MCP server providing access to Atomic Red Team security tests with search, validation, and creation capabilities

Navigation

Verified details

These details have been verified by PyPI
Project links
GitHub Statistics
Maintainers
Avatar for cyberbuff from gravatar.com cyberbuff

Unverified details

These details have not been verified by PyPI
Meta
  • License Expression: MIT
    SPDX License Expression
  • Author: cyberbuff
  • Tags atomic-red-team , mcp
  • Requires: Python >=3.10
Report project as malware

Project description

Atomic Red Team MCP Server

An MCP (Model Context Protocol) server that provides access to Atomic Red Team tests.

Available Tools and Resources

The server provides the following MCP tools:

  • query_atomics - Search atomics by technique ID, name, description, or platform
  • refresh_atomics - Download latest atomics from GitHub
  • validate_atomic - Validate atomic test YAML
  • get_validation_schema - Get the atomic test schema

And resources:

  • file://documents/{technique_id} - Read atomic test files by technique ID

Usage Examples

  • "Search mshta atomics for windows"
  • "Show me all the atomic tests for T1059.002"
  • "Find all the applescript atomics for macOS"
  • "Validate this atomic test YAML "

Installation

The Atomic Red Team MCP server can be installed in various development tools and AI assistants. Choose your platform below for detailed installation instructions:

Quick Start

Recommended: Using uvx

uvx atomic-red-team-mcp

Using Docker

docker run --rm -i ghcr.io/cyberbuff/atomic-red-team-mcp:latest

Platform-Specific Guides

Installation Methods

Each platform supports multiple installation methods:

  1. uvx (Recommended) - Easiest setup, automatic updates
  2. Docker - Isolated environment, consistent across systems
  3. Remote Server ⚠️ - Hosted on Railway (free tier, may have limits)

Configuration

Environment variables:

  • MCP_TRANSPORT - Transport protocol (stdio, sse, streamable-http)
  • MCP_HOST - Host address to bind the server (default: 0.0.0.0)
  • MCP_PORT - Port for HTTP transports (default: 8000)
  • GITHUB_URL - GitHub URL for atomics repository (default: https://github.com)
  • GITHUB_USER - GitHub user/org (default: redcanaryco)
  • GITHUB_REPO - Repository name (default: atomic-red-team)

Project details

Verified details

These details have been verified by PyPI
Project links
GitHub Statistics
Maintainers
Avatar for cyberbuff from gravatar.com cyberbuff

Unverified details

These details have not been verified by PyPI
Meta
  • License Expression: MIT
    SPDX License Expression
  • Author: cyberbuff
  • Tags atomic-red-team , mcp
  • Requires: Python >=3.10

Release history Release notifications | RSS feed

1.3.2

1.3.1

1.2.6

1.2.5

1.2.4

1.2.3

1.2.1

1.2.0

1.1.0

This version

1.0.1

1.0.0

0.1.3

0.1.1

0.1.0

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

atomic_red_team_mcp-1.0.1.tar.gz (11.4 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

atomic_red_team_mcp-1.0.1-py3-none-any.whl (17.9 kB view details)

Uploaded Python 3

File details

Details for the file atomic_red_team_mcp-1.0.1.tar.gz.

File metadata

  • Download URL: atomic_red_team_mcp-1.0.1.tar.gz
  • Upload date:
  • Size: 11.4 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.7

File hashes

Hashes for atomic_red_team_mcp-1.0.1.tar.gz
Algorithm Hash digest
SHA256 3ae65682bc21b47991fd6521d49d9cfe9f290a14174e0ab8f8692acbfcfb04c9
MD5 fff5e3dc98f15e85df54d6adf7b70091
BLAKE2b-256 4a6aff50c7e87dffc726e4e3b457312bab81a581e06b5191504762d8cecfc1bc

See more details on using hashes here.

Provenance

The following attestation bundles were made for atomic_red_team_mcp-1.0.1.tar.gz:

Publisher: release.yml on cyberbuff/atomic-red-team-mcp

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file atomic_red_team_mcp-1.0.1-py3-none-any.whl.

File metadata

File hashes

Hashes for atomic_red_team_mcp-1.0.1-py3-none-any.whl
Algorithm Hash digest
SHA256 9683ec864f09c70ad7e8a55acaab5516e724a15b9f190b2f52153b5f8e06ec87
MD5 df6be761a9cbf19cee38bade1ed5f96b
BLAKE2b-256 be1771e6ea97b99f46031c6be5e3410c49c013c779b0ee1c2ac489e55c5c80e7

See more details on using hashes here.

Provenance

The following attestation bundles were made for atomic_red_team_mcp-1.0.1-py3-none-any.whl:

Publisher: release.yml on cyberbuff/atomic-red-team-mcp

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page