items before paging."
},
"hasMore": {
"type": "boolean",
"description": "Whether a continuation exists."
},
"nextCursor": {
"type": "string",
"description": "Opaque continuation for the same normalized query."
}
},
"description": "Local result pagination.",
"additionalProperties": false
},
"provenance": {
"type": "object",
"required": [
"cweVersion",
"cweDate",
"capecVersion",
"capecDate",
"loadedAt"
],
"properties": {
"cweDate": {
"type": "string",
"description": "CWE publication date."
},
"loadedAt": {
"type": "string",
"description": "Combined snapshot load time."
},
"capecDate": {
"type": "string",
"description": "CAPEC publication date."
},
"cweVersion": {
"type": "string",
"description": "CWE catalog version."
},
"capecVersion": {
"type": "string",
"description": "CAPEC catalog version."
}
},
"description": "Loaded catalog provenance.",
"additionalProperties": false
},
"totalCount": {
"type": "integer",
"maximum": 9007199254740991,
"minimum": -9007199254740991,
"description": "Matching reference items before paging."
},
"appliedFilters": {
"type": "object",
"required": [
"topic",
"limit"
],
"properties": {
"limit": {
"type": "integer",
"maximum": 9007199254740991,
"minimum": -9007199254740991,
"description": "Effective capped size."
},
"topic": {
"type": "string",
"description": "Applied topic."
},
"filter": {
"type": "string",
"description": "Normalized label filter."
}
},
"description": "Applied filters and defaults.",
"additionalProperties": false
}
},
"additionalProperties": false
}cwe_list_reference annotations
{
"readOnlyHint": true,
"openWorldHint": true,
"idempotentHint": true
}cwe_get_weakness — Retrieve CWE weaknesses
Advertised read-onlyOpen-world
Retrieve CWE weaknesses, categories, or groupings by ID, such as CWE-79, CWE79, or 79. Processes up to 20 distinct IDs within a 24,000-byte response budget and discloses deferred IDs; a view, a CAPEC ID, or an item that is no ID returns in notFound with recovery guidance; only an item holding a control character other than whitespace, or a non-ID item over 150 characters, rejects the whole call. Defaults to summary, consequences, mitigations, and relations; a default section that does not fit the budget is omitted whole and named with its size and a re-call (kind partial). Summary carries recorded alternate terms such as XSS, ordinalities (Primary, Resultant, Indirect), and background details; the notes section, outside the defaults, returns every note MITRE records, such as Relationship, Maintenance, Terminology, and Research Gap notes. Explicit sections remain complete, including one oversized record with disclosure; an empty sections array requests an outline. exampleLanguage, exampleOffset, and exampleLimit select a complete source-ordered page of section examples: with sections omitted, setting any of them to a non-default value adds examples after the defaults, filled last and outlined with its page size and a re-call when it does not fit; explicit sections without examples ignore them, and guidance gives the re-call that adds examples. Categories and groupings are organizational entries, not vulnerability root causes.
cwe_get_weakness input schema
{
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"required": [
"ids"
],
"properties": {
"ids": {
"type": "array",
"items": {
"type": "string",
"description": "A CWE ID such as CWE-79 or a positive bare integer. An item that is no CWE ID is reported per item; an item holding a control character other than whitespace, or over 150 characters and no CWE or CAPEC ID, rejects the call."
},
"maxItems": 200,
"minItems": 1,
"description": "One to 200 submitted IDs; up to 20 distinct items are processed within the response budget."
},
"sections": {
"type": "array",
"items": {
"enum": [
"summary",
"consequences",
"mitigations",
"relations",
"examples",
"detection",
"observed",
"platforms",
"mappings",
"notes"
],
"type": "string",
"description": "A supported CWE detail section."
},
"description": "Selected sections; omit for defaults, or pass an empty array for an outline."
},
"exampleLimit": {
"type": "integer",
"default": 3,
"maximum": 9007199254740991,
"minimum": 1,
"description": "Complete examples per entry in section examples; no upper bound beyond the finite source array. With sections omitted, a value other than 3 adds examples to the defaults."
},
"exampleOffset": {
"type": "integer",
"default": 0,
"maximum": 9007199254740991,
"minimum": 0,
"description": "Offset in each entry’s language-filtered examples (section examples). With sections omitted, a value above 0 adds examples to the defaults."
},
"exampleLanguage": {
"type": "string",
"description": "Exact source example code language for section examples; discover values through cwe_list_reference topic platforms. With sections omitted, adds examples to the defaults."
}
},
"additionalProperties": false
}cwe_get_weakness output schema
{
"type": "object",
"anyOf": [
{
"not": {
"required": [
"error"
]
},
"required": [
"entries",
"notFound",
"deferredIds",
"provenance",
"totalCount"
]
},
{
"required": [
"error"
]
}
],
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"cap": {
"type": "integer",
"maximum": 9007199254740991,
"minimum": -9007199254740991,
"description": "Maximum identifiers processed per call."
},
"error": {
"type": "object",
"required": [
"code",
"message"
],
"properties": {
"code": {
"type": "integer",
"maximum": 9007199254740991,
"minimum": -9007199254740991,
"description": "JSON-RPC error code for this failure."
},
"data": {
"type": "object",
"properties": {
"reason": {
"type": "string",
"examples": [
"unknown_filter"
],
"description": "Machine-readable failure mode. Declared by this tool: `unknown_filter`: The example language is absent from the loaded source vocabulary. Other values are possible when a failure originates below the handler."
},
"recovery": {
"type": "object",
"required": [
"hint"
],
"properties": {
"hint": {
"type": "string"
}
},
"description": "Actionable next step for the caller.",
"additionalProperties": {}
},
"retryable": {
"type": "boolean",
"description": "Whether retrying may succeed."
}
},
"additionalProperties": {}
},
"message": {
"type": "string",
"description": "Human-readable description of what went wrong."
}
},
"description": "Present when the call failed. Absent on success.",
"additionalProperties": {}
},
"shown": {
"type": "integer",
"maximum": 9007199254740991,
"minimum": -9007199254740991,
"description": "Identifiers processed."
},
"notice": {
"type": "string",
"description": "Whole-identifier continuation and budget disclosure."
},
"entries": {
"type": "array",
"items": {
"type": "object",
"required": [
"id",
"name",
"status",
"sourceUrl",
"kind",
"requestedSections",
"availableSections",
"type"
],
"properties": {
"id": {
"type": "string",
"description": "Canonical catalog ID."
},
"kind": {
"enum": [
"full",
"partial",
"outline"
],
"type": "string",
"description": "full: every selected section the entry has, complete. partial: the sections of a default selection that fit the 24,000-byte response budget, complete, with the omitted ones in outline. outline: identity and section sizes only."
},
"name": {
"type": "string",
"description": "Source entry name."
},
"type": {
"enum": [
"weakness",
"category",
"grouping"
],
"type": "string",
"description": "CWE record type."
},
"notes": {
"type": "array",
"items": {
"type": "object",
"required": [
"type",
"text"
],
"properties": {
"text": {
"type": "string",
"description": "Complete note in CommonMark."
},
"type": {
"type": "string",
"description": "Source note type such as Relationship, Maintenance, Terminology, or Research Gap."
},
"version": {
"type": "string",
"description": "Source note version."
},
"releaseDate": {
"type": "string",
"description": "Source note release date."
}
},
"description": "Recorded MITRE note.",
"additionalProperties": false
},
"description": "Notes MITRE records for this entry, in source order; absent when none are recorded."
},
"notice": {
"type": "string",
"description": "Projection or recall guidance."
},
"status": {
"type": "string",
"description": "Source lifecycle status."
},
"members": {
"type": "array",
"items": {
"type": "object",
"required": [
"id",
"viewId"
],
"properties": {
"id": {
"type": "string",
"description": "CWE member ID."
},
"name": {
"type": "string",
"description": "Resolved member name."
},
"type": {
"enum": [
"weakness",
"category",
"grouping",
"view"
],
"type": "string",
"description": "Resolved member type."
},
"status": {
"type": "string",
"description": "Source status."
},
"viewId": {
"type": "string",
"description": "Source relationship view ID."
},
"dimensions": {
"type": "array",
"items": {
"type": "object",
"required": [
"type",
"value"
],
"properties": {
"type": {
"type": "string",
"description": "Source dimension type."
},
"value": {
"type": "string",
"description": "Source dimension value."
}
},
"description": "Recorded typed dimension.",
"additionalProperties": false
},
"description": "Recorded dimensions in source order."
},
"abstraction": {
"type": "string",
"description": "Source abstraction."
}
},
"description": "Direct catalog member.",
"additionalProperties": false
},
"description": "Direct category or grouping members in source order."
},
"outline": {
"type": "array",
"items": {
"type": "object",
"required": [
"section",
"sizeInBytes"
],
"properties": {
"section": {
"type": "string",
"description": "Section to request."
},
"sizeInBytes": {
"type": "integer",
"maximum": 9007199254740991,
"minimum": -9007199254740991,
"description": "Delivered UTF-8 size of the section on both surfaces: its structuredContent JSON plus its rendered content[] text."
}
},
"description": "Section not included in this entry, and its size.",
"additionalProperties": false
},
"description": "Sections available but not included in this entry, with sizes: every available section of an outline, or the selected sections a partial entry omitted."
},
"examples": {
"type": "array",
"items": {
"type": "object",
"required": [
"index",
"blocks"
],
"properties": {
"index": {
"type": "integer",
"maximum": 9007199254740991,
"minimum": -9007199254740991,
"description": "Stable zero-based source example index."
},
"blocks": {
"type": "array",
"items": {
"oneOf": [
{
"type": "object",
"required": [
"kind",
"text"
],
"properties": {
"kind": {
"type": "string",
"const": "prose",
"description": "Narrative block."
},
"text": {
"type": "string",
"description": "Complete narrative in CommonMark."
}
},
"description": "Complete source narrative block.",
"additionalProperties": false
},
{
"type": "object",
"required": [
"kind",
"text"
],
"properties": {
"kind": {
"type": "string",
"const": "code",
"description": "Code block."
},
"text": {
"type": "string",
"description": "Complete code laid out as MITRE displays it: one line per displayed line, each indentation level as 4 spaces."
