attack-query-mcp

# attack-query-mcp [](https://pypi.org/project/attack-query-mcp/) [](https://pypi.org/project/attack-query-mcp/) [](https://pypi.org/project/attack-query-mcp/) [](https://opensource.org/licenses/MIT) MCP server for ATT&CK queries via AI assistants. ## Overview This package provides a [Model Context Protocol (MCP)](https://modelcontextprotocol.io/) server that enables AI assistants like Claude to query MITRE ATT&CK data using natural language. ## Installation ```bash pip install attack-query-mcp ``` ## Usage ### With Claude Desktop Add to your Claude Desktop configuration (`claude_desktop_config.json`): ```json { "mcpServers": { "attack-query": { "command": "attack-query-mcp" } } } ``` ### Standalone ```bash attack-query-mcp ``` ## Tools The MCP server provides 8 tools for querying ATT&CK data: | Tool | Description | |------|-------------| | `query_attack` | Natural language queries (e.g., "techniques used by APT28") | | `get_technique` | Get technique details by ID (e.g., T1566) | | `get_group` | Get group info by name, ID, or alias | | `compare_groups` | Compare techniques between two groups with similarity metrics | | `find_similar_groups` | Find groups with similar technique profiles | | `get_mitigations` | Get mitigations for a technique | | `export_navigator_layer` | Export techniques as Navigator layer JSON | | `get_group_techniques_temporal` | Get techniques used by a group during a specific time period | ### Example Tool Usage ``` User: What techniques does APT28 use for initial access? AI: [calls query_attack with "techniques used by APT28 for initial access"] User: Compare APT28 and APT29 AI: [calls compare_groups with group1="APT28", group2="A…