io.github.cyanheads/mitre-cwe-mcp-server
io.github.cyanheads/mitre-cwe-mcp-server
MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/d2ff362a-1813-4279-9af1-90ff4b8df573/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "io.github.cyanheads/mitre-cwe-mcp-server"
title: null
description: "Explore MITRE CWE weaknesses, CAPEC attack patterns, mitigations, code examples, and mappings."
version: "0.3.0"
homepage_url: null
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "io.github.cyanheads"
display_name: "io.github.cyanheads"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository{5}
url: "https://github.com/cyanheads/mitre-cwe-mcp-server"
provider: "github"
owner: "cyanheads"
name: "mitre-cwe-mcp-server"
verified: false
packages[2]
0{4}
registry_type: "npm"
identifier: "@cyanheads/mitre-cwe-mcp-server"
version: "0.3.0"
transport: "stdio"
1{4}
registry_type: "npm"
identifier: "@cyanheads/mitre-cwe-mcp-server"
version: "0.3.0"
transport: "streamable-http"
transports[3]
0{5}
kind: "package"
type: "stdio"
endpoint_url: null
endpoint_host: null
auth_type: "unknown"
1{5}
kind: "package"
type: "streamable-http"
endpoint_url: null
endpoint_host: null
auth_type: "unknown"
2{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://mitre-cwe.caseyjhand.com/mcp"
endpoint_host: "mitre-cwe.caseyjhand.com"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "modern"
negotiated_version: "2026-07-28"
supported_versions[0]
transport_type: "streamable-http"
tools[7]
0{9}
name: "cwe_get_attack_pattern"
title: "Retrieve CAPEC attack patterns"
effect: "READ"
effect_confidence: 0.888
capabilities[0]
risk_severity: "INFO"
fingerprint: "c8d94907f722f7d29880af04b34819cf128003d4cfd36f0cb0e408415317f4d0"
input_schema_fingerprint: "fef3d21b54ff909aebd9a688cf5db6e418b5c7463e873ec63801794976869ece"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
1{9}
name: "cwe_get_hierarchy"
title: "Get CWE hierarchy"
effect: "WRITE"
effect_confidence: 0.533
capabilities[0]
risk_severity: "LOW"
fingerprint: "dfbc379ef938645c126b8d097142a1d4e5cd2e17ba5b74cc20813a7e0fef5a0f"
input_schema_fingerprint: "5f46c03ebb70357cc1257bf5ad8edb5159a097ae6cb49f05db8612f17e6da279"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
2{9}
name: "cwe_get_view"
title: "Get CWE view"
effect: "READ"
effect_confidence: 0.843
capabilities[1]
0{2}
capability: "PERSONAL_DATA"
confidence: 0.567
risk_severity: "LOW"
fingerprint: "6bf19ba5790f1bb4be50cc5d2bd60c361b2a2e9d923e5fe45c97cee9e3823ab3"
input_schema_fingerprint: "c2aa9f4a08c3cc74d5d6736e8e85d8c5625de6ab0089bbe963b733ad3d7ff7c1"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
3{9}
name: "cwe_get_weakness"
title: "Retrieve CWE weaknesses"
effect: "READ"
effect_confidence: 0.888
capabilities[0]
risk_severity: "INFO"
fingerprint: "0d15465ece95363b2ec546132cbcc5c877e2c1eba3aa2bfccff6f370455571de"
input_schema_fingerprint: "2c8fc73294351a341eb3bca0635247640d4688eee1a4cfe8d4e420206706beac"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
4{9}
name: "cwe_list_reference"
title: "List CWE and CAPEC reference values"
effect: "READ"
effect_confidence: 0.905
capabilities[0]
risk_severity: "INFO"
fingerprint: "8fee51f23a7668e6ee795c11fdc412b87743a718cd14e5319cee80680385e00b"
input_schema_fingerprint: "aaf2b6f00c9be4b5d9362a18b1677a1b29297bf6468303bac2beab631ebd99ad"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
5{9}
name: "cwe_search_attack_patterns"
title: "Search CAPEC attack patterns"
effect: "READ"
effect_confidence: 0.888
capabilities[1]
0{2}
capability: "SECURITY_CONTROL"
confidence: 0.584
risk_severity: "INFO"
fingerprint: "a69a9dac618d3d571dc566bc3a42d615a0edf0f9543375da515fa11ba8ff6aed"
input_schema_fingerprint: "71b31dd607d7dab29d1a7402e206a544fa3ab40fb48c1357bc8b2fee99ff5296"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
6{9}
name: "cwe_search_weaknesses"
title: "Search CWE weaknesses"
effect: "READ"
effect_confidence: 0.905
capabilities[2]
0{2}
capability: "ACCOUNT_MANAGEMENT"
confidence: 0.584
1{2}
capability: "SECURITY_CONTROL"
confidence: 0.632
risk_severity: "INFO"
fingerprint: "0abfea0f0053e2404dec1de044a4e01ae9befe6b9740f25acbd7b113c152f7c8"
input_schema_fingerprint: "5bdc77f66a47c90f22c944b65b8ffab485ed71e0281ba89a61b8e469d9b0c5c9"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
resources[2]
0{4}
key: "skill://mitre-cwe-guide/SKILL.md"
kind: "resource"
mime_type: "text/markdown"
fingerprint: "a5ac4e2973a1e21458815abaa67852addee0dd082d29cb677430705f4e8b180e"
1{4}
key: "skill://{+path}"
kind: "template"
mime_type: null
fingerprint: "9777dc7f1cf468158c157032a0ccebf9b50270f4e8753af9ccaf2fe99890ccf0"
prompts[0]
extensions[1]
0: "io.modelcontextprotocol/skills"
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "mitre-cwe.caseyjhand.com"
registrable_domain: "caseyjhand.com"
source: "transport"
findings[2]
0{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "MEDIUM"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-TOOL-ANNOTATION-UNDERCLAIM"
category: "annotations"
severity: "LOW"
title: "Annotations understate what the tool does"
subject_type: "tool"
subject_name: "cwe_get_hierarchy"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "unverified"
source_provenance: "partial"
security_scan: "no_critical_findings"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "io.github.cyanheads/mitre-cwe-mcp-server"
registry_content_sha256: "1c0b68c0118b4b8620e0e243aed84e550821414429a86cf041706de82b0b3703"
scan_snapshot_fingerprint: "836f16915ff2af6d44e738e91af183c31f397ca0ed438d2d7402f4283df2e4d3"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T02:14:31.456Z"
observed_at: "2026-11-11T13:55:20.453+00:00"
registry_published_at: "2026-11-11T12:28:36.946699+00:00"
registry_updated_at: null