},
"nature": {
"type": "string",
"description": "Open source code nature such as Bad, Good, or Attack."
},
"language": {
"type": "string",
"description": "Source code language."
}
},
"description": "Complete source code block and its available labels.",
"additionalProperties": false
}
],
"description": "Ordered source prose or code block."
},
"description": "All ordered blocks belonging to this example."
},
"references": {
"type": "array",
"items": {
"type": "object",
"required": [
"id"
],
"properties": {
"id": {
"type": "string",
"description": "External reference identifier."
},
"url": {
"type": "string",
"description": "Reference URL."
},
"title": {
"type": "string",
"description": "Reference title."
},
"altUrl": {
"type": "string",
"description": "Alternative reference URL."
},
"authors": {
"type": "array",
"items": {
"type": "string",
"description": "Reference authors."
},
"description": "Reference authors."
},
"edition": {
"type": "string",
"description": "Edition."
},
"section": {
"type": "string",
"description": "Reference section."
},
"urlDate": {
"type": "string",
"description": "URL access date."
},
"publisher": {
"type": "string",
"description": "Publisher."
},
"altUrlDate": {
"type": "string",
"description": "Alternative URL access date."
},
"mediaTypes": {
"type": "array",
"items": {
"type": "string",
"description": "Source media-type labels."
},
"description": "Source media-type labels."
},
"rationales": {
"type": "array",
"items": {
"type": "string",
"description": "Source reference rationale labels."
},
"description": "Source reference rationale labels."
},
"publication": {
"type": "string",
"description": "Publication."
},
"publicationDay": {
"type": "string",
"description": "Publication day."
},
"publicationYear": {
"type": "string",
"description": "Publication year."
},
"publicationMonth": {
"type": "string",
"description": "Publication month."
},
"accessRestrictions": {
"type": "string",
"description": "Source access-restriction label."
}
},
"description": "Resolved catalog reference.",
"additionalProperties": false
},
"description": "Resolved external references this example cites; absent when it cites none."
}
},
"description": "Complete demonstrative example.",
"additionalProperties": false
},
"description": "Selected complete examples."
},
"platforms": {
"type": "array",
"items": {
"type": "object",
"required": [
"kind"
],
"properties": {
"kind": {
"enum": [
"language",
"technology",
"OS",
"architecture"
],
"type": "string",
"description": "Platform dimension."
},
"name": {
"type": "string",
"description": "Source platform name."
},
"note": {
"type": "string",
"description": "Source platform note in CommonMark."
},
"class": {
"type": "string",
"description": "Source platform class."
},
"prevalence": {
"type": "string",
"description": "Source prevalence."
}
},
"description": "Applicable source platform.",
"additionalProperties": false
},
"description": "Applicable platforms."
},
"sourceUrl": {
"type": "string",
"description": "Official definition URL."
},
"dimensions": {
"type": "array",
"items": {
"type": "object",
"required": [
"type",
"value"
],
"properties": {
"type": {
"type": "string",
"description": "Source dimension type."
},
"value": {
"type": "string",
"description": "Source dimension value."
}
},
"description": "Recorded typed dimension.",
"additionalProperties": false
},
"description": "Recorded dimensions in source order."
},
"references": {
"type": "array",
"items": {
"type": "object",
"required": [
"id"
],
"properties": {
"id": {
"type": "string",
"description": "External reference identifier."
},
"url": {
"type": "string",
"description": "Reference URL."
},
"title": {
"type": "string",
"description": "Reference title."
},
"altUrl": {
"type": "string",
"description": "Alternative reference URL."
},
"authors": {
"type": "array",
"items": {
"type": "string",
"description": "Reference authors."
},
"description": "Reference authors."
},
"edition": {
"type": "string",
"description": "Edition."
},
"section": {
"type": "string",
"description": "Reference section."
},
"urlDate": {
"type": "string",
"description": "URL access date."
},
"publisher": {
"type": "string",
"description": "Publisher."
},
"altUrlDate": {
"type": "string",
"description": "Alternative URL access date."
},
"mediaTypes": {
"type": "array",
"items": {
"type": "string",
"description": "Source media-type labels."
},
"description": "Source media-type labels."
},
"rationales": {
"type": "array",
"items": {
"type": "string",
"description": "Source reference rationale labels."
},
"description": "Source reference rationale labels."
},
"publication": {
"type": "string",
"description": "Publication."
},
"publicationDay": {
"type": "string",
"description": "Publication day."
},
"publicationYear": {
"type": "string",
"description": "Publication year."
},
"publicationMonth": {
"type": "string",
"description": "Publication month."
},
"accessRestrictions": {
"type": "string",
"description": "Source access-restriction label."
}
},
"description": "Resolved catalog reference.",
"additionalProperties": false
},
"description": "Resolved external references."
},
"abstraction": {
"type": "string",
"description": "Source abstraction level."
},
"description": {
"type": "string",
"description": "Complete source description in CommonMark."
},
"examplePage": {
"type": "object",
"required": [
"total",
"shown",
"offset",
"hasMore"
],
"properties": {
"shown": {
"type": "integer",
"maximum": 9007199254740991,
"minimum": -9007199254740991,
"description": "Complete examples returned."
},
"total": {
"type": "integer",
"maximum": 9007199254740991,
"minimum": -9007199254740991,
"description": "Examples after language filtering."
},
"offset": {
"type": "integer",
"maximum": 9007199254740991,
"minimum": -9007199254740991,
"description": "Filtered-array offset."
},
"hasMore": {
"type": "boolean",
"description": "Whether more examples remain."
},
"nextOffset": {
"type": "integer",
"maximum": 9007199254740991,
"minimum": -9007199254740991,
"description": "Offset for the next example page."
}
},
"description": "Example continuation.",
"additionalProperties": false
},
"mitigations": {
"type": "array",
"items": {
"type": "object",
"required": [
"phases",
"description"
],
"properties": {
"phases": {
"type": "array",
"items": {
"type": "string",
"description": "Mitigation phases."
},
"description": "Mitigation phases."
},
"strategy": {
"type": "string",
"description": "Mitigation strategy."
},
"description": {
"type": "string",
"description": "Complete mitigation description in CommonMark."
},
"phaseDetails": {
"type": "array",
"items": {
"type": "object",
"required": [
"phase"
],
"properties": {
"phase": {
"type": "string",
"description": "Source phase."
},
"domain": {
"type": "string",
"description": "Domain of a custom phase; absent for a standard phase."
}
},
"description": "Ordered source phase with its custom domain when present.",
"additionalProperties": false
},
"description": "All source phases in order, including domain metadata when custom phases occur."
},
"effectiveness": {
"type": "string",
"description": "Source effectiveness."
},
"effectivenessNotes": {
"type": "string",
"description": "Effectiveness explanation in CommonMark."
}
},
"description": "Source mitigation.",
"additionalProperties": false
},
"description": "Complete mitigations."
},
"consequences": {
"type": "array",
"items": {
"type": "object",
"required": [
"scopes",
"impacts"
],
"properties": {
"note": {
"type": "string",
"description": "Source explanatory note in CommonMark."
},
"scopes": {
"type": "array",
"items": {
"type": "string",
"description": "Affected scopes."
},
"description": "Affected scopes."
},
"impacts": {
"type": "array",
"items": {
"type": "string",
"description": "Recorded impacts."
},
"description": "Recorded impacts."
},
"likelihood": {
"type": "string",
"description": "Source likelihood."
}
},
"description": "Source consequence.",
"additionalProperties": false
},
"description": "Recorded consequences."
},
"mappingNotes": {
"type": "object",
"properties": {
"usage": {
"type": "string",
"description": "Mapping usage."
},
"reasons": {
"type": "array",
"items": {
"type": "string",
"description": "Mapping reasons."
},
"description": "Mapping reasons."
},
"comments": {
"type": "string",
"description": "Mapping comments in CommonMark."
},
"rationale": {
"type": "string",
"description": "Mapping rationale in CommonMark."
}
},
"description": "Vulnerability mapping notes.",
"additionalProperties": false
},
"ordinalities": {
"type": "array",
"items": {
"type": "object",
"required": [
"ordinality"
],
"properties": {
"ordinality": {
"type": "string",
"description": "Source ordinality such as Primary, Resultant, or Indirect."
},
"description": {
"type": "string",
"description": "Source explanation of the ordinality in CommonMark."
}
},
"description": "Recorded weakness ordinality.",
"additionalProperties": false
},
"description": "Recorded ordinalities in source order: Primary when the weakness exists independently of others, Resultant when it results from another weakness, and Indirect when it makes other weaknesses easier to introduce or harder to detect."
},
"alternateTerms": {
"type": "array",
"items": {
"type": "object",
"required": [
"term"
],
"properties": {
"term": {
"type": "string",
"description": "Alternate name as recorded."
},
"roles": {
"type": "array",
"items": {
"type": "string",
"description": "Recorded alternate-term roles in source order."
},
"description": "Recorded alternate-term roles in source order."
},
"description": {
"type": "string",
"description": "Source explanation of the term in CommonMark."
}
},
"description": "Recorded alternate term.",
"additionalProperties": false
},
"description": "Alternate terms MITRE records for this entry, in source order; absent when none are recorded."
},
"functionalAreas": {
"type": "array",
"items": {
"type": "string",
"description": "Functional areas of a product where the weakness occurs."
},
"description": "Functional areas of a product where the weakness occurs."
},
"technicalNuance": {
"type": "string",
"description": "Complete technical nuance in CommonMark."
},
"detectionMethods": {
"type": "array",
"items": {
"type": "object",
"required": [
"method"
],
"properties": {
"method": {
"type": "string",
"description": "Detection method."
},
"phases": {
"type": "array",
"items": {
"type": "string",
"description": "Detection phases."
},
"description": "Detection phases."
},
"description": {
"type": "string",
"description": "Detection description in CommonMark."
},
"phaseDetails": {
"type": "array",
"items": {
"type": "object",
"required": [
"phase"
],
"properties": {
"phase": {
"type": "string",
"description": "Source phase."
},
"domain": {
"type": "string",
"description": "Domain of a custom phase; absent for a standard phase."
}
},
"description": "Ordered source phase with its custom domain when present.",
"additionalProperties": false
},
"description": "All source phases in order, including domain metadata when custom phases occur."
