Mitre Attack Mcp Server
This server wraps the official MITRE ATT&CK STIX data and exposes it through 50+ MCP tools. You get structured access to techniques, threat groups, software, campaigns, and mitigations across Enterprise, Mobile, and ICS domains. It handles STIX downloads automatically, caches everything in memory for fast lookups, and includes tools to generate ATT&CK Navigator layers as JSON. Reach for this when you need an LLM to query threat intelligence programmatically, map adversary TTPs, or generate coverage visualizations without scraping. The data comes straight from MITRE's official releases, updates on first run, and supports queries like finding all techniques used by APT29 or listing mitigations for a specific technique ID.
- tools
- 41
- transport
- STDIO
- last updated
- Dec 13, 2025
Tools
41 toolsPublic tool metadata for what this MCP can expose to an agent.
get_data_statsShow download status, file paths, sizes, and ATT&CK release version
Show download status, file paths, sizes, and ATT&CK release version
No parameter schema in public metadata yet.
generate_layerGenerate an ATT&CK Navigator layer (JSON output)
Generate an ATT&CK Navigator layer (JSON output)
No parameter schema in public metadata yet.
get_layer_metadataReturn Navigator layer metadata template
Return Navigator layer metadata template
No parameter schema in public metadata yet.
get_technique_by_idGet a technique by ATT&CK ID (e.g., T1055)
Get a technique by ATT&CK ID (e.g., T1055)
No parameter schema in public metadata yet.
search_techniquesSearch techniques by name or description
Search techniques by name or description
No parameter schema in public metadata yet.
get_all_techniquesRetrieve all techniques
Retrieve all techniques
No parameter schema in public metadata yet.
get_all_parent_techniquesParent techniques only
Parent techniques only
No parameter schema in public metadata yet.
get_all_subtechniquesAll subtechniques
All subtechniques
No parameter schema in public metadata yet.
get_subtechniques_of_techniqueSubtechniques of a parent
Subtechniques of a parent
No parameter schema in public metadata yet.
get_parent_technique_of_subtechniqueParent of a subtechnique
Parent of a subtechnique
No parameter schema in public metadata yet.
get_technique_tacticsTactics associated with a technique
Tactics associated with a technique
No parameter schema in public metadata yet.
get_techniques_by_tacticTechniques under a tactic
Techniques under a tactic
No parameter schema in public metadata yet.
get_techniques_by_platformTechniques for a platform
Techniques for a platform
No parameter schema in public metadata yet.
get_revoked_techniquesRevoked techniques
Revoked techniques
No parameter schema in public metadata yet.
get_group_by_nameFind group by name or alias
Find group by name or alias
No parameter schema in public metadata yet.
search_groupsSearch groups
Search groups
No parameter schema in public metadata yet.
get_all_groupsAll ATT&CK groups
All ATT&CK groups
No parameter schema in public metadata yet.
get_groups_by_aliasLookup groups by alias
Lookup groups by alias
No parameter schema in public metadata yet.
get_groups_using_techniqueGroups using a technique
Groups using a technique
No parameter schema in public metadata yet.
get_groups_using_softwareGroups using software
Groups using software
No parameter schema in public metadata yet.
get_groups_attributing_to_campaignGroups attributed to a campaign
Groups attributed to a campaign
No parameter schema in public metadata yet.
get_softwareGet all software
Get all software
No parameter schema in public metadata yet.
search_softwareSearch software
Search software
No parameter schema in public metadata yet.
get_software_by_aliasLookup software by alias
Lookup software by alias
No parameter schema in public metadata yet.
get_software_used_by_groupSoftware used by a group
Software used by a group
No parameter schema in public metadata yet.
get_software_used_by_campaignSoftware used in campaigns
Software used in campaigns
No parameter schema in public metadata yet.
get_software_using_techniqueSoftware using a technique
Software using a technique
No parameter schema in public metadata yet.
get_all_campaignsGet all campaigns
Get all campaigns
No parameter schema in public metadata yet.
get_campaigns_by_aliasLookup campaigns by alias
Lookup campaigns by alias
No parameter schema in public metadata yet.
get_campaigns_using_techniqueCampaigns using a technique
Campaigns using a technique
No parameter schema in public metadata yet.
get_campaigns_using_softwareCampaigns using software
Campaigns using software
No parameter schema in public metadata yet.
get_campaigns_attributed_to_groupCampaign attribution
Campaign attribution
No parameter schema in public metadata yet.
get_all_mitigationsGet all mitigations
Get all mitigations
No parameter schema in public metadata yet.
get_mitigations_mitigating_techniqueMitigations for a technique
Mitigations for a technique
No parameter schema in public metadata yet.
get_techniques_mitigated_by_mitigationTechniques mitigated by a mitigation
Techniques mitigated by a mitigation
No parameter schema in public metadata yet.
get_all_tacticsGet all tactics
Get all tactics
No parameter schema in public metadata yet.
get_all_datasourcesGet all data sources
Get all data sources
No parameter schema in public metadata yet.
get_all_datacomponentsGet all data components
Get all data components
No parameter schema in public metadata yet.
get_datacomponents_detecting_techniqueData components detecting a technique
Data components detecting a technique
No parameter schema in public metadata yet.
get_all_assetsGet ICS assets
Get ICS assets
No parameter schema in public metadata yet.
get_assets_targeted_by_techniqueAssets targeted by a technique
Assets targeted by a technique
No parameter schema in public metadata yet.
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageReadme
MITRE ATT&CK MCP Server
65 MCP tools giving LLMs and agentic systems machine-callable access to the MITRE ATT&CK knowledge base
Details
- Repository
- github.com/imouiche/complete-mitre-attack-mcp-server
- Package
@imouiche/mitre-attack-mcp-server- Transport
- STDIO
- Registry
- MCP registry, active