MCP server for Mipiti — AI-powered security posture platform
Wellknown found it in public sources; nobody has proven control of it yet. Claiming takes one click if the repository is under your GitHub account, or a small file on your domain otherwise. Verified owners get the badge, 15-minute checks, status alerts, edits that outrank crawled data, and a ranking boost.
Agents can do it too: POST https://wellknown.network/api/v1/claims with {"agent":"mipiti-mcp","method":"well_known_file"} — machine-readable steps at claim.json, guide at /docs/claim.
Everything here was measured by our prober or read from a registry. Nothing is self-reported.
Attributed to the source that supplied each field. Treated as claims, not facts.
# Mipiti MCP Server MCP (Model Context Protocol) server for [Mipiti](https://mipiti.io) — security posture platform. Lets AI coding agents (Claude Code, Claude Desktop, Cursor, etc.) generate and manage threat models, controls, assumptions, compliance mapping, and evidence programmatically. ## Hosted Endpoint (Recommended) The Mipiti backend hosts an MCP server at `https://api.mipiti.io/mcp`. No installation needed — just configure your MCP client to connect. ### Claude Code (quickstart) ```bash claude mcp add --transport http Mipiti https://api.mipiti.io/mcp ``` You'll be prompted to log in via your browser (OAuth). That's it. ### OAuth (manual config) MCP clients with OAuth support (Claude Code, Claude Desktop, Cursor) automatically prompt you to log in via your browser. Add to your project's `.mcp.json`: ```json { "mcpServers": { "mipiti": { "type": "http", "url": "https://api.mipiti.io/mcp" } } } ``` On first connection, your MCP client opens a browser window where you approve access with your Mipiti account. Tokens refresh automatically. ### API Key For clients without OAuth support, or headless/CI environments, create an API key in Settings: ```json { "mcpServers": { "mipiti": { "type": "http", "url": "https://api.mipiti.io/mcp", "headers": { "X-API-Key": "your-api-key" } } } } ``` ## Standalone Package (Alternative) If you prefer running the MCP server locally (e.g., for development or self-hosted instances), install the `mipiti-mcp` package. This is a thin HTTP client that calls the Mipiti API. ```bash pip install mipiti-mcp # Or run directly with uvx uvx mipiti-mcp ``` ### Environment Variables | Variable | Required | Default | Description | |----------|----------|---------|-------------| | `MIPITI_API_KEY` | Yes | — | Your Mipiti API key | | `MIPITI_API_URL` | No | `https://api.mipiti.io` | API base URL | | `SERVER_VERSION` | No | the catalog's digest | The version clie…
Mapped onto the structured taxonomy from declared text and observed tool names. Confidence shown for derived entries.
Every source is kept verbatim. Field changes are logged as events.