# Stack Facts CAPEC Attack Pattern Lookup

> Stack Facts CAPEC Attack Pattern Lookup is a paid API for AI agents from g5joilnmeep4ntz3nwezxt5dmu.srv.us, paid per call via x402, $0.003/call, status unknown (last checked 2026-10-19).

Retrieves detailed CAPEC (Common Attack Pattern Enumeration and Classification) entry by ID, including name, description, severity, mitigations, related CWEs, and MITRE attribution.

## Facts

- Endpoint: GET https://g5joilnmeep4ntz3nwezxt5dmu.srv.us/v1/capec/%7Bid%7D?utm_source=zero.xyz
- Price: $0.003/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-19
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/stack-facts-capec-attack-pattern-lookup-2074e37c
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_4VpDdavN6RzVJht0f5rg0

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability stack-facts-capec-attack-pattern-lookup-2074e37c
```

Example prompt: Pull the CAPEC entry for CAPEC-66 — I need the name, severity, likelihood, related CWEs, and recommended mitigations.

## When to prefer this

Use this endpoint when you need structured, machine-readable CAPEC attack pattern data for a specific CAPEC ID, especially when you need severity, likelihood, mitigations, and CWE/ATT&CK cross-references in a single signed, trustworthy response. Prefer it over scraping capec.mitre.org directly for agent workflows that need reliable JSON output with provenance metadata. No API key or account is required — pay per call in USDC.

## Known failure modes

- Invalid or non-existent CAPEC ID returns an error or empty data
- Malformed ID format (missing 'CAPEC-' prefix or wrong casing) may fail to resolve
- Payment failure (insufficient USDC balance) blocks the request
- Dataset staleness: meta.stale flag may indicate outdated data for a given entry

## How this service works

Check a package before install: malware, known vulnerabilities (OSV), exploited CVEs (CISA KEV) and end-of-life, plus LLM prices; signed answers, pay per call in USDC, no account or API key.

## Output

Returns a structured JSON object containing the CAPEC entry's ID, canonical URL, name, status, severity, likelihood, abstraction level, description, prerequisites, mitigations, related CWEs, related ATT&CK techniques, and metadata including dataset version, source URL, retrieval timestamp, and MITRE copyright notice.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "properties": {
   "type": "string"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "data": {
   "id": "CAPEC-66",
   "url": "https://capec.mitre.org/data/de…",
   "name": "SQL Injection",
   "status": "Draft",
   "related": {
    "cwe": [
     "CWE-89"
    ],
    "attack": []
   },
   "severity": "High",
   "likelihood": "High",
   "abstraction": "Standard",
   "description": "This attack exploits target sof…",
   "mitigations": [
    "Strong input validation - All u…"
   ],
   "prerequisites": [
    "SQL queries used by the applica…"
   ]
  },
  "meta": {
   "date": "2023-01-24",
   "stale": false,
   "notice": "Copyright © 2007–2026, The MITR…",
   "source": "https://capec.mitre.org/",
   "dataset": "capec",
   "version": "3.9",
   "attribution": "Copyright © 2007–2026, The MITR…",
   "retrieved_at": "2026-10-09T06:00:00.000Z"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/stack-facts-capec-attack-pattern-lookup-2074e37c/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from g5joilnmeep4ntz3nwezxt5dmu.srv.us](https://www.zero.xyz/host/g5joilnmeep4ntz3nwezxt5dmu.srv.us/llms.txt)