# io.github.cyanheads/mitre-cwe-mcp-server (remote · mitre-cwe.caseyjhand.com)

Explore MITRE CWE weaknesses, CAPEC attack patterns, mitigations, code examples, and mappings.

- Trust score: 80/100 (high trust)
- Change this week: +6
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-11-05

## Components

- remote · `mitre-cwe.caseyjhand.com`: 80/100 (this document), [markdown](https://verifymcp.io/servers/cyanheads-mitre-cwe-mcp-server/mitre-cwe.md), [page](https://verifymcp.io/servers/cyanheads-mitre-cwe-mcp-server/mitre-cwe)
- npm · `@cyanheads/mitre-cwe-mcp-server`: 39/100, [markdown](https://verifymcp.io/servers/cyanheads-mitre-cwe-mcp-server/cyanheads-mitre-cwe-mcp-server.md), [page](https://verifymcp.io/servers/cyanheads-mitre-cwe-mcp-server/cyanheads-mitre-cwe-mcp-server)

## Channel facts

- Endpoint: `https://mitre-cwe.caseyjhand.com/mcp`
- Transports: `streamable-http`
- Auth: `none`
- Version: `0.2.0`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-11-05.

- **Endpoint Security**: 83/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - No authorisation is required to call this server. Every tool declares its destructiveHint and none is destructive, so open access doesn't expose one.
  - HTTPS is enforced; there's no plaintext access path.
  - The HSTS (Strict-Transport-Security) header is present.
  - DNSSEC is configured correctly; the domain's records validate against the full chain to the root.
- **Transport & Reachability**: 100/100
  - Verified streamable-http transport via a live MCP handshake.
- **Schema Quality & AI Usability**: 71/100
  - 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).
  - AI-judged instruction clarity (good).
  - Context-footprint check failed: tool/resource definitions use about 3064 tokens (~383/item across 8 items; 7 tools + 1 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 43/100
  - Stability observed for 13 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
  - Structured output schemas are declared (100% of tools); any adoption earns full credit.
- **Tool Safety**: 100/100
  - No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.
  - We read all 7 captured tool definition(s), and no name or description among them implies an irreversible operation.
  - An AI judge read all 9 captured unit(s) of tool text and found none that tries to manipulate the model reading it.
- **Capabilities**: 100/100
  - Implements a current MCP spec version (2026-07-28).

## Install

### How do I install the io.github.cyanheads/mitre-cwe-mcp-server server?

io.github.cyanheads/mitre-cwe-mcp-server is a hosted endpoint at https://mitre-cwe.caseyjhand.com/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add --transport http cyanheads-mitre-cwe-mcp-server 'https://mitre-cwe.caseyjhand.com/mcp'
```

### Cursor

```json
{
  "mcpServers": {
    "cyanheads-mitre-cwe-mcp-server": {
      "url": "https://mitre-cwe.caseyjhand.com/mcp"
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "cyanheads-mitre-cwe-mcp-server": {
      "type": "http",
      "url": "https://mitre-cwe.caseyjhand.com/mcp"
    }
  }
}
```

### Codex

```toml
[mcp_servers.cyanheads-mitre-cwe-mcp-server]
url = "https://mitre-cwe.caseyjhand.com/mcp"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "cyanheads-mitre-cwe-mcp-server": {
      "type": "remote",
      "url": "https://mitre-cwe.caseyjhand.com/mcp",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add cyanheads-mitre-cwe-mcp-server --url 'https://mitre-cwe.caseyjhand.com/mcp' --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  cyanheads-mitre-cwe-mcp-server:
    url: "https://mitre-cwe.caseyjhand.com/mcp"
```

### Netclaw

```json
{
  "McpServers": {
    "cyanheads-mitre-cwe-mcp-server": {
      "Transport": "http",
      "Url": "https://mitre-cwe.caseyjhand.com/mcp"
    }
  }
}
```

### Vellum

```bash
assistant mcp add cyanheads-mitre-cwe-mcp-server -t streamable-http -u 'https://mitre-cwe.caseyjhand.com/mcp'
```

### Other

```json
{
  "mcpServers": {
    "cyanheads-mitre-cwe-mcp-server": {
      "type": "http",
      "url": "https://mitre-cwe.caseyjhand.com/mcp"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-11-04 (score 80, +1)

