MITRE ATT&CK Mapper MCP
[](https://proofof.ai/scorecard/mitre-attack-mcp.html)
# Mitre Attack MCP
mcp-name: io.github.CSOAI-ORG/mitre-attack-mcp
# MITRE ATT&CK Mapper MCP
> **⚖️ Built by [MEOK AI Labs](https://meok.ai) / [CSOAI](https://csoai.org).** Need this applied to _your_ system fast? Book a 30-min Founder Office Hour (£29) → **https://meok.ai/work** · Full governance platform → **https://meok.ai**
[](https://meok.ai)
[](https://councilof.ai)
[](LICENSE)
[](https://pypi.org/project/mitre_attack_mcp/)
> ## Buy Starter — £29/mo
> **Signed attestations + unlimited audits + email support.**
> 👉 **[Subscribe at meok.ai](https://buy.stripe.com/aFa7sNcgAdQS0ZT1Uc8k91t)** — instant HMAC signing key + Stripe-managed billing.
>
> Free tier remains MIT-licensed and zero-config. Upgrade only when you need signed compliance artefacts for audit.
> MITRE ATT&CK matrix lookup + tactic/technique mapper MCP
MITRE ATT&CK matrix lookup + tactic/technique mapper MCP. MIT
---
## 🚀 Quick Start
```bash
# Install via pip
pip install mitre_attack_mcp
# Or install via Smithery
npx -y @smithery/cli@latest install mitre-attack-mcp --client claude
```
## ✨ Features
- MCP protocol compliant
- Easy installation
- Well-documented API
- Production-ready
- Active maintenance
## 📖 Documentation
- [Full Documentation](https://docs.meok.ai/mitre-attack-mcp)
- [API Reference](https://api.meok.ai)
- [EU AI Act Compliance Guide](https://councilof.ai/compliance)
## 🛡️ Compliance
This MCP server is built with **EU AI Act compliance** built-in:
- **Free**: 10 calls/day. No API key required.
- **Pro** £79/mo: unlimited + signed attestations. [Subscribe](https://buy.stripe.com/aFa7sNcgAdQS0ZT1Uc8k91t)
- **Enterprise** £1,499/mo: white-label + on-premise + SLA. hello@meok.ai
- ✅ Article 9 — Risk Management System
- ✅ Article 13 — Transparency & Instructions for Use
- ✅ Article 15 — Bias Detection & Testing
- ✅ Article 26 — FRIA Support (where applicable)
- ✅ Article 50 — AI Content Watermarking (where applicable)
Need help getting compliant? **[Book a free 15-min diagnostic →](https://cal.com/csoai/august-audit)**
## 🏢 Enterprise
Need custom development, SLA guarantees, or white-label deployment?
- **Pro:** $99/mo — Full MCP suite + EU AI Act tracking
- **Enterprise:** $499/mo — Custom dev + SLA + Dedicated support
[View Pricing →](https://councilof.ai/pricing) | [Contact Sales →](mailto:sales@csoai.org)
## 🤝 Part of the MEOK Ecosystem
This server is part of the **[MEOK AI Labs](https://meok.ai)** ecosystem — 300+ MCP servers for sovereign AI governance.
| Domain | Purpose |
|--------|---------|
| [councilof.ai](https://councilof.ai) | EU AI Act compliance marketplace |
| [safetyof.ai](https://safetyof.ai) | AI safety & monitoring |
| [meok.ai](https://meok.ai) | Sovereign AI platform |
| [cobolbridge.ai](https://cobolbridge.ai) | Legacy modernization |
## 📜 License
MIT © [CSOAI-ORG](https://github.com/CSOAI-ORG)
---
<p align="center">
<sub>Built with 💜 by <a href="https://meok.ai">MEOK AI Labs</a> · UK Companies House 16939677</sub>
</p>
<!-- mcp-name: io.github.CSOAI-ORG/mitre-attack-mcp -->
<!-- BUY-LADDER:START -->
## 💸 Try MEOK in 30 seconds — instant buy ladder
| Tier | Price | What you get | Stripe |
|---|---|---|---|
| Smoke test | **£1** | Signed sample MCP-Hardening report + Article 50 PDF | <https://buy.stripe.com/aFa7sNcgAdQS0ZT1Uc8k91t> |
| Quick Kit | **£9** | EU AI Act Article 50 implementation guide (C2PA + EU-Icon) | <https://buy.stripe.com/aFa7sNcgAdQS0ZT1Uc8k91t> |
| Founder Call | **£29** | 30-min 1-on-1 with the founder | <https://buy.stripe.com/aFa7sNcgAdQS0ZT1Uc8k91t> |
> Refundable. UK Stripe — VAT-clean. Builds on the 81-MCP MEOK fleet.
> Verify any signed report at <https://meok.ai/verify>.
<!-- BUY-LADDER:END -->
## Configuration
Add to your `claude_desktop_config.json` (Claude Desktop) or your MCP client config:
```json
{
"mcpServers": {
"mitre-attack-mcp": {
"command": "uvx",
"args": ["mitre-attack-mcp"]
}
}
}
```
Or: `pip install mitre-attack-mcp` then run the `mitre-attack-mcp` command (stdio transport).
## Examples
Once configured, ask your assistant, for example:
- "Use `query_technique` to …"
- "Use `list_tactics` to …"
- "Use `map_incident` to …"
TDQS
Scored across 5 tools
Each tool targets a distinct ATT&CK resource (tactics, techniques, groups, mitigations, incident mapping), but the generic return descriptions could cause an agent to misselect if relying solely on descriptions.
Tool names follow a verb_noun pattern in snake_case, but 'group_threat_actor' uses 'group' as an atypical verb, slightly deviating from the clearer verbs like list, map, lookup, query.
5 tools is a reasonable count for a focused ATT&CK mapper, covering key operations, though there is room for a few more (e.g., listing techniques, sub-techniques) without being overbearing.
Core workflows like technique lookup, tactic listing, and incident mapping are covered, but missing obvious operations like listing all techniques, threat groups independently, or software, leaving notable gaps.