Is Mitre Attack MCP Server safe to use?

Mitre Attack MCP Server has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install Mitre Attack MCP Server?

Mitre Attack MCP Server supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What can Mitre Attack MCP Server do?

Mitre Attack MCP Server provides 35 tools: get_data_stats, generate_layer, get_layer_metadata, get_technique_by_id, search_techniques and 30 more. See the full tools list on the server page for descriptions and parameters.

What AI clients work with Mitre Attack MCP Server?

Mitre Attack MCP Server is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.

Is Mitre Attack MCP Server actively maintained?

Mitre Attack MCP Server is less actively maintained — last commit was 148 days ago. It has 4 GitHub stars.

Mitre Attack MCP Server

@imouiche/mitre-attack-mcp-server

MCP server providing 50+ tools for MITRE ATT&CK techniques, groups, and mitigations

4 77/wk 35 tools GitHub npm PyPI

No known CVEs

No license

Maintained

Last commit 148d ago

Works with most clients

Transport: stdio, sse, http

35 tools · ~1.7k tok

Grade C · 0.8% of 200K ctx

Edit this pageView history

Security

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "mitre-attack": {
      "args": [
        "-y",
        "@imouiche/mitre-attack-mcp-server"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-imouiche-mitre-attack-mcp-server)](https://mcppedia.org/s/io-github-imouiche-mitre-attack-mcp-server)

Read me

What Mitre Attack MCP Server does

AI-Native Access to the World's Leading Threat Intelligence Framework

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y '@imouiche/mitre-attack-mcp-server' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

71/100across 5 weighted dimensions

How we score →

0255075100

−29

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked @imouiche/mitre-attack-mcp-server against OSV.dev.

Inventory

Tools (35)

Click any tool to inspect its schema.

~1.7k tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is Mitre Attack MCP Server safe to use?: Mitre Attack MCP Server has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install Mitre Attack MCP Server?: Mitre Attack MCP Server supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can Mitre Attack MCP Server do?: Mitre Attack MCP Server provides 35 tools: get_data_stats, generate_layer, get_layer_metadata, get_technique_by_id, search_techniques and 30 more. See the full tools list on the server page for descriptions and parameters.
What AI clients work with Mitre Attack MCP Server?: Mitre Attack MCP Server is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is Mitre Attack MCP Server actively maintained?: Mitre Attack MCP Server is less actively maintained — last commit was 148 days ago. It has 4 GitHub stars.

Similar servers

Others in security

View all →

Evil Mcp Server93

An evil MCP server used for redteam testing

30 1

Ida Pro Mcp92

AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.

8.7k 3

Iam Policy Autopilot90

IAM Policy Autopilot is an open source static code analysis tool that helps you quickly create baseline AWS IAM policies that you can refine as your application evolves. This tool is available as a command-line utility and MCP server for use within AI coding assistants for quickly building IAM policies.

361 1

io.github.peacprotocol/peac90

Signed receipts for agent, API, and MCP interactions. Portable and offline-verifiable.

11 5

MCP Security Weekly

Get CVE alerts and security updates for Mitre Attack MCP Server and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Security

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "mitre-attack": {
      "args": [
        "-y",
        "@imouiche/mitre-attack-mcp-server"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-imouiche-mitre-attack-mcp-server)](https://mcppedia.org/s/io-github-imouiche-mitre-attack-mcp-server)

Read me

What Mitre Attack MCP Server does

AI-Native Access to the World's Leading Threat Intelligence Framework

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y '@imouiche/mitre-attack-mcp-server' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

README

🛡️ MITRE ATT&CK MCP Server

AI-Native Access to the World's Leading Threat Intelligence Framework

Features • Installation • Quick Start • Tools • Examples • Roadmap

🎯 Overview

The MITRE ATT&CK MCP Server transforms the world's leading adversary knowledge base into an AI-native interface. Built for the Model Context Protocol, it enables LLMs and agentic systems to:

🔍 Query 200+ techniques, 140+ groups, 700+ software entries
🧠 Reason over complex threat relationships and TTPs
📊 Visualize coverage gaps with ATT&CK Navigator layers
⚡ Scale threat intelligence workflows with structured tools

Perfect for: Security teams, threat hunters, detection engineers, AI researchers, and anyone building intelligent security systems.

What is this?

mitre-attack-mcp-server is a self-contained MCP server that provides machine-callable access to the MITRE ATT&CK framework using official STIX data with LLMs friendly structured outputs.

It enables:

🤖 LLMs to reason about ATT&CK techniques, groups, software, and mitigations
🧠 Agentic workflows to generate threat explanations and coverage maps
🔍 Security teams to query ATT&CK relationships programmatically
📊 Visualization via ATT&CK Navigator layers

No scraping.
No fragile APIs.
Just official MITRE data, structured and reliable.

✨ Key Features

✅ 65+ MCP tools across ATT&CK domains (Enterprise, Mobile, ICS)
✅ Automatic STIX download & caching on first run
✅ Native ATT&CK Navigator layer generation
✅ Designed for LLMs & MCP-compatible clients
✅ In-memory caching for instant query responses
✅ Type-safe with Pydantic models
✅ Clean, production-ready, self-contained server
✅ Comprehensive test coverage

📦 Installation

Via PyPI (recommended) - Python Users

pip install mitre-mcp-server

npm

npm install -g @imouiche/mitre-attack-mcp-server

npx (no installation required)

npx @imouiche/mitre-attack-mcp-server

Via uv (Modern Python)

uv pip install mitre-mcp-server

Local Development

git clone https://github.com/imouiche/complete-mitre-attack-mcp-server.git
cd complete-mitre-attack-mcp-server
npm install

Using uv (Python package manager)

git clone https://github.com/imouiche/complete-mitre-attack-mcp-server.git
cd complete-mitre-attack-mcp-server
uv sync

⚡ Quick Start

1. Install

pip install mitre-mcp-server

2. Configure Claude Desktop

Add to your `claude_desktop_config.js

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

71/100across 5 weighted dimensions

How we score →

0255075100

−29

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked @imouiche/mitre-attack-mcp-server against OSV.dev.

Inventory

Tools (35)

Click any tool to inspect its schema.

~1.7k tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is Mitre Attack MCP Server safe to use?: Mitre Attack MCP Server has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install Mitre Attack MCP Server?: Mitre Attack MCP Server supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can Mitre Attack MCP Server do?: Mitre Attack MCP Server provides 35 tools: get_data_stats, generate_layer, get_layer_metadata, get_technique_by_id, search_techniques and 30 more. See the full tools list on the server page for descriptions and parameters.
What AI clients work with Mitre Attack MCP Server?: Mitre Attack MCP Server is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is Mitre Attack MCP Server actively maintained?: Mitre Attack MCP Server is less actively maintained — last commit was 148 days ago. It has 4 GitHub stars.