Skip to main content
Glama
Sign In
Threat Modeling MCP Server

Threat Modeling MCP Server

by residentevilrenz
OverviewSchemaSourceRelated ServersDiscussionsAdmin
Python
Local

Related Servers

Alternatives to Threat Modeling MCP Server

No user-submitted related servers found.

    Related Servers

    • threatmodel-mcp

      boxed-dev
      F
      license
      Not graded
      quality
      D
      maintenance
      Enables AI-powered threat modeling with tools for creating threat models, analyzing security threats, generating security controls, and validating architecture against best practices.
      -

    • business-overview

      fadiroot
      A
      license
      A
      quality
      C
      maintenance
      Enables developers and product owners to scan a codebase and extract a readable business overview—features, roles, access control, data model, and endpoints—along with findings on missing or inconsistent rules, and generate shareable HTML or Markdown reports and diagrams.
      9
      2
      MIT

    • MITRE ATLAS MCP Server

      imouiche
      A
      license
      Not graded
      quality
      C
      maintenance
      Turns a description of an AI or agentic system's architecture into ranked adversary techniques, coverage-ordered mitigations with assigned owners and components, compounding risks, and real-world incidents of similar shape. Also provides reference lookup and cross-mappings to ATT&CK, STRIDE, OWASP Top 10 for LLM, and NIST AI RMF, entirely offline.
      Apache 2.0

    • Security Audit MCP Ver

      Hanzet22
      A
      license
      B
      quality
      B
      maintenance
      Enables read-only, evidence-led security audits of GitHub-hosted source code through explicit workflow primitives: repository reconnaissance, coverage-ledger planning, heuristic candidate leads, structured findings validation, independent verification gates, and JSON/Markdown report generation. It never clones, executes, or probes the target code, and marks runs incomplete until coverage and reviewer-verification gates pass.
      14
      AGPL 3.0

    • MCP SSDLC Security Toolkit

      vuongdat67
      A
      license
      Not graded
      quality
      C
      maintenance
      Automates 85-95% of the Secure Software Development Lifecycle (SSDLC) planning phase through multi-role AI orchestration, enabling business analysis, threat modeling, test strategy design, and security code review.
      MIT

    • SecureVibes MCP

      SimonvanAs
      A
      license
      Not graded
      quality
      D
      maintenance
      Enables AI-powered security scanning of codebases through conversational analysis, allowing users to assess, threat model, code review, DAST test, and generate security reports using natural language with Claude.
      MIT
    Deploy Server
    One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

    TDQS

    B3.1/5.0

    Scored across 11 tools

    Disambiguation5/5

    Each tool targets a distinct threat-modeling domain or lifecycle action: assumptions, workflow orchestration, system context, architecture, actors, trust boundaries, asset flows, threats/mitigations, code validation, data-model inspection, and export. The manage_* tools share a verb but have clearly separate nouns and descriptions, so an agent should not confuse them.

    Naming Consistency5/5

    All tool names use snake_case and a consistent verb_noun pattern: manage_*, inspect_data_models, and export_threat_model. The repetition of manage_* is predictable rather than confusing.

    Tool Count5/5

    Eleven tools is well-scoped for a threat-modeling workflow. The count reflects distinct lifecycle phases and entities without obvious redundancy or missing operations.

    Completeness5/5

    The surface covers the full threat-modeling lifecycle: assumptions, workflow, business context, architecture, actors, trust boundaries, asset flows, threats and mitigations, code validation, data-model inspection, and export. There are no obvious dead ends for the stated domain.

    Maintenance

    ActivityMaintained
    ResponsivenessNo recent community issues

    Resources