Mitre Attck

liveSecurityDefense

STIX bundles from github.com/mitre/cti.

7tools

0msauth

free tier50 calls/day

Tools

technique

Technique by ATT&CK id.

No parameters required.

▶Try it

Response

tactic

Tactic by id or short name.

No parameters required.

▶Try it

Response

mitre_attck_group

Threat group (e.g. G0007).

No parameters required.

▶Try it

Response

software

Software/malware (e.g. S0002).

No parameters required.

▶Try it

Response

mitigation

Mitigation.

No parameters required.

▶Try it

Response

mitre_attck_search

Substring search across the bundle.

No parameters required.

▶Try it

Response

domains

List loaded STIX bundles.

No parameters required.

▶Try it

Response

Test with curl

The gateway speaks JSON-RPC 2.0 over HTTP POST. You can test any pack directly from the terminal.

List available tools

bash

curl -X POST https://gateway.pipeworx.io/mitre-attck/mcp \
  -H "Content-Type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

Call a tool

bash

curl -X POST https://gateway.pipeworx.io/mitre-attck/mcp \
  -H "Content-Type: application/json" \
  -d '{"jsonrpc":"2.0","id":2,"method":"tools/call","params":{"name":"technique","arguments":{}}}'

Use with the SDK

Install @pipeworx/sdk to call tools from any TypeScript/Node project.

TypeScript

import { Pipeworx } from '@pipeworx/sdk';
const px = new Pipeworx();
const result = await px.call("technique", {});

ask_pipeworx

// Or ask in plain English:
const answer = await px.ask("stix bundles from github");

Related packs

Other Pipeworx packs in the same categories (Security, Defense):

MCP Config

claude_desktop_config.json

{
  "mcpServers": {
    "pipeworx-mitre-attck": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-remote",
        "https://gateway.pipeworx.io/mitre-attck/mcp"
      ]
    }
  }
}