},
"effectiveness": {
"type": "string",
"description": "Source effectiveness."
},
"effectivenessNotes": {
"type": "string",
"description": "Effectiveness notes in CommonMark."
}
},
"description": "Detection method.",
"additionalProperties": false
},
"description": "Recorded detection methods."
},
"observedExamples": {
"type": "array",
"items": {
"type": "object",
"properties": {
"link": {
"type": "string",
"description": "Observed example URL."
},
"reference": {
"type": "string",
"description": "Observed example reference."
},
"rationales": {
"type": "array",
"items": {
"type": "string",
"description": "Source observed-example rationale labels."
},
"description": "Source observed-example rationale labels."
},
"description": {
"type": "string",
"description": "Observed example description in CommonMark."
}
},
"description": "Observed example.",
"additionalProperties": false
},
"description": "Recorded observed examples."
},
"taxonomyMappings": {
"type": "array",
"items": {
"type": "object",
"required": [
"taxonomy"
],
"properties": {
"id": {
"type": "string",
"description": "Recorded entry ID."
},
"fit": {
"type": "string",
"description": "Source mapping fit."
},
"name": {
"type": "string",
"description": "Recorded entry name."
},
"taxonomy": {
"type": "string",
"description": "Taxonomy name."
}
},
"description": "Recorded taxonomy crosswalk.",
"additionalProperties": false
},
"description": "Recorded taxonomy crosswalks."
},
"affectedResources": {
"type": "array",
"items": {
"type": "string",
"description": "System resources the weakness affects, such as Memory or File or Directory."
},
"description": "System resources the weakness affects, such as Memory or File or Directory."
},
"availableSections": {
"type": "array",
"items": {
"type": "string",
"description": "Sections actually present in the catalog entry."
},
"description": "Sections actually present in the catalog entry."
},
"backgroundDetails": {
"type": "array",
"items": {
"type": "string",
"description": "Complete background details on the underlying mechanism in CommonMark."
},
"description": "Complete background details on the underlying mechanism in CommonMark."
},
"relatedWeaknesses": {
"type": "array",
"items": {
"type": "object",
"required": [
"nature",
"id",
"viewId"
],
"properties": {
"id": {
"type": "string",
"description": "Related CWE ID."
},
"name": {
"type": "string",
"description": "Resolved related weakness name."
},
"nature": {
"type": "string",
"description": "Relationship nature."
},
"viewId": {
"type": "string",
"description": "Relationship view ID."
},
"ordinal": {
"type": "string",
"description": "Source ordinal."
},
"dimensions": {
"type": "array",
"items": {
"type": "object",
"required": [
"type",
"value"
],
"properties": {
"type": {
"type": "string",
"description": "Source dimension type."
},
"value": {
"type": "string",
"description": "Source dimension value."
}
},
"description": "Recorded typed dimension.",
"additionalProperties": false
},
"description": "Recorded dimensions in source order."
}
},
"description": "Recorded CWE relation.",
"additionalProperties": false
},
"description": "Recorded weakness relations."
},
"requestedSections": {
"type": "array",
"items": {
"type": "string",
"description": "Sections selected for this response."
},
"description": "Sections selected for this response."
},
"extendedDescription": {
"type": "string",
"description": "Complete extended description in CommonMark."
},
"likelihoodOfExploit": {
"type": "string",
"description": "Source exploit likelihood."
},
"modesOfIntroduction": {
"type": "array",
"items": {
"type": "object",
"required": [
"phase"
],
"properties": {
"note": {
"type": "string",
"description": "Source phase note in CommonMark."
},
"phase": {
"type": "string",
"description": "Introduction phase."
},
"domain": {
"type": "string",
"description": "Source domain of a custom introduction phase."
}
},
"description": "Introduction phase.",
"additionalProperties": false
},
"description": "Recorded modes of introduction."
},
"relatedAttackPatterns": {
"type": "array",
"items": {
"type": "object",
"required": [
"id"
],
"properties": {
"id": {
"type": "string",
"description": "Related CAPEC ID."
},
"name": {
"type": "string",
"description": "Resolved pattern name."
}
},
"description": "Recorded CAPEC mapping.",
"additionalProperties": false
},
"description": "Recorded CAPEC mappings."
},
"unphasedIntroductionNotes": {
"type": "array",
"items": {
"type": "string",
"description": "Source notes on introductions with no phases, in CommonMark."
},
"description": "Source notes on introductions with no phases, in CommonMark."
}
},
"description": "Projected CWE weakness, category, or grouping.",
"additionalProperties": false
},
"description": "Found projected entries in request order."
},
"guidance": {
"type": "string",
"description": "Call-level guidance: deferred-ID continuation, budget disclosure, and the re-call for parameters the selected sections leave unused."
},
"notFound": {
"type": "array",
"items": {
"type": "object",
"required": [
"id",
"reason",
"guidance"
],
"properties": {
"id": {
"type": "string",
"description": "Canonical requested ID, or for invalid_id the submitted item trimmed, with whitespace runs collapsed to one space."
},
"reason": {
"enum": [
"not_found",
"wrong_type",
"invalid_id"
],
"type": "string",
"description": "Missing record, record of another family or type, or an item that is no catalog ID."
},
"guidance": {
"type": "string",
"description": "Tool-specific recovery instruction."
}
},
"description": "Per-ID resolver miss.",
"additionalProperties": false
},
"description": "Per-ID misses; an all-missing batch is success."
},
"truncated": {
"type": "boolean",
"description": "Whether the count or response budget deferred identifiers."
},
"provenance": {
"type": "object",
"required": [
"cweVersion",
"cweDate",
"capecVersion",
"capecDate",
"loadedAt"
],
"properties": {
"cweDate": {
"type": "string",
"description": "CWE publication date."
},
"loadedAt": {
"type": "string",
"description": "Combined snapshot load time."
},
"capecDate": {
"type": "string",
"description": "CAPEC publication date."
},
"cweVersion": {
"type": "string",
"description": "CWE catalog version."
},
"capecVersion": {
"type": "string",
"description": "CAPEC catalog version."
}
},
"description": "Loaded catalog provenance.",
"additionalProperties": false
},
"totalCount": {
"type": "integer",
"maximum": 9007199254740991,
"minimum": -9007199254740991,
"description": "Distinct submitted identifiers before the batch cap."
},
"deferredIds": {
"type": "array",
"items": {
"type": "string",
"description": "Distinct items to submit in a later call: canonical IDs, or the collapsed text of an item that is no ID."
},
"description": "Distinct items to submit in a later call: canonical IDs, or the collapsed text of an item that is no ID."
}
},
"additionalProperties": false
}cwe_get_weakness annotations
{
"readOnlyHint": true,
"openWorldHint": true,
"idempotentHint": true
}cwe_get_attack_pattern — Retrieve CAPEC attack patterns
Advertised read-onlyOpen-world
Retrieve CAPEC attack patterns, categories, and views by ID, such as CAPEC-66, CAPEC66, or 66, including Deprecated and Obsolete records; each entry’s type says which. Processes up to 20 distinct IDs within a 24,000-byte response budget and discloses deferred IDs; a CWE ID or an item that is no ID returns in notFound with recovery guidance; only an item holding a control character other than whitespace, or a non-ID item over 150 characters, rejects the whole call. Patterns default to summary, prerequisites, execution, mitigations, and mappings; categories and views default to summary (the category summary or view objective) and relations (members in source order, or a filter-defined view’s source XPath filterDefinition). Views CAPEC-1000 (Mechanisms of Attack) and CAPEC-3000 (Domains of Attack) are entry points for browsing patterns by category. A default section that does not fit the budget is omitted whole and named with its size and a re-call (kind partial). The notes section, outside the defaults, returns recorded MITRE notes. Explicit sections remain complete, including one oversized record with disclosure; an empty array requests an outline. Recorded CWE and ATT&CK mappings are incomplete and do not establish current ATT&CK validation.
cwe_get_attack_pattern input schema
{
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"required": [
"ids"
],
"properties": {
"ids": {
"type": "array",
"items": {
"type": "string",
"description": "A CAPEC ID such as CAPEC-66 or a positive bare integer. An item that is no CAPEC ID is reported per item; an item holding a control character other than whitespace, or over 150 characters and no CWE or CAPEC ID, rejects the call."
},
"maxItems": 200,
"minItems": 1,
"description": "One to 200 submitted IDs; up to 20 distinct items are processed within the response budget."
},
"sections": {
"type": "array",
"items": {
"enum": [
"summary",
"prerequisites",
"execution",
"skills",
"consequences",
"mitigations",
"examples",
"relations",
"mappings",
"notes"
],
"type": "string",
"description": "A supported CAPEC detail section."
},
"description": "Selected sections; omit for defaults, or pass an empty array for an outline."
}
},
"additionalProperties": false
}cwe_get_attack_pattern output schema
{
"type": "object",
"anyOf": [
{
"not": {
"required": [
"error"
]
},
"required": [
"entries",
"notFound",
"deferredIds",
"provenance",
"totalCount"
]
},
{
"required": [
"error"
]
}
],
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"cap": {
"type": "integer",
"maximum": 9007199254740991,
"minimum": -9007199254740991,
"description": "Maximum identifiers processed per call."
},
"error": {
"type": "object",
"required": [
"code",
"message"
],
"properties": {
"code": {
"type": "integer",
"maximum": 9007199254740991,
"minimum": -9007199254740991,
"description": "JSON-RPC error code for this failure."
},
"data": {
"type": "object",
"properties": {
"reason": {
"type": "string",
"description": "Machine-readable failure mode."
},
"recovery": {
"type": "object",
"required": [
"hint"
],
"properties": {
"hint": {
"type": "string"
}
},
"description": "Actionable next step for the caller.",
"additionalProperties": {}
},
"retryable": {
"type": "boolean",
"description": "Whether retrying may succeed."
}
},
"additionalProperties": {}
},
"message": {
"type": "string",
"description": "Human-readable description of what went wrong."
}
},
"description": "Present when the call failed. Absent on success.",
"additionalProperties": {}
},
"shown": {
"type": "integer",
"maximum": 9007199254740991,
"minimum": -9007199254740991,
"description": "Identifiers processed."
