{"uid":"cap_2Ypsqe0V8E1JOm0cufmPg","slug":"mitre-capec-attack-pattern-lookup-3eb076a9","name":"MITRE CAPEC Attack Pattern Lookup","description":"Authoritative MITRE CAPEC (Common Attack Pattern Enumeration) lookup. Pass id (e.g. CAPEC-66, or just 66) for the canonical attack pattern — name, abstraction, description, typical likelihood + severity, mapped CWE weaknesses (with names), and related patterns (with names) — or query for a keyword search. Bundled catalog (~615 patterns), zero external calls. The attacker's-eye complement to security.cwe (the defender's weakness view) — the CAPEC↔CWE cross-links let an agent pivot between how an attack works and the weakness it exploits, with exact citeable IDs.","url":"https://2s.io/api/security/capec","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method","queryParams"],"properties":{"type":{"const":"http"},"method":{"const":"GET"},"queryParams":{"required":[],"properties":{"id":{"type":"string","description":"CAPEC id (CAPEC-66 or 66)."},"limit":{"type":"integer"},"query":{"type":"string","description":"Keyword search."}}}}}}},"responseSchema":null,"example":{"request":{"input":{"type":"http","method":"GET","queryParams":{"id":"CAPEC-66"}}},"response":{"data":{"ok":true,"items":[{"item":{"id":"CAPEC-66","name":"SQL Injection","status":"Draft","severity":"High","mappedCwe":[{"cwe":"CWE-89","name":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"},{"cwe":"CWE-1286","name":"Improper Validation of Syntactic Correctness of Input"}],"likelihood":"High","abstraction":"Standard","description":"This attack exploits target software that constructs SQL statements based on user input. An attacker crafts input strings so that when the target software constructs SQL statements based on the input, the resulting SQL statement performs actions other than those the application intended. SQL Injection results from failure of the application to appropriately validate input.","relationships":[{"name":"Command Injection","capec":"CAPEC-248","nature":"ChildOf"}]},"mode":"lookup","source":{"url":"https://capec.mitre.org/","license":"Free use with attribution (MITRE).","provider":"MITRE CAPEC — Common Attack Pattern Enumeration"}}],"total":1,"source":{"url":"https://capec.mitre.org/","license":"Free use with attribution (MITRE).","provider":"MITRE CAPEC — Common Attack Pattern Enumeration"}},"meta":{"cost":{"usd":0.001,"tier":0},"caller":"x402","version":null,"endpoint":"security.capec","settlement":{"txHash":"0xfa6768ef950401ee916927905a9cdf90f6521ff95e5f4d68744a18a0d6748206","network":"eip155:8453","success":true}}}},"exampleRequest":{"id":"CAPEC-66"},"tags":["x402"],"displayCostAmount":"0.001","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"settled","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.001/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.0025","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.0025","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_s2uYDfXYKq4bTAg0x7RlV","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.0025","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Looks up or searches MITRE CAPEC (Common Attack Pattern Enumeration and Classification) entries by ID or keyword, returning attack pattern details, severity, and CWE mappings.","exampleAgentPrompt":"Look up CAPEC-66 in the MITRE CAPEC database and tell me its name, severity, abstraction level, and any CWE mappings.","exampleUseCases":null,"resultDescription":"Returns a list of CAPEC attack pattern objects, each containing the CAPEC ID, name, severity (e.g. High), abstraction level (e.g. Standard), and an array of mapped CWE entries with their IDs and names. Also includes total count and MITRE source attribution.","failureModes":["Unknown CAPEC ID returns empty items array with total=0","Invalid ID format may return no results or an error","Keyword query with no matches returns empty results","Network or payment failure returns non-OK response"],"whenToPreferThis":"Use this endpoint when you need structured, ground-truth MITRE CAPEC data — specifically attack pattern details, severity ratings, or CWE cross-references — without needing an API key or signup. Prefer over scraping capec.mitre.org directly or using general web search when you need machine-readable structured output for threat modeling or security analysis.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-13T18:39:22.625Z","isFirstParty":false}