Skip to main content
Glama
Sign In
Mythic MCP

Mythic MCP

by johanrobbenites
OverviewSchemaSourceRelated ServersDiscussionsAdmin
Python
Local

upload_file

Upload a file to a remote target via Mythic agent. Send base64-encoded content to a specified remote path for penetration testing and file deployment.

Instructions

Upload a file to the Mythic server, and then upload the file to the remote target

Args:
    agent_id: ID of the agent to execute command on
    file_name: Name to give the file when uploading to Mythic server
    remote_path: Full path to where the file will be uploaded
    content: Base64 encoded contents of the file

Tool call template

Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.

{
  "id": 1,
  "jsonrpc": "2.0",
  "method": "tools/call",
  "params": {
    "arguments": {
      "agent_id": "<agent_id>",
      "file_name": "<file_name>",
      "remote_path": "<remote_path>",
      "content": "<content>"
    },
    "name": "upload_file"
  }
}

Input Schema

NameRequiredDescriptionDefault
contentYes
agent_idYes
file_nameYes
remote_pathYes

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observedv0.1.0

TDQS

A4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Without annotations, the description must disclose behavioral traits on its own. It does explain the two-step upload process and mentions that content is base64 encoded, but it does not state potential side effects, auth requirements, error behaviors, or whether it overwrites existing files. This is a moderate level of disclosure.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is highly concise and well-structured: a two-sentence purpose statement followed by a clean Arg list. Every sentence earns its place without redundancy or unnecessary detail.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The tool has four required parameters, no output schema, and no annotations. The description provides a clear action statement and parameter definitions, which is a good baseline. However, it omits return value behavior, error handling, and edge cases like file overwrites, leaving some gaps for a tool with no structured output.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema has zero description coverage, so the description must compensate. It does by listing each parameter with a concise explanation in the Args section, clarifying agent_id, file_name, remote_path, and content. This adds significant meaning beyond the bare schema, though it lacks deeper format or constraint details.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description explicitly states the tool's function: uploading a file to the Mythic server and then to a remote target. The verb 'upload' and the two-stage resource description make the purpose clear and distinguishable from sibling tools like read_file or run_shell_command.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies the tool should be used for uploading files but provides no explicit guidance on when to use it instead of alternatives, nor does it mention any exclusions or prerequisites. This gives a clear context but lacks explicit decision-making support.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Deploy Server

Other Tools