Mitre Attck
live DeveloperMITRE ATT&CK MCP — STIX bundles from github.com/mitre/cti.
7 tools
0ms auth
free tier 50 calls/day
Tools
technique Technique by ATT&CK id.
No parameters required.
Try it
Response
tactic Tactic by id or short name.
No parameters required.
Try it
Response
group Threat group (e.g. G0007).
No parameters required.
Try it
Response
software Software/malware (e.g. S0002).
No parameters required.
Try it
Response
mitigation Mitigation.
No parameters required.
Try it
Response
search Substring search across the bundle.
No parameters required.
Try it
Response
domains List loaded STIX bundles.
No parameters required.
Try it
Response
Test with curl
The gateway speaks JSON-RPC 2.0 over HTTP POST. You can test any pack directly from the terminal.
List available tools
bash
curl -X POST https://gateway.pipeworx.io/mitre-attck/mcp \
-H "Content-Type: application/json" \
-d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'Call a tool
bash
curl -X POST https://gateway.pipeworx.io/mitre-attck/mcp \
-H "Content-Type: application/json" \
-d '{"jsonrpc":"2.0","id":2,"method":"tools/call","params":{"name":"technique","arguments":{}}}'Use with the SDK
Install @pipeworx/sdk to call tools from any TypeScript/Node project.
TypeScript
import { Pipeworx } from '@pipeworx/sdk';
const px = new Pipeworx();
const result = await px.call("technique", {}); ask_pipeworx
// Or ask in plain English:
const answer = await px.ask("mitre att&ck mcp — stix bundles from github");