MCP server

Mitre Attck

io.github.pipeworx-io/mitre-attck

Checked 26 Oct 2026, 08:29 UTC · Connected to it and listed its tools

MITRE ATT&CK MCP — STIX bundles from github.com/mitre/cti.

Website Source

At a glance

Type

MCP server

Publisher

pipeworx.io (verified by the MCP Registry)

Status

Working at last check

Tools

49

Token cost

About 26,825 tokens per request

Sets up in

Claude Code, Claude Desktop, Codex, Gemini CLI, Cursor, VS Code, Antigravity, ChatGPT, OpenAI API, Grok

Last checked

26 Oct 2026, 08:29 UTC

Connect it to your agent

Add to CursorAdd to VS CodeVS Code Insiders

Opens the app, which shows the server and asks you to confirm. For other apps, copy the setup below.

Claude Code

claude mcp add --transport http mitre-attck https://gateway.pipeworx.io/mitre-attck/mcp

Claude Desktop

Settings → Connectors → Add custom connector, and paste the URL.

Codex (config.toml)

[mcp_servers.mitre-attck]
url = "https://gateway.pipeworx.io/mitre-attck/mcp"

Gemini CLI

{"mcpServers":{"mitre-attck":{"httpUrl":"https://gateway.pipeworx.io/mitre-attck/mcp"}}}

Cursor

{"mcpServers":{"mitre-attck":{"url":"https://gateway.pipeworx.io/mitre-attck/mcp"}}}

VS Code

{"servers":{"mitre-attck":{"type":"http","url":"https://gateway.pipeworx.io/mitre-attck/mcp"}}}

Antigravity

agy mcp add mitre-attck https://gateway.pipeworx.io/mitre-attck/mcp

ChatGPT

Settings → Apps & Connectors → Advanced settings: turn on Developer mode, then Create a connector and paste the URL. Which plans can do this varies.

OpenAI API (Responses tools)

{"type":"mcp","server_label":"mitre-attck","server_url":"https://gateway.pipeworx.io/mitre-attck/mcp","require_approval":"always"}

Grok (xAI API tools)

{"type":"mcp","server_label":"mitre-attck","server_url":"https://gateway.pipeworx.io/mitre-attck/mcp"}

Tools

• domains ~36 tokens
  List loaded STIX bundles.
• group ~71 tokens
  Threat group (e.g. G0007).
• mitigation ~68 tokens
  Mitigation.
• search ~112 tokens
  Substring search across the bundle.
• software ~73 tokens
  Software/malware (e.g. S0002).
• tactic ~90 tokens
  Tactic by id or short name.
• technique ~72 tokens
  Technique by ATT&CK id.

Browse

• GitHub tools
• GitHub and code hosting
• Security scanning

Related MCP servers

• SiteCheck Web Intel
  129 pay-per-call agent tools: security, threat intelligence, web search and SEO data tools. x402
• TweetFeed
  IOCs (URLs, domains, IPs, hashes) shared by the infosec community on X/Twitter. No auth, CC0.
• Jeevesus — DugganUSA threat-intel MCP
  Membrane for AI agents: threat intel you can check, IOC enrichment, pre-install package checks.
• OT Intel API
  OT/ICS threat intel for AI agents: 40 tools, pay per call in USDC on Base via x402.
• TunnelMind Data API
  Tracker / Sigil / Cross-lens — every TunnelMind Data API operation as one MCP surface.
• Gapup
  271 agent-payable tools: competitive intel, finance, KYC, compliance, ESG. x402 per-call.
• PG1 Sovereign Threat Intelligence
  Preflight for AI agents, signed: one call; wallet, domain, IP abuse, package checks and CVEs.
• Korext: AI Code Governance
  Governance copilot for AI-assisted coding. 72 packs, 532 rules, proof bundles.

Badge for your README

[![AptLynx](https://aptlynx.net/badge/io.github.pipeworx-io/mitre-attck.svg)](https://aptlynx.net/servers/io.github.pipeworx-io/mitre-attck)

Listing text is written by the maker; AptLynx lists tools and does not vouch for them. Find another tool · Browse by topic · For agents