Mitre Cwe
liveSecurityDeveloperMITRE CWE (Common Weakness Enumeration) — look up software weakness records, categories, views, and parent/child relationships.
Tools
weakness"What is CWE-[N]" / "look up CWE [name]" / "details on [weakness]" / "explain XSS / SQL injection / buffer overflow" / "what kind of security flaw is [X]" — fetch a single MITRE CWE (Common Weakness E
No parameters required.
Try it
category"What CWEs fall under [category]" / "list weaknesses in the [X] family" / "memory safety weaknesses" / "input validation weaknesses" — fetch a CWE category record (a thematic grouping of related CWEs
No parameters required.
Try it
view"Top 25 most dangerous software weaknesses" / "OWASP Top 10 CWE mapping" / "CWE view [N]" — fetch a curated CWE view (a published, opinionated selection of weaknesses). View 1003 = simplified mapping
No parameters required.
Try it
children"CWEs derived from / under [N]" / "child weaknesses of [CWE]" / "more specific variants of [X]" — list immediate children of a CWE in the relationship tree. CWE is hierarchical; e.g. children of CWE-1
No parameters required.
Try it
parents"What's the parent CWE of [N]" / "broader weakness category for [X]" / "where does [CWE] sit in the taxonomy" — list immediate parents of a CWE in the relationship tree. Use to walk up to a more gener
No parameters required.
Try it
descendants"All weaknesses derived from [CWE]" / "full subtree below [N]" / "every variant of [X]" — full transitive descendants (children, grandchildren, …) of a CWE. Use for exhaustive coverage analysis — e.g.
No parameters required.
Try it
relationship"How is [CWE-A] related to [CWE-B]" / "relationship between two weaknesses" — fetch the directional relationship (parent/child/peer/precedes/can-precede) between two specific CWE IDs. Specialty tool;
No parameters required.
Try it
Test with curl
The gateway speaks JSON-RPC 2.0 over HTTP POST. You can test any pack directly from the terminal.
curl -X POST https://gateway.pipeworx.io/mitre-cwe/mcp \
-H "Content-Type: application/json" \
-d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'curl -X POST https://gateway.pipeworx.io/mitre-cwe/mcp \
-H "Content-Type: application/json" \
-d '{"jsonrpc":"2.0","id":2,"method":"tools/call","params":{"name":"weakness","arguments":{}}}'Use with the SDK
Install @pipeworx/sdk to call tools from any TypeScript/Node project.
import { Pipeworx } from '@pipeworx/sdk';
const px = new Pipeworx();
const result = await px.call("weakness", {});// Or ask in plain English:
const answer = await px.ask("mitre cwe (common weakness enumeration) — look up software weakness records, categories, views, and parent/child relationships");