MCP server providing access to Atomic Red Team security tests with search, validation, and creation capabilities

Navigation

Verified details

These details have been verified by PyPI
Project links
GitHub Statistics
Maintainers
Avatar for cyberbuff from gravatar.com cyberbuff

Unverified details

These details have not been verified by PyPI
Meta
  • License Expression: MIT
    SPDX License Expression
  • Author: cyberbuff
  • Tags atomic-red-team , mcp
  • Requires: Python >=3.10
Report project as malware

Project description

Atomic Red Team MCP Server

An MCP (Model Context Protocol) server that provides access to Atomic Red Team tests.

Available Tools and Resources

The server provides the following MCP tools:

  • query_atomics - Search atomics by technique ID, name, description, or platform
  • refresh_atomics - Download latest atomics from GitHub
  • validate_atomic - Validate atomic test YAML
  • get_validation_schema - Get the atomic test schema

And resources:

  • file://documents/{technique_id} - Read atomic test files by technique ID

Usage Examples

  • "Search mshta atomics for windows"
  • "Show me all the atomic tests for T1059.002"
  • "Find all the applescript atomics for macOS"
  • "Validate this atomic test YAML "

Installation

The Atomic Red Team MCP server can be installed in various development tools and AI assistants. Choose your platform below for detailed installation instructions:

Quick Start

Recommended: Using uvx

uvx atomic-red-team-mcp

Using Docker

docker run --rm -i ghcr.io/cyberbuff/atomic-red-team-mcp:latest

Platform-Specific Guides

Installation Methods

Each platform supports multiple installation methods:

  1. uvx (Recommended) - Easiest setup, automatic updates
  2. Docker - Isolated environment, consistent across systems
  3. Remote Server ⚠️ - Hosted on Railway (free tier, may have limits)

Configuration

Environment variables:

  • MCP_TRANSPORT - Transport protocol (stdio, sse, streamable-http)
  • MCP_HOST - Host address to bind the server (default: 0.0.0.0)
  • MCP_PORT - Port for HTTP transports (default: 8000)
  • GITHUB_URL - GitHub URL for atomics repository (default: https://github.com)
  • GITHUB_USER - GitHub user/org (default: redcanaryco)
  • GITHUB_REPO - Repository name (default: atomic-red-team)

Project details

Verified details

These details have been verified by PyPI
Project links
GitHub Statistics
Maintainers
Avatar for cyberbuff from gravatar.com cyberbuff

Unverified details

These details have not been verified by PyPI
Meta
  • License Expression: MIT
    SPDX License Expression
  • Author: cyberbuff
  • Tags atomic-red-team , mcp
  • Requires: Python >=3.10

Release history Release notifications | RSS feed

1.3.2

1.3.1

1.2.6

1.2.5

1.2.4

1.2.3

1.2.1

1.2.0

1.1.0

1.0.1

This version

1.0.0

0.1.3

0.1.1

0.1.0

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

atomic_red_team_mcp-1.0.0.tar.gz (11.4 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

atomic_red_team_mcp-1.0.0-py3-none-any.whl (17.9 kB view details)

Uploaded Python 3

File details

Details for the file atomic_red_team_mcp-1.0.0.tar.gz.

File metadata

  • Download URL: atomic_red_team_mcp-1.0.0.tar.gz
  • Upload date:
  • Size: 11.4 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.7

File hashes

Hashes for atomic_red_team_mcp-1.0.0.tar.gz
Algorithm Hash digest
SHA256 7139c627f79fb00c6fbfa4fdc0b899b19a7be8233da9e4d5e96172c398b1d3fe
MD5 9564843df6dd57623d3ddd304a056c5f
BLAKE2b-256 b6a85192ba30f04b0e7f7080066b2e5801cc0c5fbf3935315bce7582f107bc81

See more details on using hashes here.

Provenance

The following attestation bundles were made for atomic_red_team_mcp-1.0.0.tar.gz:

Publisher: release.yml on cyberbuff/atomic-red-team-mcp

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file atomic_red_team_mcp-1.0.0-py3-none-any.whl.

File metadata

File hashes

Hashes for atomic_red_team_mcp-1.0.0-py3-none-any.whl
Algorithm Hash digest
SHA256 0cff3c476cf5af4cb2fadcb933fd176f0b48e7b04f9cde5b61d2127a297434c3
MD5 f74ccf72fc8797bb514c53e12f1da1c8
BLAKE2b-256 f8c1b2fec7936dcee2fe2a7c13fe9993bfbf52ce458457507b1f2285127eae0f

See more details on using hashes here.

Provenance

The following attestation bundles were made for atomic_red_team_mcp-1.0.0-py3-none-any.whl:

Publisher: release.yml on cyberbuff/atomic-red-team-mcp

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page