Skip to main content

MCP server providing access to Atomic Red Team security tests with search, validation, and creation capabilities

Project description

Atomic Red Team MCP Server

An MCP (Model Context Protocol) server that provides access to Atomic Red Team tests.

Installation

Quick Start with uvx (Recommended)

The easiest way to run the Atomic Red Team MCP server is using uvx:

# Run directly without installation
uvx atomic-red-team-mcp

# Or install globally
uv tool install atomic-red-team-mcp
atomic-red-team-mcp

Install from PyPI

# Using pip
pip install atomic-red-team-mcp

# Using uv
uv tool install atomic-red-team-mcp

# Using pipx
pipx install atomic-red-team-mcp

Using Docker

# Run the pre-built Docker container
docker run --rm -i -e MCP_TRANSPORT=streamable-http ghcr.io/cyberbuff/atomic-red-team-mcp:latest

Usage

The server provides the following MCP tools:

  • query_atomics - Search atomics by technique ID, name, description, or platform
  • refresh_atomics - Download latest atomics from GitHub
  • create_atomic_test - Get guidance for creating new atomic tests
  • validate_atomic - Validate atomic test YAML
  • get_validation_schema - Get the atomic test schema

And resources:

  • file://documents/{technique_id} - Read atomic test files by technique ID

Integration with Development Tools

Claude Desktop

Add to your Claude Desktop configuration file:

macOS: ~/Library/Application Support/Claude/claude_desktop_config.json Windows: %APPDATA%\Claude\claude_desktop_config.json

Option 1: Using uvx (Recommended)

{
  "mcpServers": {
    "atomic-red-team": {
      "command": "uvx",
      "args": ["atomic-red-team-mcp"]
    }
  }
}

Option 2: Using Docker

{
  "mcpServers": {
    "atomic-red-team": {
      "command": "docker",
      "args": [
        "run", "--rm", "-i",
        "ghcr.io/cyberbuff/atomic-red-team-mcp:latest"
      ]
    }
  }
}

Cursor

Add to your Cursor settings (settings.json):

Option 1: Using uvx (Recommended)

{
  "mcpServers": {
    "atomic-red-team": {
      "command": "uvx",
      "args": ["atomic-red-team-mcp"]
    }
  }
}

Option 2: Using Docker

{
  "mcpServers": {
    "atomic-red-team": {
      "command": "docker",
      "args": [
        "run", "--rm", "-i",
        "ghcr.io/cyberbuff/atomic-red-team-mcp:latest"
      ]
    }
  }
}

Cline (VS Code Extension)

Add to your Cline extension settings or .cline_mcp_config.json:

Option 1: Using uvx (Recommended)

{
  "mcpServers": {
    "atomic-red-team": {
      "command": "uvx",
      "args": ["atomic-red-team-mcp"]
    }
  }
}

Option 2: Using Docker

{
  "mcpServers": {
    "atomic-red-team": {
      "command": "docker",
      "args": [
        "run", "--rm", "-i",
        "ghcr.io/cyberbuff/atomic-red-team-mcp:latest"
      ]
    }
  }
}

Zed Editor

Add to your Zed settings (settings.json):

Option 1: Using uvx (Recommended)

{
  "experimental": {
    "mcp": {
      "servers": {
        "atomic-red-team": {
          "command": "uvx",
          "args": ["atomic-red-team-mcp"]
        }
      }
    }
  }
}

Option 2: Using Docker

{
  "experimental": {
    "mcp": {
      "servers": {
        "atomic-red-team": {
          "command": "docker",
          "args": [
            "run", "--rm", "-i",
            "ghcr.io/cyberbuff/atomic-red-team-mcp:latest"
          ]
        }
      }
    }
  }
}

Generic MCP Client

For any MCP client that supports stdio transport:

Using uvx (Recommended)

uvx atomic-red-team-mcp

Using Docker

docker run --rm -i ghcr.io/cyberbuff/atomic-red-team-mcp:latest

Docker

Run the pre-built Docker container:

docker run -d \
  --name atomic-red-team-mcp-server \
  -p 2786:8000 \
  ghcr.io/cyberbuff/atomic-red-team-mcp:latest

The MCP server will be available at: http://localhost:2786/mcp

Docker Compose

Alternatively, use the included docker-compose.yaml:

# Clone the repository
git clone <repository-url>
cd atomic-red-team-mcp

# Start the server
docker-compose up -d

Configuration

Environment variables:

  • MCP_TRANSPORT - Transport protocol (stdio, sse, streamable-http)
  • MCP_HOST - Host address to bind the server (default: 0.0.0.0)
  • MCP_PORT - Port for HTTP transports (default: 8000)
  • GITHUB_URL - GitHub URL for atomics repository (default: https://github.com)
  • GITHUB_USER - GitHub user/org (default: redcanaryco)
  • GITHUB_REPO - Repository name (default: atomic-red-team)

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

atomic_red_team_mcp-0.1.3.tar.gz (11.6 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

atomic_red_team_mcp-0.1.3-py3-none-any.whl (18.5 kB view details)

Uploaded Python 3

File details

Details for the file atomic_red_team_mcp-0.1.3.tar.gz.

File metadata

  • Download URL: atomic_red_team_mcp-0.1.3.tar.gz
  • Upload date:
  • Size: 11.6 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.7

File hashes

Hashes for atomic_red_team_mcp-0.1.3.tar.gz
Algorithm Hash digest
SHA256 93c50dd39f839fd23e4926968c86bd63b9ead6ebe1150bfa318b466b32f6e453
MD5 0ccce197602938056f5a76d33c8a0948
BLAKE2b-256 948f3e4ba4bf2b08841ac16b474feafbb5ba42feee58459701db949852b179bd

See more details on using hashes here.

Provenance

The following attestation bundles were made for atomic_red_team_mcp-0.1.3.tar.gz:

Publisher: release.yml on cyberbuff/atomic-red-team-mcp

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file atomic_red_team_mcp-0.1.3-py3-none-any.whl.

File metadata

File hashes

Hashes for atomic_red_team_mcp-0.1.3-py3-none-any.whl
Algorithm Hash digest
SHA256 b4d7446ecdd52eb2f964a81a6717c23412ad5ada88a6868ca90b584a997f5341
MD5 e3f93c098fccea5d712d1da6ed12909a
BLAKE2b-256 6af0a83f6d7087e0bf49c00e5446d5673b8041d6501cc06163551a7e055e233f

See more details on using hashes here.

Provenance

The following attestation bundles were made for atomic_red_team_mcp-0.1.3-py3-none-any.whl:

Publisher: release.yml on cyberbuff/atomic-red-team-mcp

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page