},
"notice": {
"type": "string",
"description": "Whole-identifier continuation and budget disclosure."
},
"entries": {
"type": "array",
"items": {
"type": "object",
"required": [
"id",
"name",
"status",
"sourceUrl",
"kind",
"requestedSections",
"availableSections",
"type"
],
"properties": {
"id": {
"type": "string",
"description": "Canonical catalog ID."
},
"kind": {
"enum": [
"full",
"partial",
"outline"
],
"type": "string",
"description": "full: every selected section the entry has, complete. partial: the sections of a default selection that fit the 24,000-byte response budget, complete, with the omitted ones in outline. outline: identity and section sizes only."
},
"name": {
"type": "string",
"description": "Source entry name."
},
"type": {
"enum": [
"attack_pattern",
"category",
"view"
],
"type": "string",
"description": "CAPEC record type: an attack pattern, or a category or view that organizes patterns."
},
"notes": {
"type": "array",
"items": {
"type": "object",
"required": [
"type",
"text"
],
"properties": {
"text": {
"type": "string",
"description": "Complete note in CommonMark."
},
"type": {
"type": "string",
"description": "Source note type such as Relationship, Maintenance, Terminology, or Research Gap."
},
"version": {
"type": "string",
"description": "Source note version."
},
"releaseDate": {
"type": "string",
"description": "Source note release date."
}
},
"description": "Recorded MITRE note.",
"additionalProperties": false
},
"description": "Notes MITRE records for this entry, in source order; absent when none are recorded."
},
"notice": {
"type": "string",
"description": "Projection or recall guidance."
},
"skills": {
"type": "array",
"items": {
"type": "object",
"required": [
"description"
],
"properties": {
"level": {
"type": "string",
"description": "Source skill level."
},
"description": {
"type": "string",
"description": "Complete skill description in CommonMark."
}
},
"description": "Required skill.",
"additionalProperties": false
},
"description": "Recorded skills."
},
"status": {
"type": "string",
"description": "Source lifecycle status."
},
"members": {
"type": "array",
"items": {
"type": "object",
"required": [
"id"
],
"properties": {
"id": {
"type": "string",
"description": "Member CAPEC ID."
},
"name": {
"type": "string",
"description": "Resolved member name."
},
"type": {
"enum": [
"attack_pattern",
"category",
"view"
],
"type": "string",
"description": "Resolved CAPEC record type."
},
"status": {
"type": "string",
"description": "Source status."
},
"abstraction": {
"type": "string",
"description": "Source abstraction of a member attack pattern."
}
},
"description": "Direct category or view member.",
"additionalProperties": false
},
"description": "Direct members of a category or view in source order."
},
"outline": {
"type": "array",
"items": {
"type": "object",
"required": [
"section",
"sizeInBytes"
],
"properties": {
"section": {
"type": "string",
"description": "Section to request."
},
"sizeInBytes": {
"type": "integer",
"maximum": 9007199254740991,
"minimum": -9007199254740991,
"description": "Delivered UTF-8 size of the section on both surfaces: its structuredContent JSON plus its rendered content[] text."
}
},
"description": "Section not included in this entry, and its size.",
"additionalProperties": false
},
"description": "Sections available but not included in this entry, with sizes: every available section of an outline, or the selected sections a partial entry omitted."
},
"sourceUrl": {
"type": "string",
"description": "Official definition URL."
},
"indicators": {
"type": "array",
"items": {
"type": "string",
"description": "Recorded pattern indicators in CommonMark."
},
"description": "Recorded pattern indicators in CommonMark."
},
"references": {
"type": "array",
"items": {
"type": "object",
"required": [
"id"
],
"properties": {
"id": {
"type": "string",
"description": "External reference identifier."
},
"url": {
"type": "string",
"description": "Reference URL."
},
"title": {
"type": "string",
"description": "Reference title."
},
"altUrl": {
"type": "string",
"description": "Alternative reference URL."
},
"authors": {
"type": "array",
"items": {
"type": "string",
"description": "Reference authors."
},
"description": "Reference authors."
},
"edition": {
"type": "string",
"description": "Edition."
},
"section": {
"type": "string",
"description": "Reference section."
},
"urlDate": {
"type": "string",
"description": "URL access date."
},
"publisher": {
"type": "string",
"description": "Publisher."
},
"altUrlDate": {
"type": "string",
"description": "Alternative URL access date."
},
"mediaTypes": {
"type": "array",
"items": {
"type": "string",
"description": "Source media-type labels."
},
"description": "Source media-type labels."
},
"rationales": {
"type": "array",
"items": {
"type": "string",
"description": "Source reference rationale labels."
},
"description": "Source reference rationale labels."
},
"publication": {
"type": "string",
"description": "Publication."
},
"publicationDay": {
"type": "string",
"description": "Publication day."
},
"publicationYear": {
"type": "string",
"description": "Publication year."
},
"publicationMonth": {
"type": "string",
"description": "Publication month."
},
"accessRestrictions": {
"type": "string",
"description": "Source access-restriction label."
}
},
"description": "Resolved catalog reference.",
"additionalProperties": false
},
"description": "Resolved external references."
},
"abstraction": {
"type": "string",
"description": "Source abstraction level."
},
"description": {
"type": "string",
"description": "Complete source description in CommonMark: a pattern description, category summary, or view objective."
},
"mitigations": {
"type": "array",
"items": {
"type": "string",
"description": "Complete mitigations in CommonMark."
},
"description": "Complete mitigations in CommonMark."
},
"consequences": {
"type": "array",
"items": {
"type": "object",
"required": [
"scopes",
"impacts"
],
"properties": {
"note": {
"type": "string",
"description": "Source explanatory note in CommonMark."
},
"scopes": {
"type": "array",
"items": {
"type": "string",
"description": "Affected scopes."
},
"description": "Affected scopes."
},
"impacts": {
"type": "array",
"items": {
"type": "string",
"description": "Recorded impacts."
},
"description": "Recorded impacts."
},
"likelihood": {
"type": "string",
"description": "Source likelihood."
}
},
"description": "Source consequence.",
"additionalProperties": false
},
"description": "Recorded consequences."
},
"executionFlow": {
"type": "array",
"items": {
"type": "object",
"required": [
"step",
"phase",
"description"
],
"properties": {
"step": {
"type": "string",
"description": "Source step string."
},
"phase": {
"type": "string",
"description": "Source execution phase."
},
"indicators": {
"type": "array",
"items": {
"type": "string",
"description": "Recorded step indicators in CommonMark."
},
"description": "Recorded step indicators in CommonMark."
},
"techniques": {
"type": "array",
"items": {
"type": "string",
"description": "Complete source techniques in CommonMark."
},
"description": "Complete source techniques in CommonMark."
},
"description": {
"type": "string",
"description": "Complete step description in CommonMark."
}
},
"description": "Ordered execution step.",
"additionalProperties": false
},
"description": "Complete execution flow in source order."
},
"prerequisites": {
"type": "array",
"items": {
"type": "string",
"description": "Complete prerequisites in CommonMark."
},
"description": "Complete prerequisites in CommonMark."
},
"alternateTerms": {
"type": "array",
"items": {
"type": "object",
"required": [
"term"
],
"properties": {
"term": {
"type": "string",
"description": "Alternate name as recorded."
},
"roles": {
"type": "array",
"items": {
"type": "string",
"description": "Recorded alternate-term roles in source order."
},
"description": "Recorded alternate-term roles in source order."
},
"description": {
"type": "string",
"description": "Source explanation of the term in CommonMark."
}
},
"description": "Recorded alternate term.",
"additionalProperties": false
},
"description": "Alternate terms MITRE records for this entry, in source order; absent when none are recorded."
},
"typicalSeverity": {
"type": "string",
"description": "Source typical severity."
},
"exampleInstances": {
"type": "array",
"items": {
"type": "string",
"description": "Complete example instances in CommonMark."
},
"description": "Complete example instances in CommonMark."
},
"filterDefinition": {
"type": "string",
"description": "Source XPath filter defining a filter-defined view’s membership, exactly as published."
},
"taxonomyMappings": {
"type": "array",
"items": {
"type": "object",
"required": [
"taxonomy"
],
"properties": {
"id": {
"type": "string",
"description": "Recorded entry ID."
},
"fit": {
"type": "string",
"description": "Source mapping fit."
},
"name": {
"type": "string",
"description": "Recorded entry name."
},
"taxonomy": {
"type": "string",
"description": "Taxonomy name."
}
},
"description": "Recorded taxonomy crosswalk.",
"additionalProperties": false
},
"description": "All recorded taxonomy mappings."
},
"availableSections": {
"type": "array",
"items": {
"type": "string",
"description": "Sections actually present in the catalog entry."
},
"description": "Sections actually present in the catalog entry."
},
"relatedWeaknesses": {
"type": "array",
"items": {
"type": "object",
"required": [
"id"
],
"properties": {
"id": {
"type": "string",
"description": "Related CWE ID."
},
"name": {
"type": "string",
"description": "Resolved weakness name."
}
},
"description": "Recorded weakness mapping.",
"additionalProperties": false
},
"description": "Recorded CWE mappings."
},
"requestedSections": {
"type": "array",
"items": {
"type": "string",
"description": "Sections selected for this response."
},
"description": "Sections selected for this response."
},
"resourcesRequired": {
"type": "array",
"items": {
"type": "string",
"description": "Required resources in CommonMark."
},
"description": "Required resources in CommonMark."
},
"attackTechniqueIds": {
"type": "array",
"items": {
"type": "string",
"description": "Recorded ATT&CK IDs; not a current validation."
},
"description": "Recorded ATT&CK IDs; not a current validation."
},
"likelihoodOfAttack": {
"type": "string",
"description": "Source attack likelihood."
},
"extendedDescription": {
"type": "string",
"description": "Complete extended description in CommonMark."
},
"relatedAttackPatterns": {
"type": "array",
"items": {
"type": "object",
"required": [
"nature",
"id"
],
"properties": {
"id": {
"type": "string",
"description": "Related CAPEC ID."
},
"name": {
"type": "string",
"description": "Resolved name."
},
"nature": {
"type": "string",
"description": "Relationship nature."
}
},
"description": "Pattern relationship.",
"additionalProperties": false
},
"description": "Recorded pattern relationships."
