Skip to main content
Glama
FlemingJohn

cyber-mcp-tools

by FlemingJohn
OverviewSchemaSourceRelated ServersDiscussionsAdmin
TypeScript
Hybrid

Related Servers

Alternatives to cyber-mcp-tools

No user-submitted related servers found.

    Related Servers

    • Countermap

      elchacal801
      A
      license
      Not graded
      quality
      A
      maintenance
      Enables cross-framework queries over MITRE ATT&CK, D3FEND, ATLAS and F3 with provenance on every link, plus coverage and gap analysis against a technique list, actor or detection rules. Also renders validated D3FEND CAD, Attack Flow, ATT&CK Navigator and Mermaid diagrams from a small scenario spec.
      5
      Apache 2.0

    • MITRE ATT&CK MCP Server

      imouiche
      A
      license
      A
      quality
      C
      maintenance
      Enables AI-native access to the MITRE ATT\&CK framework, allowing LLMs and agents to query techniques, threat groups, software, and generate ATT\&CK Navigator layers for threat intelligence and security workflows.
      65
      57 npm
      5
      Apache 2.0

    • Cyber RAG MCP

      joaquimmoraesgabriel-cmyk
      A
      license
      Not graded
      quality
      B
      maintenance
      Enables clients to query local cybersecurity evidence, retrieving source-backed passages, exact entities, documents, documented relationships, and database status from ATT&CK, OWASP, Sigma, CVE, KEV, and NVD data with citations and immutable snapshots.
      MIT

    • mitre-mcp

      Montimage
      A
      license
      A
      quality
      A
      maintenance
      Exposes the MITRE ATT\&CK framework to LLMs and AI assistants via the Model Context Protocol, enabling querying of techniques, tactics, groups, software, and mitigations.
      9
      15
      MIT

    • ATT&CK MCP Server

      alex-llm
      F
      license
      Not graded
      quality
      F
      maintenance
      Enables querying the MITRE ATT\&CK framework for adversarial tactics, techniques, mitigations, and detection methods through natural language, supporting both ID-based and fuzzy name-based searches.
      3
      -

    • MITRE ATT&CK MCP Server

      stoyky
      F
      license
      B
      quality
      D
      maintenance
      Provides comprehensive access to the MITRE ATT\&CK knowledge base with 50+ tools for querying threat actors, malware, and techniques, including automatic ATT\&CK Navigator layer generation for threat analysis and visualization.
      55
      44
      -
    Deploy Server
    One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

    TDQS

    A3.7/5.0

    Scored across 10 tools

    Disambiguation4/5

    The attack_* and defend_* prefixes cleanly separate the ATT&CK and D3FEND domains, and search/get/actor/related have clear targets. The only mild ambiguity is among attack_detection, attack_mitigations, and defend_countermeasures, since all three describe defensive response content, though each names a distinct framework or strategy type.

    Naming Consistency3/5

    Names consistently use lowercase snake_case and the attack_/defend_ prefixes, which is a recognizable pattern. However, the second part mixes nouns (actor, meta, mitigations), verbs (get, search), and adjectives (related), so it does not follow a single verb_noun convention.

    Tool Count5/5

    Ten tools is a well-scoped size for a MITRE ATT&CK/D3FEND knowledge server. Each tool covers a distinct retrieval need without feeling padded or redundant.

    Completeness5/5

    The surface covers technique lookup and search, actor lookup, relationship traversal, detections, mitigations, D3FEND countermeasures, and metadata for both datasets. This provides a comprehensive read-only workflow for threat-intel queries with no obvious dead ends.

    Maintenance

    ActivitySlowing
    ResponsivenessNo issues

    Resources