list_cwes

Search the CWE catalog (~964 records) by keyword. Returns matching weaknesses with their abstraction level and description. Costs 1 credit.

Cost: 1 credit per successful call  ·  Response shape: jsonb

Parameters

Example invocation

Ask your agent: "Find CWEs related to authentication, show me up to 20."

curl -s https://api.edgeprotect.io/functions/v1/mcp \
  -H "Authorization: Bearer $EDGEPROTECT_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"list_cwes","arguments":{"query":"authentication","limit":20}}}'

Response

{
  "count": 2,
  "query": "authentication",
  "limit": 20,
  "items": [
    {
      "cwe_id": 287,
      "name": "Improper Authentication",
      "abstraction": "Class",
      "status": "Stable",
      "likelihood_of_exploit": "Medium",
      "description": "When an actor claims to have a given identity, the software does not prove or insufficiently proves that the claim is correct."
    },
    {
      "cwe_id": 798,
      "name": "Use of Hard-coded Credentials",
      "abstraction": "Variant",
      "status": "Stable",
      "likelihood_of_exploit": "Medium",
      "description": "The software contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data."
    }
  ],
  "generated_at": "2026-05-18T10:24:31.118Z"
}

The full MCP envelope wrapping this payload is documented in Response Format.

Errors