}
},
"description": "Projected CAPEC attack pattern, category, or view.",
"additionalProperties": false
},
"description": "Found projected entries in request order."
},
"guidance": {
"type": "string",
"description": "Call-level guidance: deferred-ID continuation, budget disclosure, and the re-call for parameters the selected sections leave unused."
},
"notFound": {
"type": "array",
"items": {
"type": "object",
"required": [
"id",
"reason",
"guidance"
],
"properties": {
"id": {
"type": "string",
"description": "Canonical requested ID, or for invalid_id the submitted item trimmed, with whitespace runs collapsed to one space."
},
"reason": {
"enum": [
"not_found",
"wrong_type",
"invalid_id"
],
"type": "string",
"description": "Missing record, record of another family or type, or an item that is no catalog ID."
},
"guidance": {
"type": "string",
"description": "Tool-specific recovery instruction."
}
},
"description": "Per-ID resolver miss.",
"additionalProperties": false
},
"description": "Per-ID misses; an all-missing batch is success."
},
"truncated": {
"type": "boolean",
"description": "Whether the count or response budget deferred identifiers."
},
"provenance": {
"type": "object",
"required": [
"cweVersion",
"cweDate",
"capecVersion",
"capecDate",
"loadedAt"
],
"properties": {
"cweDate": {
"type": "string",
"description": "CWE publication date."
},
"loadedAt": {
"type": "string",
"description": "Combined snapshot load time."
},
"capecDate": {
"type": "string",
"description": "CAPEC publication date."
},
"cweVersion": {
"type": "string",
"description": "CWE catalog version."
},
"capecVersion": {
"type": "string",
"description": "CAPEC catalog version."
}
},
"description": "Loaded catalog provenance.",
"additionalProperties": false
},
"totalCount": {
"type": "integer",
"maximum": 9007199254740991,
"minimum": -9007199254740991,
"description": "Distinct submitted identifiers before the batch cap."
},
"deferredIds": {
"type": "array",
"items": {
"type": "string",
"description": "Distinct items to submit in a later call: canonical IDs, or the collapsed text of an item that is no ID."
},
"description": "Distinct items to submit in a later call: canonical IDs, or the collapsed text of an item that is no ID."
}
},
"additionalProperties": false
}cwe_get_attack_pattern annotations
{
"readOnlyHint": true,
"openWorldHint": true,
"idempotentHint": true
}cwe_search_weaknesses — Search CWE weaknesses
Advertised read-onlyOpen-world
Search CWE weaknesses by all text tokens, exact platform or consequence vocabulary, abstraction, status, mapping usage, view membership, a recorded taxonomy mapping (taxonomy name or entry ID such as CERT C ARR30-C), or a CVE that MITRE cites as an observed example. Text tokens match at word starts or camelCase humps; tokens of at least four Unicode letters also match after exactly one un or mis prefix at a word start (trusted finds untrusted), with possible spelling coincidences. Search other compounds such as deserialization as written; text never matches an entry ID or CVE. Omit filters to browse; categories and groupings are excluded. Each result carries MITRE’s mapping usage, which says whether the entry may be used to map a vulnerability, and, under a taxonomy or CVE filter, every mapping or observed example that matched. Results order by all tokens in the name or in one recorded alternate term such as XSS, then all in the description, then any other match, then numeric ID. Description previews contain the first sentence; use cwe_get_weakness for complete sections. Follow nextCursor for remaining matches.
cwe_search_weaknesses input schema
{
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"limit": {
"type": "integer",
"default": 20,
"maximum": 1000,
"minimum": 1,
"description": "Maximum page size; capped at 100 and a 24,000-byte response budget with disclosure."
},
"cursor": {
"type": "string",
"description": "Opaque continuation returned by this tool."
},
"filter": {
"type": "string",
"maxLength": 500,
"description": "All whitespace-separated tokens must match the name, a recorded alternate term, the description, or the extended description, each at a word start or camelCase hump (dos finds ReDoS). Tokens of at least four Unicode letters also match after exactly one un or mis prefix at a word start (trusted finds untrusted); spelling coincidences can match. Other compounds such as deserialization must be searched as written. Blank means unset."
},
"status": {
"type": "string",
"description": "Exact weakness status; discover with cwe_list_reference topic filter_values. A status only categories or groupings carry matches nothing. Omission includes all statuses, including Deprecated."
},
"viewId": {
"type": "string",
"pattern": "^\\s*(?:(?:[Cc][Ww][Ee](?:[-_]|\\s+)?)?0*([1-9]\\d*)\\s*)?$",
"description": "CWE view ID such as CWE-1000 or 1000, from cwe_list_reference topic views; matches the weaknesses its recorded members reach within the view, or that its source filter selects for a filter-defined view. Blank means unset."
},
"language": {
"type": "string",
"description": "Exact platform language name or class; discover with cwe_list_reference topic platforms."
},
"technology": {
"type": "string",
"description": "Exact platform technology name or class; discover with cwe_list_reference topic platforms."
},
"abstraction": {
"enum": [
"Pillar",
"Class",
"Base",
"Variant",
"Compound"
],
"type": "string",
"description": "Exact CWE abstraction level; blank means unset."
},
"mappingUsage": {
"type": "string",
"description": "Exact MITRE vulnerability mapping usage, such as Allowed or Allowed-with-Review; discover values with cwe_list_reference topic filter_values."
},
"taxonomyName": {
"type": "string",
"description": "Exact taxonomy name a weakness mapping records, such as CERT C Secure Coding or ISA/IEC 62443; discover values with cwe_list_reference topic filter_values. Matches any mapping in that taxonomy, including one without an entry ID."
},
"observedCveId": {
"type": "string",
"pattern": "^\\s*(?:[Cc][Vv][Ee]-\\d{4}-\\d{4,}\\s*)?$",
"description": "CVE ID such as CVE-2021-44228, in any case; matches the weaknesses MITRE cites it on as an observed example, not other CVE-to-CWE assignments such as NVD’s. Blank means unset."
},
"taxonomyEntryId": {
"type": "string",
"maxLength": 500,
"description": "Entry ID a weakness taxonomy mapping records, such as ARR30-C or A1, in any case and with any whitespace runs; matches only the whole recorded ID. With taxonomyName, both must hold on the same mapping. Blank means unset."
},
"consequenceImpact": {
"type": "string",
"description": "Exact consequence impact; discover with cwe_list_reference topic filter_values."
}
},
"additionalProperties": false
}cwe_search_weaknesses output schema
{
"type": "object",
"anyOf": [
{
"not": {
"required": [
"error"
]
},
"required": [
"results",
"pagination",
"provenance",
"appliedFilters",
"totalCount"
]
},
{
"required": [
"error"
]
}
],
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"cap": {
"type": "integer",
"maximum": 9007199254740991,
"minimum": -9007199254740991,
"description": "Effective page limit."
},
"error": {
"type": "object",
"required": [
"code",
"message"
],
"properties": {
"code": {
"type": "integer",
"maximum": 9007199254740991,
"minimum": -9007199254740991,
"description": "JSON-RPC error code for this failure."
},
"data": {
"type": "object",
"properties": {
"reason": {
"type": "string",
"examples": [
"unknown_filter",
"invalid_cursor"
],
"description": "Machine-readable failure mode. Declared by this tool: `unknown_filter`: Unsupported dynamic vocabulary or unknown or wrong-type view. `invalid_cursor`: Cursor is incompatible with inputs or catalog. Other values are possible when a failure originates below the handler."
},
"recovery": {
"type": "object",
"required": [
"hint"
],
"properties": {
"hint": {
"type": "string"
}
},
"description": "Actionable next step for the caller.",
"additionalProperties": {}
},
"retryable": {
"type": "boolean",
"description": "Whether retrying may succeed."
}
},
"additionalProperties": {}
},
"message": {
"type": "string",
"description": "Human-readable description of what went wrong."
}
},
"description": "Present when the call failed. Absent on success.",
"additionalProperties": {}
},
"shown": {
"type": "integer",
"maximum": 9007199254740991,
"minimum": -9007199254740991,
"description": "Items shown on this page."
},
"notice": {
"type": "string",
"description": "Empty-result or page-cap guidance."
},
"results": {
"type": "array",
"items": {
"type": "object",
"required": [
"id",
"name",
"status",
"sourceUrl",
"descriptionPreview"
],
"properties": {
"id": {
"type": "string",
"description": "Canonical CWE ID."
},
"name": {
"type": "string",
"description": "Source weakness name."
},
"status": {
"type": "string",
"description": "Source status."
},
"sourceUrl": {
"type": "string",
"description": "Official definition URL."
},
"abstraction": {
"type": "string",
"description": "Source abstraction."
},
"mappingUsage": {
"type": "string",
"description": "Source vulnerability mapping usage, such as Allowed or Prohibited; absent when not recorded."
},
"descriptionPreview": {
"type": "string",
"description": "First complete sentence of the CommonMark source description."
},
"likelihoodOfExploit": {
"type": "string",
"description": "Source exploit likelihood."
},
"matchedObservedExamples": {
"type": "array",
"items": {
"type": "object",
"properties": {
"link": {
"type": "string",
"description": "Observed example URL."
},
"reference": {
"type": "string",
"description": "Observed example reference."
},
"rationales": {
"type": "array",
"items": {
"type": "string",
"description": "Source observed-example rationale labels."
},
"description": "Source observed-example rationale labels."
},
"description": {
"type": "string",
"description": "Observed example description in CommonMark."
}
},
"description": "Observed example.",
"additionalProperties": false
},
"description": "Every observed example of this weakness that cites observedCveId, in source order; present only when it applies."
},
"matchedTaxonomyMappings": {
"type": "array",
"items": {
"type": "object",
"required": [
"taxonomy"
],
"properties": {
"id": {
"type": "string",
"description": "Recorded entry ID."
},
"fit": {
"type": "string",
"description": "Source mapping fit."
},
"name": {
"type": "string",
"description": "Recorded entry name."
},
"taxonomy": {
"type": "string",
"description": "Taxonomy name."
}
},
"description": "Recorded taxonomy crosswalk.",
"additionalProperties": false
},
"description": "Every taxonomy mapping of this weakness that taxonomyName and taxonomyEntryId match, in source order; present only when one of them applies."
