MITRE ATT&CK

Exposes the MITRE ATT&CK framework through nine MCP tools that let you query tactics, techniques, threat groups, software, and mitigations across Enterprise, Mobile, and ICS domains. You get operations like get_technique_by_id for looking up specific TTPs, get_techniques_used_by_group for profiling adversaries like APT29, and get_techniques_mitigated_by_mitigation for defense planning. Built on mitreattack-python with automatic 24-hour caching and O(1) lookups via pre-built indices. Runs in HTTP mode for multi-client access or stdio for local integrations. Reach for this when you need Claude or other LLMs to reason about threat intelligence, map defensive controls to attack patterns, or analyze adversary tradecraft without manually searching the ATT&CK website.