MCP server

Mitre Cwe

io.github.cyanheads/mitre-cwe-mcp-server

Checked 26 Oct 2026, 08:29 UTC · Connected to it and listed its tools

Explore MITRE CWE weaknesses, CAPEC attack patterns, mitigations, code examples, and mappings.

Source

At a glance

Type

MCP server

Publisher

Not verified

Status

Working at last check

Tools

7

Token cost

About 4,927 tokens per request

Sets up in

Claude Code, Claude Desktop, Codex, Gemini CLI, Cursor, VS Code, Antigravity, ChatGPT, OpenAI API, Grok

Last checked

26 Oct 2026, 08:29 UTC

Connect it to your agent

Add to CursorAdd to VS CodeVS Code Insiders

Opens the app, which shows the server and asks you to confirm. For other apps, copy the setup below.

Claude Code

claude mcp add --transport http mitre-cwe-mcp-server https://mitre-cwe.caseyjhand.com/mcp

Claude Desktop

Settings → Connectors → Add custom connector, and paste the URL.

Codex (config.toml)

[mcp_servers.mitre-cwe-mcp-server]
url = "https://mitre-cwe.caseyjhand.com/mcp"

Gemini CLI

{"mcpServers":{"mitre-cwe-mcp-server":{"httpUrl":"https://mitre-cwe.caseyjhand.com/mcp"}}}

Cursor

{"mcpServers":{"mitre-cwe-mcp-server":{"url":"https://mitre-cwe.caseyjhand.com/mcp"}}}

VS Code

{"servers":{"mitre-cwe-mcp-server":{"type":"http","url":"https://mitre-cwe.caseyjhand.com/mcp"}}}

Antigravity

agy mcp add mitre-cwe-mcp-server https://mitre-cwe.caseyjhand.com/mcp

ChatGPT

Settings → Apps & Connectors → Advanced settings: turn on Developer mode, then Create a connector and paste the URL. Which plans can do this varies.

OpenAI API (Responses tools)

{"type":"mcp","server_label":"mitre-cwe-mcp-server","server_url":"https://mitre-cwe.caseyjhand.com/mcp","require_approval":"always"}

Grok (xAI API tools)

{"type":"mcp","server_label":"mitre-cwe-mcp-server","server_url":"https://mitre-cwe.caseyjhand.com/mcp"}

Tools

• cwe_get_attack_pattern ~634 tokens
  Retrieve CAPEC attack patterns, categories, and views by ID, such as CAPEC-66, CAPEC66, or 66, including Deprecated and Obsolete records; each entry’s type says which. Processes up to 20 distinct IDs within a 24,000-byte response budget and discloses deferred IDs; a CWE ID or an item that is no ID r
• cwe_get_hierarchy ~494 tokens
  Navigate live CWE parents, children, ancestors, or descendants for a weakness, category, or view. Discover IDs with cwe_search_weaknesses or cwe_list_reference topic views. The default view is 1000; set viewId all for every view. primaryOnly applies only to ancestors. Edges point from parent to chil
• cwe_get_view ~388 tokens
  Read a CWE view objective, audience, status, source filter, recorded notes, and direct members in published order. Navigation views list top-level members rather than every descendant; use cwe_get_hierarchy for navigation or cwe_search_weaknesses with viewId for weakness membership closure. A filter
• cwe_get_weakness ~886 tokens
  Retrieve CWE weaknesses or categories by ID, such as CWE-79, CWE79, or 79. Processes up to 20 distinct IDs within a 24,000-byte response budget and discloses deferred IDs; a view, a CAPEC ID, or an item that is no ID returns in notFound with recovery guidance; only an item holding a control characte
• cwe_list_reference ~549 tokens
  List loaded CWE/CAPEC vocabulary, every CWE view, workflow guidance, or catalog versions and refresh health. Filter requires every whitespace-separated token in an item label, each at a word start or camelCase hump (script finds JavaScript). Tokens of at least four Unicode letters also match after e
• cwe_search_attack_patterns ~776 tokens
  Search CAPEC attack patterns by every whitespace-separated text token, recorded CWE or ATT&CK mapping, abstraction, severity, or likelihood. Text tokens match at word starts or camelCase humps; tokens of at least four Unicode letters also match after exactly one un or mis prefix at a word start (con
• cwe_search_weaknesses ~1200 tokens
  Search CWE weaknesses by all text tokens, exact platform or consequence vocabulary, abstraction, status, mapping usage, view membership, a recorded taxonomy mapping (taxonomy name or entry ID such as CERT C ARR30-C), or a CVE that MITRE cites as an observed example. Text tokens match at word starts

Browse

• GitHub tools
• Website monitoring
• GitHub and code hosting
• Security scanning

Related MCP servers

• Stack Facts
  Signed EOL dates, exploited CVEs and LLM prices; pay per call in USDC, no account, no daily cap.
• Mitre Cwe
  MITRE CWE API MCP.
• Mitre Attck
  MITRE ATT&CK MCP — STIX bundles from github.com/mitre/cti.
• ContrastAPI
  55 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key.
• Gapup
  271 agent-payable tools: competitive intel, finance, KYC, compliance, ESG. x402 per-call.
• Cloudflare Radar
  Cloudflare Radar MCP — internet observatory (traffic, attacks, BGP, quality)
• CVE to MITRE ATT&CK Mapper
  Map CVE descriptions to MITRE ATT&CK techniques
• CVE to MITRE ATT&CK Mapper
  Map CVE descriptions to MITRE ATT&CK techniques

Badge for your README

[![AptLynx](https://aptlynx.net/badge/io.github.cyanheads/mitre-cwe-mcp-server.svg)](https://aptlynx.net/servers/io.github.cyanheads/mitre-cwe-mcp-server)

Listing text is written by the maker; AptLynx lists tools and does not vouch for them. Find another tool · Browse by topic · For agents