}
},
"description": "Matching weakness preview.",
"additionalProperties": false
},
"description": "Matching weakness page."
},
"truncated": {
"type": "boolean",
"description": "Whether a page omits remaining matches."
},
"pagination": {
"type": "object",
"required": [
"total",
"shown",
"hasMore"
],
"properties": {
"shown": {
"type": "integer",
"maximum": 9007199254740991,
"minimum": -9007199254740991,
"description": "Items on this page."
},
"total": {
"type": "integer",
"maximum": 9007199254740991,
"minimum": -9007199254740991,
"description": "Matching items before paging."
},
"hasMore": {
"type": "boolean",
"description": "Whether a continuation exists."
},
"nextCursor": {
"type": "string",
"description": "Opaque continuation for the same normalized query."
}
},
"description": "Local result pagination.",
"additionalProperties": false
},
"provenance": {
"type": "object",
"required": [
"cweVersion",
"cweDate",
"capecVersion",
"capecDate",
"loadedAt"
],
"properties": {
"cweDate": {
"type": "string",
"description": "CWE publication date."
},
"loadedAt": {
"type": "string",
"description": "Combined snapshot load time."
},
"capecDate": {
"type": "string",
"description": "CAPEC publication date."
},
"cweVersion": {
"type": "string",
"description": "CWE catalog version."
},
"capecVersion": {
"type": "string",
"description": "CAPEC catalog version."
}
},
"description": "Loaded catalog provenance.",
"additionalProperties": false
},
"totalCount": {
"type": "integer",
"maximum": 9007199254740991,
"minimum": -9007199254740991,
"description": "Complete matching count before paging."
},
"appliedFilters": {
"type": "object",
"required": [
"limit"
],
"properties": {
"limit": {
"type": "integer",
"maximum": 9007199254740991,
"minimum": -9007199254740991,
"description": "Effective page limit."
},
"filter": {
"type": "string",
"description": "Normalized text filter."
},
"status": {
"type": "string",
"description": "Canonical status."
},
"viewId": {
"type": "string",
"description": "Canonical view ID."
},
"language": {
"type": "string",
"description": "Canonical language."
},
"technology": {
"type": "string",
"description": "Canonical technology."
},
"abstraction": {
"type": "string",
"description": "Canonical abstraction."
},
"mappingUsage": {
"type": "string",
"description": "Canonical mapping usage."
},
"taxonomyName": {
"type": "string",
"description": "Canonical taxonomy name."
},
"observedCveId": {
"type": "string",
"description": "Uppercase CVE ID."
},
"taxonomyEntryId": {
"type": "string",
"description": "Entry ID as a weakness mapping records it, or the whitespace-collapsed input when none does."
},
"consequenceImpact": {
"type": "string",
"description": "Canonical consequence impact."
}
},
"description": "Applied filters and defaults.",
"additionalProperties": false
}
},
"additionalProperties": false
}cwe_search_weaknesses annotations
{
"readOnlyHint": true,
"openWorldHint": true,
"idempotentHint": true
}cwe_search_attack_patterns — Search CAPEC attack patterns
Advertised read-onlyOpen-world
Search CAPEC attack patterns by every whitespace-separated text token, recorded CWE or ATT&CK mapping, abstraction, severity, or likelihood. Text tokens match at word starts or camelCase humps; tokens of at least four Unicode letters also match after exactly one un or mis prefix at a word start (config finds misconfiguration), with possible spelling coincidences. Search other compounds such as deserialization as written. Parent ATT&CK techniques include recorded subtechniques; CWE mappings are exact without hierarchy expansion. Omit filters to browse. Deprecated and Obsolete patterns are excluded by default. Mappings are incomplete and do not validate current ATT&CK coverage. Results order by all tokens in the name or in one recorded alternate term such as MITM, then all in the description, then any other match, then numeric ID; use cwe_get_attack_pattern for complete sections and follow nextCursor for remaining matches.
cwe_search_attack_patterns input schema
{
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"cweId": {
"type": "string",
"pattern": "^\\s*(?:(?:[Cc][Ww][Ee](?:[-_]|\\s+)?)?0*([1-9]\\d*)\\s*)?$",
"description": "Exact recorded CWE mapping, a CWE ID such as CWE-79 or 79 from cwe_search_weaknesses; blank means unset."
},
"limit": {
"type": "integer",
"default": 20,
"maximum": 1000,
"minimum": 1,
"description": "Maximum page size; capped at 100 and a 24,000-byte response budget with disclosure."
},
"cursor": {
"type": "string",
"description": "Opaque continuation returned by this tool."
},
"filter": {
"type": "string",
"maxLength": 500,
"description": "All-token case-insensitive filter over the name, recorded alternate terms, and description; each token matches at a word start or camelCase hump (path finds XPath). Tokens of at least four Unicode letters also match after exactly one un or mis prefix at a word start; spelling coincidences can match. Blank means unset."
},
"severity": {
"type": "string",
"description": "Exact source severity; discover with cwe_list_reference topic filter_values."
},
"likelihood": {
"type": "string",
"description": "Exact source likelihood; discover with cwe_list_reference topic filter_values."
},
"abstraction": {
"enum": [
"Meta",
"Standard",
"Detailed"
],
"type": "string",
"description": "Exact CAPEC abstraction; blank means unset."
},
"includeInactive": {
"type": "boolean",
"default": false,
"description": "Include Deprecated and Obsolete patterns; default false."
},
"attackTechniqueId": {
"type": "string",
"pattern": "^\\s*(?:[Tt]?(\\d{4}(?:\\.\\d{3})?)\\s*)?$",
"description": "Recorded Tdddd or Tdddd.ddd mapping from cwe_get_attack_pattern mappings, also accepting bare numeric form; blank means unset."
}
},
"additionalProperties": false
}cwe_search_attack_patterns output schema
{
"type": "object",
"anyOf": [
{
"not": {
"required": [
"error"
]
},
"required": [
"results",
"pagination",
"provenance",
"appliedFilters",
"totalCount"
]
},
{
"required": [
"error"
]
}
],
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"cap": {
"type": "integer",
"maximum": 9007199254740991,
"minimum": -9007199254740991,
"description": "Effective limit."
},
"error": {
"type": "object",
"required": [
"code",
"message"
],
"properties": {
"code": {
"type": "integer",
"maximum": 9007199254740991,
"minimum": -9007199254740991,
"description": "JSON-RPC error code for this failure."
},
"data": {
"type": "object",
"properties": {
"reason": {
"type": "string",
"examples": [
"unknown_filter",
"invalid_cursor"
],
"description": "Machine-readable failure mode. Declared by this tool: `unknown_filter`: Unsupported CAPEC vocabulary value. `invalid_cursor`: Cursor is incompatible with inputs or catalog. Other values are possible when a failure originates below the handler."
},
"recovery": {
"type": "object",
"required": [
"hint"
],
"properties": {
"hint": {
"type": "string"
}
},
"description": "Actionable next step for the caller.",
"additionalProperties": {}
},
"retryable": {
"type": "boolean",
"description": "Whether retrying may succeed."
}
},
"additionalProperties": {}
},
"message": {
"type": "string",
"description": "Human-readable description of what went wrong."
}
},
"description": "Present when the call failed. Absent on success.",
"additionalProperties": {}
},
"shown": {
"type": "integer",
"maximum": 9007199254740991,
"minimum": -9007199254740991,
"description": "Page item count."
},
"notice": {
"type": "string",
"description": "Empty-result or cap guidance."
},
"results": {
"type": "array",
"items": {
"type": "object",
"required": [
"id",
"name",
"abstraction",
"status",
"sourceUrl",
"descriptionPreview"
],
"properties": {
"id": {
"type": "string",
"description": "Canonical CAPEC ID."
},
"name": {
"type": "string",
"description": "Source name."
},
"status": {
"type": "string",
"description": "Source status."
},
"severity": {
"type": "string",
"description": "Source typical severity."
},
"sourceUrl": {
"type": "string",
"description": "Official definition URL."
},
"likelihood": {
"type": "string",
"description": "Source attack likelihood."
},
"abstraction": {
"type": "string",
"description": "Source abstraction."
},
"relatedWeaknesses": {
"type": "array",
"items": {
"type": "object",
"required": [
"id"
],
"properties": {
"id": {
"type": "string",
"description": "Recorded CWE ID."
},
"name": {
"type": "string",
"description": "Resolved CWE name."
}
},
"description": "Recorded CWE mapping.",
"additionalProperties": false
},
"description": "Recorded CWE mappings."
},
"attackTechniqueIds": {
"type": "array",
"items": {
"type": "string",
"description": "Recorded ATT&CK ID."
},
"description": "Recorded ATT&CK IDs; not a current validation."
},
"descriptionPreview": {
"type": "string",
"description": "First complete sentence of the CommonMark description."
}
},
"description": "Matching CAPEC preview.",
"additionalProperties": false
},
"description": "Matching pattern page."
},
"truncated": {
"type": "boolean",
"description": "Whether more matches remain."
},
"pagination": {
"type": "object",
"required": [
"total",
"shown",
"hasMore"
],
"properties": {
"shown": {
"type": "integer",
"maximum": 9007199254740991,
"minimum": -9007199254740991,
"description": "Items on this page."
},
"total": {
"type": "integer",
"maximum": 9007199254740991,
"minimum": -9007199254740991,
"description": "Matching items before paging."
},
"hasMore": {
"type": "boolean",
"description": "Whether a continuation exists."
},
"nextCursor": {
"type": "string",
"description": "Opaque continuation for the same normalized query."
}
},
"description": "Local result pagination.",
"additionalProperties": false
},
"provenance": {
"type": "object",
"required": [
"cweVersion",
"cweDate",
"capecVersion",
"capecDate",
"loadedAt"
],
"properties": {
"cweDate": {
"type": "string",
"description": "CWE publication date."
},
"loadedAt": {
"type": "string",
"description": "Combined snapshot load time."
},
"capecDate": {
"type": "string",
"description": "CAPEC publication date."
},
"cweVersion": {
"type": "string",
"description": "CWE catalog version."
},
"capecVersion": {
"type": "string",
"description": "CAPEC catalog version."