No change was recorded against any check on this day. Stability & Change Management went from 37 to 40. That category is still filling its 30-day observation window: 11 days of observed history at the previous scan, 12 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-11-02 (score 79, +1)

No change was recorded against any check on this day. Stability & Change Management went from 30 to 33. That category is still filling its 30-day observation window: 9 days of observed history at the previous scan, 10 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-31 (score 78, +1)

No change was recorded against any check on this day. Stability & Change Management went from 23 to 27. That category is still filling its 30-day observation window: 7 days of observed history at the previous scan, 8 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-30 (score 77, +3)

- [security] The server rewrote its instructions, which are the text every model session reads
- [security] Tool “cwe_search_weaknesses” rewrote its description, which is the text the model reads
- [security] Tool “cwe_get_weakness” rewrote its description, which is the text the model reads
- [security] Tool “cwe_get_hierarchy” rewrote its description, which is the text the model reads
- [functional improvement] Schema quality: 446 → 383
- [functional] First check of Schema quality: 100
- [functional] New resource “mitre-cwe-guide”
- [functional] Server version: 0.1.4 → 0.2.0
- [cosmetic] “cwe_search_weaknesses” reworded the description of “status”
- [cosmetic] “cwe_get_hierarchy” reworded the description of “id”

### 2026-10-29 (score 74, +1)

No change was recorded against any check on this day. Stability & Change Management went from 17 to 20. That category is still filling its 30-day observation window: 5 days of observed history at the previous scan, 6 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-26 (score 73, +1)

No change was recorded against any check on this day. Stability & Change Management went from 7 to 10. That category is still filling its 30-day observation window: 2 days of observed history at the previous scan, 3 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-24 (score 72, +1)

- [security] Tool “cwe_search_weaknesses” rewrote its description, which is the text the model reads
- [security] Tool “cwe_list_reference” rewrote its description, which is the text the model reads
- [security] Tool “cwe_search_attack_patterns” rewrote its description, which is the text the model reads
- [functional improvement] Stability: unverified → 0.03
- [functional] Server version: 0.1.3 → 0.1.4
- [cosmetic] “cwe_list_reference” reworded the description of “filter”
- [cosmetic] “cwe_search_attack_patterns” reworded the description of “filter”
- [cosmetic] “cwe_search_weaknesses” reworded the description of “filter”

### 2026-10-23 (score 71)

First indexed and scored.

## MCP tools (7)

### `cwe_list_reference` (~291 tokens)

List CWE and CAPEC reference values

List loaded CWE/CAPEC vocabulary, every CWE view, workflow guidance, or catalog versions and refresh health. Filter requires every whitespace-separated token in an item label, each at a word start or camelCase hump (script finds JavaScript). Tokens of at least four Unicode letters also match after exactly one un or mis prefix at a word start; spelling coincidences can match. Omit filter to browse. Platforms distinguishes example code languages from platform names and classes. Follow nextCursor for complete lists; limits above 100 are capped with disclosure.

Input parameters:

- `cursor` (string): Opaque continuation returned by this tool.
- `filter` (string): All-token case-insensitive label filter; each token matches at a word start or camelCase hump. Tokens of at least four Unicode letters also match after exactly one un or mis prefix at a word start; s…
- `limit` (integer): Maximum page size; capped at 100 and a 24,000-byte response budget with disclosure.
- `topic` (string, required): views lists CWE view IDs; abstraction_levels explains CWE and CAPEC levels; mitigation_phases lists prevention phases; platforms lists platform dimensions and exampleLanguages; relationship_natures l…

Output parameters:

- `appliedFilters` (object): Applied filters and defaults.
- `cap` (integer): Effective page limit.
- `catalogs` (array): Both loaded catalog health records; versions only.
- `error` (object): Present when the call failed. Absent on success.
- `items` (array): Matching reference page.
- `notice` (string): Applicable empty or cap disclosure.
- `pagination` (object): Local result pagination.
- `provenance` (object): Loaded catalog provenance.
- `shown` (integer): Reference items on this page.
- `topic` (string): Requested topic.
- `totalCount` (integer): Matching reference items before paging.
- `truncated` (boolean): Whether the page limit omitted matching items.

