Server Details
Query and retrieve information about various adversarial tactics and techniques used in cyber atta…
- Status
- Healthy
- Last Tested
- Transport
- Streamable HTTP
- URL
- Repository
- alex-llm/attAck-mcp-server
- GitHub Stars
- 3
- Server Listing
- ATT&CK MCP Server
Available Tools
6 toolslist_tacticsTry in Inspector
Retrieve and list all tactics defined in the MITRE ATT&CK framework. Provides ID, name, and description for each tactic.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
query_detectionsTry in Inspector
Query detection methods or data components associated with an ATT&CK technique ID. Returns the source (data component name) and description for each relevant detection.
| Name | Required | Description | Default |
|---|---|---|---|
| technique_id | Yes | The ATT&CK technique ID to query detections for (e.g., 'T1059.001'). Must be an exact match. |
query_mitigationsTry in Inspector
Query the list of mitigations related to a specific ATT&CK technique ID. Returns ID, name, and description for each applicable mitigation.
| Name | Required | Description | Default |
|---|---|---|---|
| technique_id | Yes | The ATT&CK technique ID to query mitigations for (e.g., 'T1059.001'). Must be an exact match. |
query_techniqueTry in Inspector
Query ATT&CK technique details by exact technique ID or fuzzy technique name search. ID query returns full data for a single technique including ID, name, description, platforms, kill chain phases, references, and subtechniques. Name search returns a summary list of matching techniques with ID, name, and short description.
| Name | Required | Description | Default |
|---|---|---|---|
| tech_name | No | Keyword for fuzzy search in ATT&CK technique names (e.g., 'phishing'). Used if no technique_id is provided. | |
| technique_id | No | The ATT&CK technique ID to query (e.g., 'T1059.001'). If provided, performs exact ID query first. |
search_technique_fullTry in Inspector
Query comprehensive details of ATT&CK techniques by exact ID or fuzzy name search. Returns full information for matching techniques, including ID, name, description, platforms, kill chain phases, references, subtechniques, and mitigations. ID query returns single technique; name search returns list with count.
| Name | Required | Description | Default |
|---|---|---|---|
| tech_name | No | Keyword for fuzzy search in technique names. | |
| technique_id | No | The ATT&CK technique ID for exact query (e.g., 'T1059.001'). Prioritized if provided. |
server_infoTry in Inspector
Returns information about the project, MCP library version, ATT&CK dataset versions, and Git status.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
FAQ
How do I claim this server?
To claim this server, publish a /.well-known/glama.json file on your server's domain with the following structure:
The email address must match the email associated with your Glama account. Once verified, the server will appear as claimed by you.
What are the benefits of claiming a server?
- Control your server's listing on Glama, including description and metadata
- Receive usage reports showing how your server is being used
- Get monitoring and health status updates for your server
Your Connectors
Sign in to create a connector for this server.