}
},
"description": "Loaded catalog provenance.",
"additionalProperties": false
},
"totalCount": {
"type": "integer",
"maximum": 9007199254740991,
"minimum": -9007199254740991,
"description": "Matching count before paging."
},
"appliedFilters": {
"type": "object",
"required": [
"includeInactive",
"limit"
],
"properties": {
"cweId": {
"type": "string",
"description": "Canonical CWE ID."
},
"limit": {
"type": "integer",
"maximum": 9007199254740991,
"minimum": -9007199254740991,
"description": "Effective page limit."
},
"filter": {
"type": "string",
"description": "Normalized filter."
},
"severity": {
"type": "string",
"description": "Canonical severity."
},
"likelihood": {
"type": "string",
"description": "Canonical likelihood."
},
"abstraction": {
"type": "string",
"description": "Canonical abstraction."
},
"includeInactive": {
"type": "boolean",
"description": "Applied inactive-record inclusion."
},
"attackTechniqueId": {
"type": "string",
"description": "Canonical ATT&CK ID."
}
},
"description": "Applied filters and defaults.",
"additionalProperties": false
}
},
"additionalProperties": false
}cwe_search_attack_patterns annotations
{
"readOnlyHint": true,
"openWorldHint": true,
"idempotentHint": true
}cwe_get_view — Get CWE view
Advertised read-onlyOpen-world
Read a CWE view objective, audience, status, source filter, recorded notes, and direct members in published order. Navigation views list top-level members rather than every descendant; use cwe_get_hierarchy for navigation or cwe_search_weaknesses with viewId for weakness membership closure. A filter-defined (Implicit) view lists no members: its filterDefinition is the source XPath that defines membership, and cwe_search_weaknesses with its viewId returns the weaknesses that filter selects; when the filter has a part this server does not evaluate, the guidance says so and that search returns none with a disclosure. Unknown and non-view IDs return a structured miss. Follow nextCursor for remaining direct members.
cwe_get_view input schema
{
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"required": [
"id"
],
"properties": {
"id": {
"type": "string",
"pattern": "^\\s*(?:[Cc][Ww][Ee](?:[-_]|\\s+)?)?0*([1-9]\\d*)\\s*$",
"description": "CWE view ID such as CWE-1000 or 1000; discover with cwe_list_reference topic views."
},
"limit": {
"type": "integer",
"default": 20,
"maximum": 1000,
"minimum": 1,
"description": "Maximum page size; capped at 100 and a 24,000-byte response budget with disclosure."
},
"cursor": {
"type": "string",
"description": "Opaque continuation returned by this tool."
}
},
"additionalProperties": false
}cwe_get_view output schema
{
"type": "object",
"anyOf": [
{
"not": {
"required": [
"error"
]
},
"required": [
"found",
"id",
"members",
"pagination",
"provenance",
"appliedFilters",
"totalCount"
]
},
{
"required": [
"error"
]
}
],
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"id": {
"type": "string",
"description": "Canonical requested CWE ID."
},
"cap": {
"type": "integer",
"maximum": 9007199254740991,
"minimum": -9007199254740991,
"description": "Effective page limit."
},
"name": {
"type": "string",
"description": "Source view name."
},
"type": {
"type": "string",
"description": "Source view type."
},
"error": {
"type": "object",
"required": [
"code",
"message"
],
"properties": {
"code": {
"type": "integer",
"maximum": 9007199254740991,
"minimum": -9007199254740991,
"description": "JSON-RPC error code for this failure."
},
"data": {
"type": "object",
"properties": {
"reason": {
"type": "string",
"examples": [
"invalid_cursor"
],
"description": "Machine-readable failure mode. Declared by this tool: `invalid_cursor`: Cursor is incompatible with the view or catalog. Other values are possible when a failure originates below the handler."
},
"recovery": {
"type": "object",
"required": [
"hint"
],
"properties": {
"hint": {
"type": "string"
}
},
"description": "Actionable next step for the caller.",
"additionalProperties": {}
},
"retryable": {
"type": "boolean",
"description": "Whether retrying may succeed."
}
},
"additionalProperties": {}
},
"message": {
"type": "string",
"description": "Human-readable description of what went wrong."
}
},
"description": "Present when the call failed. Absent on success.",
"additionalProperties": {}
},
"found": {
"type": "boolean",
"description": "Whether this ID resolves to a CWE view."
},
"notes": {
"type": "array",
"items": {
"type": "object",
"required": [
"type",
"text"
],
"properties": {
"text": {
"type": "string",
"description": "Complete note in CommonMark."
},
"type": {
"type": "string",
"description": "Source note type such as Relationship, Maintenance, Terminology, or Research Gap."
},
"version": {
"type": "string",
"description": "Source note version."
},
"releaseDate": {
"type": "string",
"description": "Source note release date."
}
},
"description": "Recorded MITRE note.",
"additionalProperties": false
},
"description": "Notes MITRE records for this entry, in source order; absent when none are recorded."
},
"shown": {
"type": "integer",
"maximum": 9007199254740991,
"minimum": -9007199254740991,
"description": "Page item count."
},
"notice": {
"type": "string",
"description": "Page cap disclosure."
},
"reason": {
"enum": [
"not_found",
"wrong_type"
],
"type": "string",
"description": "Missing record or known non-view."
},
"status": {
"type": "string",
"description": "Source status."
},
"members": {
"type": "array",
"items": {
"type": "object",
"required": [
"id",
"viewId"
],
"properties": {
"id": {
"type": "string",
"description": "Direct member CWE ID."
},
"name": {
"type": "string",
"description": "Resolved member name."
},
"type": {
"enum": [
"weakness",
"category",
"grouping",
"view"
],
"type": "string",
"description": "Resolved record family."
},
"status": {
"type": "string",
"description": "Source status."
},
"viewId": {
"type": "string",
"description": "Recorded relationship view ID."
},
"dimensions": {
"type": "array",
"items": {
"type": "object",
"required": [
"type",
"value"
],
"properties": {
"type": {
"type": "string",
"description": "Source dimension type."
},
"value": {
"type": "string",
"description": "Source dimension value."
}
},
"description": "Recorded typed dimension.",
"additionalProperties": false
},
"description": "Recorded dimensions in source order."
},
"abstraction": {
"type": "string",
"description": "Source abstraction."
}
},
"description": "Direct view member.",
"additionalProperties": false
},
"description": "Direct members in source order."
},
"audience": {
"type": "array",
"items": {
"type": "object",
"properties": {
"type": {
"type": "string",
"description": "Source stakeholder type."
},
"description": {
"type": "string",
"description": "Source audience description in CommonMark."
}
},
"description": "Source stakeholder.",
"additionalProperties": false
},
"description": "Source audience."
},
"guidance": {
"type": "string",
"description": "View discovery or empty-members guidance."
},
"objective": {
"type": "string",
"description": "Complete source objective in CommonMark."
},
"sourceUrl": {
"type": "string",
"description": "Official view definition URL."
},
"truncated": {
"type": "boolean",
"description": "Whether more direct members remain."
},
"pagination": {
"type": "object",
"required": [
"total",
"shown",
"hasMore"
],
"properties": {
"shown": {
"type": "integer",
"maximum": 9007199254740991,
"minimum": -9007199254740991,
"description": "Items on this page."
},
"total": {
"type": "integer",
"maximum": 9007199254740991,
"minimum": -9007199254740991,
"description": "Matching items before paging."
},
"hasMore": {
"type": "boolean",
"description": "Whether a continuation exists."
},
"nextCursor": {
"type": "string",
"description": "Opaque continuation for the same normalized query."
}
},
"description": "Local result pagination.",
"additionalProperties": false
},
"provenance": {
"type": "object",
"required": [
"cweVersion",
"cweDate",
"capecVersion",
"capecDate",
"loadedAt"
],
"properties": {
"cweDate": {
"type": "string",
"description": "CWE publication date."
},
"loadedAt": {
"type": "string",
"description": "Combined snapshot load time."
},
"capecDate": {
"type": "string",
"description": "CAPEC publication date."
},
"cweVersion": {
"type": "string",
"description": "CWE catalog version."
},
"capecVersion": {
"type": "string",
"description": "CAPEC catalog version."
}
},
"description": "Loaded catalog provenance.",
"additionalProperties": false
},
"totalCount": {
"type": "integer",
"maximum": 9007199254740991,
"minimum": -9007199254740991,
"description": "Direct members before paging."
},
"appliedFilters": {
"type": "object",
"required": [
"id",
"limit"
],
"properties": {
"id": {
"type": "string",
"description": "Canonical view ID."
},
"limit": {
"type": "integer",
"maximum": 9007199254740991,
"minimum": -9007199254740991,
"description": "Effective page size."
}
},
"description": "Applied inputs and defaults.",
"additionalProperties": false
},
"filterDefinition": {
"type": "string",
"description": "Source XPath filter defining a filter-defined view’s membership, exactly as published."
}
},
"additionalProperties": false
}cwe_get_view annotations
{
"readOnlyHint": true,
"openWorldHint": true,
"idempotentHint": true
}cwe_get_hierarchy — Get CWE hierarchy
Advertised read-onlyOpen-world
Navigate live CWE parents, children, ancestors, or descendants for a weakness, category, grouping, or view. Discover IDs with cwe_search_weaknesses or cwe_list_reference topic views. The default view is 1000; set viewId all for every view. primaryOnly applies only to ancestors. Edges point from parent to child and retain view identity; follow nextCursor for more edges. Continuations re-fetch the traversal and reject changed topology. Empty relations are successful; upstream failures remain errors. Node names come from the loaded catalog and may lag live IDs.
cwe_get_hierarchy input schema
{
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"required": [
"id",
"direction"
],
"properties": {
"id": {
"type": "string",
"pattern": "^\\s*(?:[Cc][Ww][Ee](?:[-_]|\\s+)?)?0*([1-9]\\d*)\\s*$",
"description": "CWE ID such as CWE-79 or 79, for a weakness, category, grouping, or view."
},
"limit": {
"type": "integer",
"default": 20,
"maximum": 1000,
"minimum": 1,
"description": "Maximum page size; capped at 100 and a 24,000-byte response budget with disclosure."
},
"cursor": {
"type": "string",
"description": "Opaque continuation returned by this tool."