### `cwe_get_weakness` (~466 tokens)

Retrieve CWE weaknesses

Retrieve CWE weaknesses, categories, or groupings by ID, such as CWE-79, CWE79, or 79. Processes up to 20 distinct IDs within a 24,000-byte response budget and discloses deferred IDs; a view, a CAPEC ID, or an item that is no ID returns in notFound with recovery guidance; only an item holding a control character other than whitespace, or a non-ID item over 150 characters, rejects the whole call. Defaults to summary, consequences, mitigations, and relations; a default section that does not fit the budget is omitted whole and named with its size and a re-call (kind partial). Summary carries recorded alternate terms such as XSS, ordinalities (Primary, Resultant, Indirect), and background details; the notes section, outside the defaults, returns every note MITRE records, such as Relationship, Maintenance, Terminology, and Research Gap notes. Explicit sections remain complete, including one oversized record with disclosure; an empty sections array requests an outline. exampleLanguage, exampleOffset, and exampleLimit select a complete source-ordered page of section examples: with sections omitted, setting any of them to a non-default value adds examples after the defaults, filled last and outlined with its page size and a re-call when it does not fit; explicit sections without examples ignore them, and guidance gives the re-call that adds examples. Categories and groupings are organizational entries, not vulnerability root causes.

Input parameters:

- `exampleLanguage` (string): Exact source example code language for section examples; discover values through cwe_list_reference topic platforms. With sections omitted, adds examples to the defaults.
- `exampleLimit` (integer): Complete examples per entry in section examples; no upper bound beyond the finite source array. With sections omitted, a value other than 3 adds examples to the defaults.
- `exampleOffset` (integer): Offset in each entry’s language-filtered examples (section examples). With sections omitted, a value above 0 adds examples to the defaults.
- `ids` (array, required): One to 200 submitted IDs; up to 20 distinct items are processed within the response budget.
- `sections` (array): Selected sections; omit for defaults, or pass an empty array for an outline.

Output parameters:

- `cap` (integer): Maximum identifiers processed per call.
- `deferredIds` (array): Distinct items to submit in a later call: canonical IDs, or the collapsed text of an item that is no ID.
- `entries` (array): Found projected entries in request order.
- `error` (object): Present when the call failed. Absent on success.
- `guidance` (string): Call-level guidance: deferred-ID continuation, budget disclosure, and the re-call for parameters the selected sections leave unused.
- `notFound` (array): Per-ID misses; an all-missing batch is success.
- `notice` (string): Whole-identifier continuation and budget disclosure.
- `provenance` (object): Loaded catalog provenance.
- `shown` (integer): Identifiers processed.
- `totalCount` (integer): Distinct submitted identifiers before the batch cap.
- `truncated` (boolean): Whether the count or response budget deferred identifiers.

### `cwe_get_attack_pattern` (~325 tokens)

Retrieve CAPEC attack patterns

Retrieve CAPEC attack patterns, categories, and views by ID, such as CAPEC-66, CAPEC66, or 66, including Deprecated and Obsolete records; each entry’s type says which. Processes up to 20 distinct IDs within a 24,000-byte response budget and discloses deferred IDs; a CWE ID or an item that is no ID returns in notFound with recovery guidance; only an item holding a control character other than whitespace, or a non-ID item over 150 characters, rejects the whole call. Patterns default to summary, prerequisites, execution, mitigations, and mappings; categories and views default to summary (the category summary or view objective) and relations (members in source order, or a filter-defined view’s source XPath filterDefinition). Views CAPEC-1000 (Mechanisms of Attack) and CAPEC-3000 (Domains of Attack) are entry points for browsing patterns by category. A default section that does not fit the budget is omitted whole and named with its size and a re-call (kind partial). The notes section, outside the defaults, returns recorded MITRE notes. Explicit sections remain complete, including one oversized record with disclosure; an empty array requests an outline. Recorded CWE and ATT&CK mappings are incomplete and do not establish current ATT&CK validation.

Input parameters:

- `ids` (array, required): One to 200 submitted IDs; up to 20 distinct items are processed within the response budget.
- `sections` (array): Selected sections; omit for defaults, or pass an empty array for an outline.

Output parameters:

- `cap` (integer): Maximum identifiers processed per call.
- `deferredIds` (array): Distinct items to submit in a later call: canonical IDs, or the collapsed text of an item that is no ID.
- `entries` (array): Found projected entries in request order.
- `error` (object): Present when the call failed. Absent on success.
- `guidance` (string): Call-level guidance: deferred-ID continuation, budget disclosure, and the re-call for parameters the selected sections leave unused.
- `notFound` (array): Per-ID misses; an all-missing batch is success.
- `notice` (string): Whole-identifier continuation and budget disclosure.
- `provenance` (object): Loaded catalog provenance.
- `shown` (integer): Identifiers processed.
- `totalCount` (integer): Distinct submitted identifiers before the batch cap.
- `truncated` (boolean): Whether the count or response budget deferred identifiers.

