{"uid":"cap_4VpDdavN6RzVJht0f5rg0","slug":"stack-facts-capec-attack-pattern-lookup-2074e37c","name":"Stack Facts CAPEC Attack Pattern Lookup","description":"Check a package before install: malware, known vulnerabilities (OSV), exploited CVEs (CISA KEV) and end-of-life, plus LLM prices; signed answers, pay per call in USDC, no account or API key.","url":"https://g5joilnmeep4ntz3nwezxt5dmu.srv.us/v1/capec/%7Bid%7D?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","properties":{"properties":{"type":"string"}}},"responseSchema":{"type":"json","example":{"data":{"id":"CAPEC-66","url":"https://capec.mitre.org/data/de…","name":"SQL Injection","status":"Draft","related":{"cwe":["CWE-89"],"attack":[]},"severity":"High","likelihood":"High","abstraction":"Standard","description":"This attack exploits target sof…","mitigations":["Strong input validation - All u…"],"prerequisites":["SQL queries used by the applica…"]},"meta":{"date":"2023-01-24","stale":false,"notice":"Copyright © 2007–2026, The MITR…","source":"https://capec.mitre.org/","dataset":"capec","version":"3.9","attribution":"Copyright © 2007–2026, The MITR…","retrieved_at":"2026-10-09T06:00:00.000Z"}}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.003","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.003/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_t5PtrVq0PJ3BSb0UZb12D","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.003","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Retrieves detailed CAPEC (Common Attack Pattern Enumeration and Classification) entry by ID, including name, description, severity, mitigations, related CWEs, and MITRE attribution.","exampleAgentPrompt":"Pull the CAPEC entry for CAPEC-66 — I need the name, severity, likelihood, related CWEs, and recommended mitigations.","exampleUseCases":[{"title":"Enrich security finding with attack pattern","prompt":"I have a security finding tagged CAPEC-116 in my report — can you fetch the full CAPEC entry so I can include the description, severity, and mitigations?"},{"title":"Understand attack prerequisites before pentest","prompt":"Before I start testing, look up CAPEC-98 for me and tell me what the prerequisites are, how likely it is to succeed, and what defenses are recommended."},{"title":"Map attack pattern to CWEs for code review","prompt":"I'm doing a threat model review — fetch CAPEC-66 and tell me which CWEs it's related to so I can cross-check our code for those weaknesses."}],"resultDescription":"Returns a structured JSON object containing the CAPEC entry's ID, canonical URL, name, status, severity, likelihood, abstraction level, description, prerequisites, mitigations, related CWEs, related ATT&CK techniques, and metadata including dataset version, source URL, retrieval timestamp, and MITRE copyright notice.","failureModes":["Invalid or non-existent CAPEC ID returns an error or empty data","Malformed ID format (missing 'CAPEC-' prefix or wrong casing) may fail to resolve","Payment failure (insufficient USDC balance) blocks the request","Dataset staleness: meta.stale flag may indicate outdated data for a given entry"],"whenToPreferThis":"Use this endpoint when you need structured, machine-readable CAPEC attack pattern data for a specific CAPEC ID, especially when you need severity, likelihood, mitigations, and CWE/ATT&CK cross-references in a single signed, trustworthy response. Prefer it over scraping capec.mitre.org directly for agent workflows that need reliable JSON output with provenance metadata. No API key or account is required — pay per call in USDC.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-19T06:41:42.636Z","isFirstParty":false,"canonicalSlug":"stack-facts-capec-attack-pattern-lookup-2074e37c"}