MCP server for the MITRE ATT&CK knowledge base: map alerts to techniques, profile threat groups, analyze detection coverage, and enrich SOC workflows from an AI client.
Setup
Choose your client, copy the config, then fill in any required environment variables.
claude mcp add mitre --env MITRE_MATRICES='<MITRE_MATRICES>' -- npx -y mitre-mcp~/.codex/config.toml
[mcp_servers.mitre]
command = "npx"
args = ["-y", "mitre-mcp"]
env = { MITRE_MATRICES = "<MITRE_MATRICES>" }
# codex mcp add mitre --env MITRE_MATRICES='<MITRE_MATRICES>' -- npx -y mitre-mcp~/.cursor/mcp.json
{
"mcpServers": {
"mitre": {
"command": "npx",
"args": [
"-y",
"mitre-mcp"
],
"env": {
"MITRE_MATRICES": "<MITRE_MATRICES>"
}
}
}
}.vscode/mcp.json
{
"servers": {
"mitre": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"mitre-mcp"
],
"env": {
"MITRE_MATRICES": "<MITRE_MATRICES>"
}
}
}
}~/.gemini/settings.json
{
"mcpServers": {
"mitre": {
"command": "npx",
"args": [
"-y",
"mitre-mcp"
],
"env": {
"MITRE_MATRICES": "<MITRE_MATRICES>"
}
}
}
}claude_desktop_config.json
{
"mcpServers": {
"mitre": {
"command": "npx",
"args": [
"-y",
"mitre-mcp"
],
"env": {
"MITRE_MATRICES": "<MITRE_MATRICES>"
}
}
}
}.trae/mcp.json
{
"mcpServers": {
"mitre": {
"command": "npx",
"args": [
"-y",
"mitre-mcp"
],
"env": {
"MITRE_MATRICES": "<MITRE_MATRICES>"
}
}
}
}Environment variables
MITRE_MATRICES
Replace the placeholders with your own credentials and keep them out of version control.