### `cwe_search_weaknesses` (~755 tokens)

Search CWE weaknesses

Search CWE weaknesses by all text tokens, exact platform or consequence vocabulary, abstraction, status, mapping usage, view membership, a recorded taxonomy mapping (taxonomy name or entry ID such as CERT C ARR30-C), or a CVE that MITRE cites as an observed example. Text tokens match at word starts or camelCase humps; tokens of at least four Unicode letters also match after exactly one un or mis prefix at a word start (trusted finds untrusted), with possible spelling coincidences. Search other compounds such as deserialization as written; text never matches an entry ID or CVE. Omit filters to browse; categories and groupings are excluded. Each result carries MITRE’s mapping usage, which says whether the entry may be used to map a vulnerability, and, under a taxonomy or CVE filter, every mapping or observed example that matched. Results order by all tokens in the name or in one recorded alternate term such as XSS, then all in the description, then any other match, then numeric ID. Description previews contain the first sentence; use cwe_get_weakness for complete sections. Follow nextCursor for remaining matches.

Input parameters:

- `abstraction` (string): Exact CWE abstraction level; blank means unset.
- `consequenceImpact` (string): Exact consequence impact; discover with cwe_list_reference topic filter_values.
- `cursor` (string): Opaque continuation returned by this tool.
- `filter` (string): All whitespace-separated tokens must match the name, a recorded alternate term, the description, or the extended description, each at a word start or camelCase hump (dos finds ReDoS). Tokens of at le…
- `language` (string): Exact platform language name or class; discover with cwe_list_reference topic platforms.
- `limit` (integer): Maximum page size; capped at 100 and a 24,000-byte response budget with disclosure.
- `mappingUsage` (string): Exact MITRE vulnerability mapping usage, such as Allowed or Allowed-with-Review; discover values with cwe_list_reference topic filter_values.
- `observedCveId` (string): CVE ID such as CVE-2021-44228, in any case; matches the weaknesses MITRE cites it on as an observed example, not other CVE-to-CWE assignments such as NVD’s. Blank means unset.
- `status` (string): Exact weakness status; discover with cwe_list_reference topic filter_values. A status only categories or groupings carry matches nothing. Omission includes all statuses, including Deprecated.
- `taxonomyEntryId` (string): Entry ID a weakness taxonomy mapping records, such as ARR30-C or A1, in any case and with any whitespace runs; matches only the whole recorded ID. With taxonomyName, both must hold on the same mappin…
- `taxonomyName` (string): Exact taxonomy name a weakness mapping records, such as CERT C Secure Coding or ISA/IEC 62443; discover values with cwe_list_reference topic filter_values. Matches any mapping in that taxonomy, inclu…
- `technology` (string): Exact platform technology name or class; discover with cwe_list_reference topic platforms.
- `viewId` (string): CWE view ID such as CWE-1000 or 1000, from cwe_list_reference topic views; matches the weaknesses its recorded members reach within the view, or that its source filter selects for a filter-defined vi…

Output parameters:

- `appliedFilters` (object): Applied filters and defaults.
- `cap` (integer): Effective page limit.
- `error` (object): Present when the call failed. Absent on success.
- `notice` (string): Empty-result or page-cap guidance.
- `pagination` (object): Local result pagination.
- `provenance` (object): Loaded catalog provenance.
- `results` (array): Matching weakness page.
- `shown` (integer): Items shown on this page.
- `totalCount` (integer): Complete matching count before paging.
- `truncated` (boolean): Whether a page omits remaining matches.

### `cwe_search_attack_patterns` (~446 tokens)

Search CAPEC attack patterns

Search CAPEC attack patterns by every whitespace-separated text token, recorded CWE or ATT&CK mapping, abstraction, severity, or likelihood. Text tokens match at word starts or camelCase humps; tokens of at least four Unicode letters also match after exactly one un or mis prefix at a word start (config finds misconfiguration), with possible spelling coincidences. Search other compounds such as deserialization as written. Parent ATT&CK techniques include recorded subtechniques; CWE mappings are exact without hierarchy expansion. Omit filters to browse. Deprecated and Obsolete patterns are excluded by default. Mappings are incomplete and do not validate current ATT&CK coverage. Results order by all tokens in the name or in one recorded alternate term such as MITM, then all in the description, then any other match, then numeric ID; use cwe_get_attack_pattern for complete sections and follow nextCursor for remaining matches.

