Mitre Cwe Mcp Server

Connect Remote server

claude mcp add --transport http mitre-cwe-mcp-server https://mitre-cwe.caseyjhand.com/mcp

{
  "mcpServers": {
    "mitre-cwe-mcp-server": {
      "url": "https://mitre-cwe.caseyjhand.com/mcp"
    }
  }
}

{
  "servers": {
    "mitre-cwe-mcp-server": {
      "type": "http",
      "url": "https://mitre-cwe.caseyjhand.com/mcp"
    }
  }
}

Settings > Connectors > Add custom connector
URL: https://mitre-cwe.caseyjhand.com/mcp

Tools 7 found in our last check

• cwe_list_reference

  List loaded CWE/CAPEC vocabulary, every CWE view, workflow guidance, or catalog versions and refresh health. Filter requires every whitespace-separated token in an item label, each at a word start or camelCase hump (script finds JavaScript). Tokens of at least four Unicode lette…

• cwe_get_weakness

  Retrieve CWE weaknesses, categories, or groupings by ID, such as CWE-79, CWE79, or 79. Processes the first 20 distinct positions in submission order and lists later positions in deferredIds; a view, a CAPEC ID, or an item that is no ID returns in notFound with recovery guidance;…

• cwe_get_attack_pattern

  Retrieve CAPEC attack patterns, categories, and views by ID, such as CAPEC-66, CAPEC66, or 66, including Deprecated and Obsolete records; each entry’s type says which. Processes the first 20 distinct positions in submission order and lists later positions in deferredIds; a CWE I…

• cwe_search_weaknesses

  Search CWE weaknesses by all text tokens, exact platform or consequence vocabulary, abstraction, status, mapping usage, view membership, a recorded taxonomy mapping (taxonomy name or entry ID such as CERT C ARR30-C), or a CVE that MITRE cites as an observed example. Text tokens…

• cwe_search_attack_patterns

  Search CAPEC attack patterns by every whitespace-separated text token, recorded CWE or ATT&CK mapping, abstraction, severity, or likelihood. Text tokens match at word starts or camelCase humps; tokens of at least four Unicode letters also match after exactly one un or mis prefix…

• cwe_get_view

  Read a CWE view objective, audience, status, source filter, recorded notes, and direct members in published order. Navigation views list top-level members rather than every descendant; use cwe_get_hierarchy for navigation or cwe_search_weaknesses with viewId for weakness members…

• cwe_get_hierarchy

  Navigate live CWE parents, children, ancestors, or descendants for a weakness, category, grouping, or view. Discover IDs with cwe_search_weaknesses or cwe_list_reference topic views. The default view is 1000; set viewId all for every view. primaryOnly applies only to ancestors.…

Details

More developer tools servers See all

• AGILEX Docs

  Official AGILEX robotics product docs: manuals, CAN protocol, firmware, FAQ. Read-only.

• Echoo public catalog

  Read-only Echoo product facts, pricing, documentation and published writing skills.

• 99tests

  Order human-run real-device app tests from your coding agent; verified bugs return as fix prompts.

• LimitReceipts by aiw3b

  Find the AI coding/app-builder plan that fits your usage: limits, prices and plan-fit picks.

• Candor UI docs

  Candor UI docs and component suggestions. Read-only, no key, never serves paid source.

• MoneyTools Tools

  Call for a cheap read-only utility: 100+ tools; free daily tier; not charged on failure