git clone <this-repo>
cd mythic-mcp
uv sync

uv run main.py <username> <password> [host] [port]

uv run main.py mythic_admin mythic_admin_password localhost 7443

export MYTHIC_USERNAME=mythic_admin
export MYTHIC_PASSWORD=mythic_admin_password
export MYTHIC_HOST=localhost
export MYTHIC_PORT=7443
uv run main.py

uv run main.py mythic_admin password localhost 7443 --no-ssl

which uv

{
  "mcpServers": {
    "mythic_mcp": {
      "command": "/home/user/.local/bin/uv",
      "args": [
        "--directory",
        "/path/to/mythic-mcp",
        "run",
        "main.py"
      ],
      "env": {
        "MYTHIC_USERNAME": "mythic_admin",
        "MYTHIC_PASSWORD": "mythic_admin_password",
        "MYTHIC_HOST": "localhost",
        "MYTHIC_PORT": "7443"
      }
    }
  }
}

Use the start_recon prompt.

List all active agents, then run whoami on agent 1.

Download /etc/passwd from agent 2 and show me its contents.

Run mimikatz sekurlsa::logonpasswords on agent 3.

Use execute_command to run 'ps' on agent 1 with parameters {"host": "."}.

Claude Desktop
     │  MCP stdio
     ▼
main.py  (FastMCP tools + prompts)
     │
     ▼
lib/mythic_api.py  (MythicAPI class)
     ├─ mythic Python library  →  Mythic GraphQL/REST API
     └─ httpx (raw GraphQL)   →  Mythic GraphQL endpoint