Mitre MCP Server

mitre-mcp

MCP server exposing the MITRE ATT&CK framework via the official MCP Python SDK.

11 9 tools GitHub PyPI

No known CVEs

No license

Stale

Last commit 217d ago

Works with most clients

Transport: stdio, sse, http

9 tools · ~391 tok

Grade A · 0.2% of 200K ctx

Edit this pageView history

Security

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "mitreattack": {
      "url": "http://localhost:8000/mcp"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-luongnv89-mitre-mcp)](https://mcppedia.org/s/io-github-luongnv89-mitre-mcp)

Read me

What Mitre MCP Server does

Production-ready Model Context Protocol (MCP) server that exposes the MITRE ATT&CK® framework to LLMs, AI assistants, and automation workflows. Built with the official MCP Python SDK and mitreattack-python library for secure, high-performance access to adversary tactics, techniques, groups, software, and mitigations.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

uvx 'mitre-mcp' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

78/100across 5 weighted dimensions

How we score →

0255075100

−22

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked mitre-mcp against OSV.dev.

Inventory

Tools (9)

Click any tool to inspect its schema.

~391 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is Mitre MCP Server safe to use?: Mitre MCP Server has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install Mitre MCP Server?: Mitre MCP Server supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can Mitre MCP Server do?: Mitre MCP Server provides 9 tools: get_techniques, get_technique_by_id, get_techniques_by_tactic, get_tactics, get_groups and 4 more. See the full tools list on the server page for descriptions and parameters.
What AI clients work with Mitre MCP Server?: Mitre MCP Server is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is Mitre MCP Server actively maintained?: Mitre MCP Server is less actively maintained — last commit was 217 days ago. It has 11 GitHub stars.

Similar servers

Others in security

View all →

Ida Pro Mcp92

AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.

9.8k 3

io.github.jasonxkensei/xproof92

Proof primitive for AI agents on MultiversX. Anchor file hashes on-chain as verifiable proofs.

1 1

Mcp Windbg91

Model Context Protocol for WinDBG

1.4k 7

Repo Forensics90

Security scanner for GitHub repos, Agent Skills, Plugins, and MCP servers. 18 scanners. Zero dependencies.

112 1

MCP Security Weekly

Get CVE alerts and security updates for Mitre MCP Server and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

mitre-mcp: MITRE ATT&CK MCP Server

Available in the MCP Registry (search for io.github.luongnv89/mitre-mcp).

Highlights

LLM-native experience – Seamless integration with Claude, Windsurf, Cursor, and any MCP-compatible client

Secure-by-default – Validated inputs, TLS verification, disk-space checks, and structured error handling

High performance – O(1) technique lookups using pre-built indices (80-95% faster than scanning)

Flexible deployment – stdio for local clients or HTTP server for web-based integrations

Features

Comprehensive MITRE ATT&CK Coverage - All techniques, tactics, groups, software, and mitigations

Multi-Domain Support - Enterprise, Mobile, and ICS ATT&CK domains

Intelligent Caching - Automatic caching with configurable expiry (default: 24 hours)

Performance Optimized - O(1) lookups using pre-built indices (80-95% faster)

Dual Transport Modes - stdio for local clients, HTTP for web integrations

CORS-Enabled HTTP Server - Async notifications and cross-origin request support

Comprehensive Testing - 114 tests with 66% code coverage

Pre-commit Quality Checks - Automated formatting, linting, type checking, and security scanning

Input Validation - Secure-by-default with validated inputs and sanitized responses

Programmatic API - Python and Node.js clients (see API-INTEGRATION.md)

Frequently Asked Questions

Is Mitre MCP Server safe to use?

Mitre MCP Server has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install Mitre MCP Server?

Mitre MCP Server supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What can Mitre MCP Server do?

Mitre MCP Server provides 9 tools: get_techniques, get_technique_by_id, get_techniques_by_tactic, get_tactics, get_groups and 4 more. See the full tools list on the server page for descriptions and parameters.

What AI clients work with Mitre MCP Server?

Mitre MCP Server is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.

Is Mitre MCP Server actively maintained?

Mitre MCP Server is less actively maintained — last commit was 217 days ago. It has 11 GitHub stars.

mitre-mcp: MITRE ATT&CK MCP Server

Available in the MCP Registry (search for io.github.luongnv89/mitre-mcp).

Highlights

LLM-native experience – Seamless integration with Claude, Windsurf, Cursor, and any MCP-compatible client
Secure-by-default – Validated inputs, TLS verification, disk-space checks, and structured error handling
High performance – O(1) technique lookups using pre-built indices (80-95% faster than scanning)
Flexible deployment – stdio for local clients or HTTP server for web-based integrations

Features
Available MCP Tools
Quick Start
Web Frontend
Documentation
Configuration
Performance
Programmatic API
Development
Troubleshooting
FAQ
License

Features

Comprehensive MITRE ATT&CK Coverage - All techniques, tactics, groups, software, and mitigations
Multi-Domain Support - Enterprise, Mobile, and ICS ATT&CK domains
Intelligent Caching - Automatic caching with configurable expiry (default: 24 hours)
Performance Optimized - O(1) lookups using pre-built indices (80-95% faster)
Dual Transport Modes - stdio for local clients, HTTP for web integrations
CORS-Enabled HTTP Server - Async notifications and cross-origin request support
Comprehensive Testing - 114 tests with 66% code coverage
Pre-commit Quality Checks - Automated formatting, linting, type checking, and security scanning
Input Validation - Secure-by-default with validated inputs and sanitized responses
Programmatic API - Python and Node.js clients (see API-INTEGRATION.md)

Available MCP

... View full README on GitHub

Mitre MCP Server

Install in your client