},
"viewId": {
"type": "string",
"default": "1000",
"pattern": "^\\s*(?:(?:(?:[Cc][Ww][Ee](?:[-_]|\\s+)?)?0*([1-9]\\d*)|([Aa][Ll][Ll]))\\s*)?$",
"description": "CWE view ID such as CWE-1000 or 1000, or all; discover with cwe_list_reference topic views. Blank means the default."
},
"direction": {
"enum": [
"parents",
"children",
"ancestors",
"descendants"
],
"type": "string",
"description": "Live hierarchy direction."
},
"primaryOnly": {
"type": "boolean",
"default": false,
"description": "Restrict ancestors to primary parents; invalid for other directions when true."
}
},
"additionalProperties": false
}cwe_get_hierarchy output schema
{
"type": "object",
"anyOf": [
{
"not": {
"required": [
"error"
]
},
"required": [
"found",
"id",
"direction",
"viewId",
"primaryOnly",
"nodes",
"edges",
"pagination",
"retrievedAt",
"hierarchyFingerprint",
"provenance",
"appliedFilters"
]
},
{
"required": [
"error"
]
}
],
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"id": {
"type": "string",
"description": "Canonical queried root ID."
},
"cap": {
"type": "integer",
"maximum": 9007199254740991,
"minimum": -9007199254740991,
"description": "Effective edge page cap."
},
"edges": {
"type": "array",
"items": {
"type": "object",
"required": [
"parentId",
"childId",
"viewId"
],
"properties": {
"viewId": {
"type": "string",
"description": "Relationship view ID."
},
"childId": {
"type": "string",
"description": "Child CWE ID."
},
"parentId": {
"type": "string",
"description": "Parent CWE ID."
},
"primaryParent": {
"type": "boolean",
"description": "Source primary flag when supplied."
}
},
"description": "Directed view-scoped relationship.",
"additionalProperties": false
},
"description": "Deterministically ordered edge page."
},
"error": {
"type": "object",
"required": [
"code",
"message"
],
"properties": {
"code": {
"type": "integer",
"maximum": 9007199254740991,
"minimum": -9007199254740991,
"description": "JSON-RPC error code for this failure."
},
"data": {
"type": "object",
"properties": {
"reason": {
"type": "string",
"examples": [
"hierarchy_timeout",
"invalid_hierarchy_options",
"hierarchy_unavailable",
"queue_full",
"invalid_cursor"
],
"description": "Machine-readable failure mode. Declared by this tool: `hierarchy_timeout`: The total hierarchy deadline expires during queue wait or an active traversal. `invalid_hierarchy_options`: viewId names no CWE view, or primaryOnly is true outside ancestors; the message names each. `hierarchy_unavailable`: The live response is inconsistent or a locally known root returns 404. `queue_full`: The live hierarchy service has no available request slot. `invalid_cursor`: Traversal, query, or catalog changed since the cursor was created. Other values are possible when a failure originates below the handler."
},
"recovery": {
"type": "object",
"required": [
"hint"
],
"properties": {
"hint": {
"type": "string"
}
},
"description": "Actionable next step for the caller.",
"additionalProperties": {}
},
"retryable": {
"type": "boolean",
"description": "Whether retrying may succeed."
}
},
"additionalProperties": {}
},
"message": {
"type": "string",
"description": "Human-readable description of what went wrong."
}
},
"description": "Present when the call failed. Absent on success.",
"additionalProperties": {}
},
"found": {
"type": "boolean",
"description": "Whether the root exists according to the live hierarchy response."
},
"nodes": {
"type": "array",
"items": {
"type": "object",
"required": [
"id",
"type",
"viewId"
],
"properties": {
"id": {
"type": "string",
"description": "CWE node ID."
},
"name": {
"type": "string",
"description": "Loaded catalog name."
},
"type": {
"type": "string",
"description": "Upstream type. Roots the server adds (parents, single-view children, or an empty single-view result) use the catalog type, or unknown when unavailable."
},
"status": {
"type": "string",
"description": "Loaded status."
},
"viewId": {
"type": "string",
"description": "Topology view ID."
},
"sourceUrl": {
"type": "string",
"description": "Official catalog URL."
},
"abstraction": {
"type": "string",
"description": "Loaded abstraction."
}
},
"description": "Endpoint of an edge on this page, or a root without edges on the first page.",
"additionalProperties": false
},
"description": "Endpoint nodes of this page's edges; the first page also lists roots without edges."
},
"shown": {
"type": "integer",
"maximum": 9007199254740991,
"minimum": -9007199254740991,
"description": "Returned edge count."
},
"notice": {
"type": "string",
"description": "Paging cap or source drift notice."
},
"viewId": {
"type": "string",
"description": "Canonical selected view or all."
},
"guidance": {
"type": "string",
"description": "Recovery guidance for an unknown root."
},
"direction": {
"enum": [
"parents",
"children",
"ancestors",
"descendants"
],
"type": "string",
"description": "Applied traversal direction."
},
"truncated": {
"type": "boolean",
"description": "Whether additional edges remain."
},
"pagination": {
"type": "object",
"required": [
"total",
"shown",
"hasMore"
],
"properties": {
"shown": {
"type": "integer",
"maximum": 9007199254740991,
"minimum": -9007199254740991,
"description": "Items on this page."
},
"total": {
"type": "integer",
"maximum": 9007199254740991,
"minimum": -9007199254740991,
"description": "Matching items before paging."
},
"hasMore": {
"type": "boolean",
"description": "Whether a continuation exists."
},
"nextCursor": {
"type": "string",
"description": "Opaque continuation for the same normalized query."
}
},
"description": "Local result pagination.",
"additionalProperties": false
},
"provenance": {
"type": "object",
"required": [
"cweVersion",
"cweDate",
"capecVersion",
"capecDate",
"loadedAt"
],
"properties": {
"cweDate": {
"type": "string",
"description": "CWE publication date."
},
"loadedAt": {
"type": "string",
"description": "Combined snapshot load time."
},
"capecDate": {
"type": "string",
"description": "CAPEC publication date."
},
"cweVersion": {
"type": "string",
"description": "CWE catalog version."
},
"capecVersion": {
"type": "string",
"description": "CAPEC catalog version."
}
},
"description": "Loaded catalog provenance.",
"additionalProperties": false
},
"totalCount": {
"type": "integer",
"maximum": 9007199254740991,
"minimum": -9007199254740991,
"description": "Full traversal edge count."
},
"primaryOnly": {
"type": "boolean",
"description": "Applied primary ancestor restriction."
},
"retrievedAt": {
"type": "string",
"description": "Live retrieval time in ISO format."
},
"appliedFilters": {
"type": "object",
"required": [
"id",
"direction",
"viewId",
"primaryOnly",
"limit"
],
"properties": {
"id": {
"type": "string",
"description": "Canonical root ID."
},
"limit": {
"type": "integer",
"maximum": 9007199254740991,
"minimum": -9007199254740991,
"description": "Effective edge page size."
},
"viewId": {
"type": "string",
"description": "Selected view or all."
},
"direction": {
"type": "string",
"description": "Traversal direction."
},
"primaryOnly": {
"type": "boolean",
"description": "Primary ancestor restriction."
}
},
"description": "Normalized traversal and paging inputs.",
"additionalProperties": false
},
"hierarchyFingerprint": {
"type": "string",
"description": "Full traversal and catalog version fingerprint."
}
},
"additionalProperties": false
}cwe_get_hierarchy annotations
{
"readOnlyHint": true,
"openWorldHint": true,
"idempotentHint": true
}Prompts
0 advertised
Resources
1 advertised
mitre-cwe-guide
Use cwe_* tools to classify vulnerability root causes, investigate CWE-to-CAPEC attack mechanics, and navigate MITRE views. Use when mapping a finding to CWE, checking taxonomy or observed-CVE evidence, or following recorded CAPEC and ATT&CK relationships.
mitre-cwe-guide URI
skill://mitre-cwe-guide/SKILL.mdio.modelcontextprotocol/skills
io.modelcontextprotocol/skills URI template
skill://{+path}30-day availability
Aggregated from read-only remote checks; this is not a tool-execution or security guarantee.
- Successful checks
- 1 of 1 (100%)
- Average latency
- 549 ms
- 95th percentile latency
- 549 ms
Maintenance history
Public check and source-refresh events. Editorial and ownership records remain private.
- · probe · passed · 549 ms · metadata changed · 7 tool(s), 1 resource(s), 1 resource template(s), 0 prompt(s)
Connect from your client
Each snippet registers the same endpoint; pick the client you use.
Claude Code
Claude Code configuration
claude mcp add --transport http mitre-cwe-mcp-server-caseyjhand https://mitre-cwe.caseyjhand.com/mcpCodex
Codex configuration
codex mcp add mitre-cwe-mcp-server-caseyjhand --url https://mitre-cwe.caseyjhand.com/mcpCursor
Cursor configuration
{
"mcpServers": {
"mitre-cwe-mcp-server-caseyjhand": {
"url": "https://mitre-cwe.caseyjhand.com/mcp"
}
}
}Cline
Cline configuration
{
"mcpServers": {
"mitre-cwe-mcp-server-caseyjhand": {
"type": "streamableHttp",
"url": "https://mitre-cwe.caseyjhand.com/mcp",
"disabled": false
}
}
}VS Code
VS Code configuration
{
"servers": {
"mitre-cwe-mcp-server-caseyjhand": {
"type": "http",
"url": "https://mitre-cwe.caseyjhand.com/mcp"
}
}
}Gemini CLI
Gemini CLI configuration
gemini mcp add --transport http mitre-cwe-mcp-server-caseyjhand https://mitre-cwe.caseyjhand.com/mcpClaude Desktop
Claude Desktop configuration
{
"mcpServers": {
"mitre-cwe-mcp-server-caseyjhand": {
"url": "https://mitre-cwe.caseyjhand.com/mcp"
}
}
}Windsurf
Windsurf configuration
{
"mcpServers": {
"mitre-cwe-mcp-server-caseyjhand": {
"serverUrl": "https://mitre-cwe.caseyjhand.com/mcp"
}
}
}Let your agent find its tools
Find servers like mitre-cwe-mcp-server from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.