# Stack Facts MITRE ATT&CK Technique Lookup

> Stack Facts MITRE ATT&CK Technique Lookup is a paid API for AI agents from g5joilnmeep4ntz3nwezxt5dmu.srv.us, paid per call via x402, $0.002/call, status unknown (last checked 2026-10-19).

Retrieves detailed MITRE ATT&CK technique data by ID, including tactics, platforms, mitigations, detection guidance, and data sources, with signed responses paid per-call in USDC.

## Facts

- Endpoint: GET https://g5joilnmeep4ntz3nwezxt5dmu.srv.us/v1/technique/%7Bid%7D?utm_source=zero.xyz
- Price: $0.002/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-19
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/stack-facts-mitre-att-ck-technique-lookup-43bd19d2
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_jaP4YUZrfDfnYa8B4WexB

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability stack-facts-mitre-att-ck-technique-lookup-43bd19d2
```

Example prompt: Can you look up MITRE ATT&CK technique T1055.011 and tell me what it does, which platforms it affects, and what mitigations are recommended?

## When to prefer this

Use this endpoint when an AI agent needs authoritative, structured MITRE ATT&CK technique data on demand without setting up an API key or account — ideal for security automation, threat intelligence enrichment, or incident response workflows that need per-call, pay-as-you-go access to signed, verifiable ATT&CK data. Prefer this over scraping attack.mitre.org directly or maintaining a local ATT&CK dataset when freshness and signed provenance matter.

## Known failure modes

- Invalid or non-existent technique ID returns an error or empty result
- Revoked or deprecated techniques may have limited data
- Payment failure in USDC results in a 402 response and no data returned
- Network timeout on the srv.us host
- Stale data if the ATT&CK version has not been recently updated (check meta.stale field)

## How this service works

Check a package before install: malware, known vulnerabilities (OSV), exploited CVEs (CISA KEV) and end-of-life, plus LLM prices; signed answers, pay per call in USDC, no account or API key.

## Output

Returns a structured JSON object with the technique's ID, name, URL, description, associated tactics, targeted platforms, mitigation recommendations (with IDs and descriptions), detection guidance, data sources, revocation and deprecation status, plus metadata including the ATT&CK dataset version, retrieval timestamp, source URL, and staleness indicator.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "properties": {
   "type": "string"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "data": {
   "id": "T1055.011",
   "url": "https://attack.mitre.org/techni…",
   "name": "Extra Window Memory Injection",
   "revoked": false,
   "tactics": [
    "stealth"
   ],
   "detection": "Detects adversary manipulation …",
   "platforms": [
    "Windows"
   ],
   "deprecated": false,
   "description": "Adversaries may inject maliciou…",
   "mitigations": [
    {
     "id": "M1040",
     "name": "Behavior Prevention on Endpoint",
     "text": "Behavior Prevention on Endpoint…"
    }
   ],
   "data_sources": [
    "OS API Execution"
   ]
  },
  "meta": {
   "date": "2026-10-13",
   "stale": false,
   "notice": "MITRE ATT&CK® is a registered t…",
   "source": "https://attack.mitre.org/",
   "dataset": "technique",
   "version": "20.0",
   "attribution": "MITRE ATT&CK® is a registered t…",
   "retrieved_at": "2026-10-09T06:00:00.000Z"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/stack-facts-mitre-att-ck-technique-lookup-43bd19d2/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from g5joilnmeep4ntz3nwezxt5dmu.srv.us](https://www.zero.xyz/host/g5joilnmeep4ntz3nwezxt5dmu.srv.us/llms.txt)