Input parameters:

- `abstraction` (string): Exact CAPEC abstraction; blank means unset.
- `attackTechniqueId` (string): Recorded Tdddd or Tdddd.ddd mapping from cwe_get_attack_pattern mappings, also accepting bare numeric form; blank means unset.
- `cursor` (string): Opaque continuation returned by this tool.
- `cweId` (string): Exact recorded CWE mapping, a CWE ID such as CWE-79 or 79 from cwe_search_weaknesses; blank means unset.
- `filter` (string): All-token case-insensitive filter over the name, recorded alternate terms, and description; each token matches at a word start or camelCase hump (path finds XPath). Tokens of at least four Unicode le…
- `includeInactive` (boolean): Include Deprecated and Obsolete patterns; default false.
- `likelihood` (string): Exact source likelihood; discover with cwe_list_reference topic filter_values.
- `limit` (integer): Maximum page size; capped at 100 and a 24,000-byte response budget with disclosure.
- `severity` (string): Exact source severity; discover with cwe_list_reference topic filter_values.

Output parameters:

- `appliedFilters` (object): Applied filters and defaults.
- `cap` (integer): Effective limit.
- `error` (object): Present when the call failed. Absent on success.
- `notice` (string): Empty-result or cap guidance.
- `pagination` (object): Local result pagination.
- `provenance` (object): Loaded catalog provenance.
- `results` (array): Matching pattern page.
- `shown` (integer): Page item count.
- `totalCount` (integer): Matching count before paging.
- `truncated` (boolean): Whether more matches remain.

### `cwe_get_view` (~221 tokens)

Get CWE view

Read a CWE view objective, audience, status, source filter, recorded notes, and direct members in published order. Navigation views list top-level members rather than every descendant; use cwe_get_hierarchy for navigation or cwe_search_weaknesses with viewId for weakness membership closure. A filter-defined (Implicit) view lists no members: its filterDefinition is the source XPath that defines membership, and cwe_search_weaknesses with its viewId returns the weaknesses that filter selects; when the filter has a part this server does not evaluate, the guidance says so and that search returns none with a disclosure. Unknown and non-view IDs return a structured miss. Follow nextCursor for remaining direct members.

Input parameters:

- `cursor` (string): Opaque continuation returned by this tool.
- `id` (string, required): CWE view ID such as CWE-1000 or 1000; discover with cwe_list_reference topic views.
- `limit` (integer): Maximum page size; capped at 100 and a 24,000-byte response budget with disclosure.

Output parameters:

- `appliedFilters` (object): Applied inputs and defaults.
- `audience` (array): Source audience.
- `cap` (integer): Effective page limit.
- `error` (object): Present when the call failed. Absent on success.
- `filterDefinition` (string): Source XPath filter defining a filter-defined view’s membership, exactly as published.
- `found` (boolean): Whether this ID resolves to a CWE view.
- `guidance` (string): View discovery or empty-members guidance.
- `id` (string): Canonical requested CWE ID.
- `members` (array): Direct members in source order.
- `name` (string): Source view name.
- `notes` (array): Notes MITRE records for this entry, in source order; absent when none are recorded.
- `notice` (string): Page cap disclosure.
- `objective` (string): Complete source objective in CommonMark.
- `pagination` (object): Local result pagination.
- `provenance` (object): Loaded catalog provenance.
- `reason` (string): Missing record or known non-view.
- `shown` (integer): Page item count.
- `sourceUrl` (string): Official view definition URL.
- `status` (string): Source status.
- `totalCount` (integer): Direct members before paging.
- `truncated` (boolean): Whether more direct members remain.
- `type` (string): Source view type.

### `cwe_get_hierarchy` (~264 tokens)

Get CWE hierarchy

Navigate live CWE parents, children, ancestors, or descendants for a weakness, category, grouping, or view. Discover IDs with cwe_search_weaknesses or cwe_list_reference topic views. The default view is 1000; set viewId all for every view. primaryOnly applies only to ancestors. Edges point from parent to child and retain view identity; follow nextCursor for more edges. Continuations re-fetch the traversal and reject changed topology. Empty relations are successful; upstream failures remain errors. Node names come from the loaded catalog and may lag live IDs.

