Skip to main content
Glama
Sign In
MITRE ATT&CK MCP Server

MITRE ATT&CK MCP Server

by imouiche
OverviewSchemaSourceRelated ServersDiscussionsAdmin
Python
Remote

Related Servers

Alternatives to MITRE ATT&CK MCP Server

No user-submitted related servers found.

    Related Servers

    • MITRE ATT&CK MCP Server

      stoyky
      F
      license
      B
      quality
      D
      maintenance
      Provides comprehensive access to the MITRE ATT\&CK knowledge base with 50+ tools for querying threat actors, malware, and techniques, including automatic ATT\&CK Navigator layer generation for threat analysis and visualization.
      55
      45
      -

    • ATT&CK MCP Server

      alex-llm
      F
      license
      Not graded
      quality
      D
      maintenance
      Enables querying the MITRE ATT\&CK framework for adversarial tactics, techniques, mitigations, and detection methods through natural language, supporting both ID-based and fuzzy name-based searches.
      3
      -

    • mitre-mcp

      Montimage
      A
      license
      A
      quality
      A
      maintenance
      Exposes the MITRE ATT\&CK framework to LLMs and AI assistants via the Model Context Protocol, enabling querying of techniques, tactics, groups, software, and mitigations.
      9
      15
      MIT

    • Countermap

      elchacal801
      A
      license
      Not graded
      quality
      B
      maintenance
      Enables cross-framework queries over MITRE ATT&CK, D3FEND, ATLAS and F3 with provenance on every link, plus coverage and gap analysis against a technique list, actor or detection rules. Also renders validated D3FEND CAD, Attack Flow, ATT&CK Navigator and Mermaid diagrams from a small scenario spec.
      5
      Apache 2.0

    • Cinch MCP Server

      nirhalfon
      A
      license
      A
      quality
      B
      maintenance
      Enables MCP-compatible agents to query security checklists, protocols, and framework mappings to safely build and operate AI agents, with tools for checklist runs, protocol lookup, mapping lookup, and threat search.
      9
      22 PyPI
      CC BY-4.0
    Deploy Server
    One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

    TDQS

    A3.8/5.0

    Scored across 65 tools

    Disambiguation5/5

    Each tool targets a distinct ATT&CK entity or relationship. No two tools have identical purposes; even closely related tools differ by input parameters or entity type, ensuring clear separation.

    Naming Consistency4/5

    Most tools follow a consistent 'verb_noun' pattern (e.g., get_all_*, search_*, generate_layer). A minor inconsistency exists with both 'get_software' and 'get_all_software' having overlapping functionality, but overall the naming is predictable.

    Tool Count3/5

    65 tools is high but appropriate for the comprehensive ATT&CK framework. The tool set covers many entity types and relationships, though some consolidation could reduce redundancy without losing functionality.

    Completeness5/5

    The tool set covers all major ATT&CK entities (techniques, groups, software, campaigns, etc.) and their relationships, plus utility tools for layer generation, search, and object resolution. No obvious gaps in the surface.

    Maintenance

    ActivityMaintained
    ResponsivenessNo recent community issues

    Resources