MITRE ATT&CK
Exposes the MITRE ATT&CK framework through nine MCP tools that let you query tactics, techniques, threat groups, software, and mitigations across Enterprise, Mobile, and ICS domains. You get operations like get_technique_by_id for looking up specific TTPs, get_techniques_used_by_group for profiling adversaries like APT29, and get_techniques_mitigated_by_mitigation for defense planning. Built on mitreattack-python with automatic 24-hour caching and O(1) lookups via pre-built indices. Runs in HTTP mode for multi-client access or stdio for local integrations. Reach for this when you need Claude or other LLMs to reason about threat intelligence, map defensive controls to attack patterns, or analyze adversary tradecraft without manually searching the ATT&CK website.
- GitHub stars
- 11
- tools
- 9
- transport
- STDIO
- last updated
- Nov 18, 2025
Tools
9 toolsPublic tool metadata for what this MCP can expose to an agent.
get_techniquesList all techniques with filtering options
List all techniques with filtering options
No parameter schema in public metadata yet.
get_technique_by_idLook up specific technique by ID (e.g., T1055)
Look up specific technique by ID (e.g., T1055)
No parameter schema in public metadata yet.
get_techniques_by_tacticGet techniques for a specific tactic (e.g., persistence)
Get techniques for a specific tactic (e.g., persistence)
No parameter schema in public metadata yet.
get_tacticsList all tactical categories
List all tactical categories
No parameter schema in public metadata yet.
get_groupsList all threat actor groups
List all threat actor groups
No parameter schema in public metadata yet.
get_techniques_used_by_groupGet techniques used by a specific group (e.g., APT29)
Get techniques used by a specific group (e.g., APT29)
No parameter schema in public metadata yet.
get_softwareList malware and tools with filtering
List malware and tools with filtering
No parameter schema in public metadata yet.
get_mitigationsList all security mitigations
List all security mitigations
No parameter schema in public metadata yet.
get_techniques_mitigated_by_mitigationGet techniques addressed by a specific mitigation
Get techniques addressed by a specific mitigation
No parameter schema in public metadata yet.
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageReadme
Details
- Repository
- github.com/montimage/mitre-mcp
- Package
mitre-mcp- Transport
- STDIO
- Registry
- MCP registry, active