Input parameters:

- `cursor` (string): Opaque continuation returned by this tool.
- `direction` (string, required): Live hierarchy direction.
- `id` (string, required): CWE ID such as CWE-79 or 79, for a weakness, category, grouping, or view.
- `limit` (integer): Maximum page size; capped at 100 and a 24,000-byte response budget with disclosure.
- `primaryOnly` (boolean): Restrict ancestors to primary parents; invalid for other directions when true.
- `viewId` (string): CWE view ID such as CWE-1000 or 1000, or all; discover with cwe_list_reference topic views. Blank means the default.

Output parameters:

- `appliedFilters` (object): Normalized traversal and paging inputs.
- `cap` (integer): Effective edge page cap.
- `direction` (string): Applied traversal direction.
- `edges` (array): Deterministically ordered edge page.
- `error` (object): Present when the call failed. Absent on success.
- `found` (boolean): Whether the root exists according to the live hierarchy response.
- `guidance` (string): Recovery guidance for an unknown root.
- `hierarchyFingerprint` (string): Full traversal and catalog version fingerprint.
- `id` (string): Canonical queried root ID.
- `nodes` (array): Endpoint nodes of this page's edges; the first page also lists roots without edges.
- `notice` (string): Paging cap or source drift notice.
- `pagination` (object): Local result pagination.
- `primaryOnly` (boolean): Applied primary ancestor restriction.
- `provenance` (object): Loaded catalog provenance.
- `retrievedAt` (string): Live retrieval time in ISO format.
- `shown` (integer): Returned edge count.
- `totalCount` (integer): Full traversal edge count.
- `truncated` (boolean): Whether additional edges remain.
- `viewId` (string): Canonical selected view or all.

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/cyanheads-mitre-cwe-mcp-server/mitre-cwe#diagnostics

## Score history

- 2026-11-05: 80
- 2026-11-04: 80
- 2026-11-03: 79
- 2026-11-02: 79
- 2026-11-01: 78
- 2026-10-31: 78
- 2026-10-30: 77
- 2026-10-29: 74
- 2026-10-28: 73
- 2026-10-27: 73
- 2026-10-26: 73
- 2026-10-25: 72
- 2026-10-24: 72
- 2026-10-23: 71

## Common questions

### What is the io.github.cyanheads/mitre-cwe-mcp-server server?

io.github.cyanheads/mitre-cwe-mcp-server is listed in the public MCP registry as io.github.cyanheads/mitre-cwe-mcp-server. Explore MITRE CWE weaknesses, CAPEC attack patterns, mitigations, code examples, and mappings. This page covers its hosted endpoint (https://mitre-cwe.caseyjhand.com/mcp).

### Is the io.github.cyanheads/mitre-cwe-mcp-server server safe to use?

io.github.cyanheads/mitre-cwe-mcp-server scores 80 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the io.github.cyanheads/mitre-cwe-mcp-server server expose?

io.github.cyanheads/mitre-cwe-mcp-server exposes 7 tools: cwe_list_reference, cwe_get_weakness, cwe_get_attack_pattern, cwe_search_weaknesses, cwe_search_attack_patterns, and 2 more. Their descriptions and schemas cost roughly 2,768 tokens of context every time the server is loaded.

### Does the io.github.cyanheads/mitre-cwe-mcp-server server require authentication?

No. We connected to io.github.cyanheads/mitre-cwe-mcp-server without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

### Is the io.github.cyanheads/mitre-cwe-mcp-server server still maintained?

io.github.cyanheads/mitre-cwe-mcp-server is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

## Links

- Remote endpoint: https://mitre-cwe.caseyjhand.com/mcp
- Repository: https://github.com/cyanheads/mitre-cwe-mcp-server
- Changelog RSS feed: https://verifymcp.io/servers/cyanheads-mitre-cwe-mcp-server/mitre-cwe.xml
- Changelog JSON feed: https://verifymcp.io/servers/cyanheads-mitre-cwe-mcp-server/mitre-cwe.json
- HTML version of this page: https://verifymcp.io/servers/cyanheads-mitre-cwe-mcp-server/mitre-cwe