Mitigant

安装

选择你使用的 AI 应用，然后复制设置。

通过 2/3 项检查 · 你的提问会经过开发者的服务器（mcp.mitigant.io） · ✓ 命令已检查 2026年11月13日

claude mcp add --transport http --scope user mitigant https://mcp.mitigant.io/mcp --header 'apiToken: your-value'

{
  "mcpServers": {
    "mitigant": {
      "url": "https://mcp.mitigant.io/mcp",
      "headers": {
        "apiToken": "your-value"
      }
    }
  }
}

{
  "servers": {
    "mitigant": {
      "type": "http",
      "url": "https://mcp.mitigant.io/mcp",
      "headers": {
        "apiToken": "your-value"
      }
    }
  }
}

哪些应用可以使用它

依据这个服务器的连接方式和各应用自己的文档，检查于 2026年11月10日。

通过互联网连接，适用于

ClaudeGooseLM StudioMsty StudioCherry StudioCursorVS Code + GitHub CopilotVisual StudioWindsurf (Devin Desktop)ZedKiroClineContinueJetBrains AI AssistantClaude CodeCodex CLIGemini CLIOpenCodenodecodeWarpLibreChatOpen WebUIRaycast

全部应用及其优缺点 →

它能做什么

工具名称和描述与服务器在 2026年11月12日 报告的完全一致。这些内容由作者撰写，不是我们写的；我们以纯文本形式显示。

• list_attacks

  Browse Mitigant's attack actions -- atomic tests that each emulate one attacker technique -- that you can launch on their own against AWS, Azure or GCP. Currently 111 attack actions (AWS 49, Azure 36, GCP 26). Returns each action's attackName (show this to the user) and attackTyp

• get_attack_details

  Full description, impact, MITRE mapping, and orchestration type (PROVISIONED or INLINE -- PROVISIONED attacks create and destroy their own target rather than targeting your existing infrastructure (they may still read or use existing resources along the way), so they're the lower

• launch_attack

  Run an attack against a cloud account connected to Mitigant. Returns the result if it finishes within wait_seconds (default 20); otherwise it returns at once with the attackId and status RUNNING while the attack keeps running -- then poll get_attack_status with that attackId, and

• list_cloud_accounts

  List the cloud accounts available for attack emulation -- any account not listed here cannot be attacked, so check this before guessing an account_no for launch_attack. An empty result means no accounts are onboarded for attack emulation (for that cloud, or at all), not a failure

• list_scenarios

  List Mitigant's attack scenarios -- multi-step chains that combine several attack actions run in sequence, so treat a scenario as having the combined blast radius of every step. Currently 45 scenarios (AWS 26, Azure 12, GCP 7). Returns each scenario's scenarioName (show this to t

• get_scenario_details

  Full details for one attack scenario -- description, impact, and the step-by-step composition, by the scenario key from list_scenarios. A scenario runs several attacks in sequence; this returns every step, not just the first. Result includes scenarioName (show this to the user) a

• launch_scenario

  Run a multi-step attack chain against a cloud account connected to Mitigant. Returns the result if every step finishes within wait_seconds (default 20); a multi-step scenario usually takes longer, so expect it to return at once with the attackId and status RUNNING while it keeps

• get_attack_status

  Get the current report for a previously launched attack, including its clean-up state. Returns the attack report plus a 'cleanup' summary with cleanUpComplete and a plain-language statement. Only tell the user the account is back to its pre-attack state when cleanup.cleanUpComple

• list_recent_attacks

  List your own recent attack and scenario runs for a cloud account, most recent first, each with its attackId and status. Use this to recover an attackId you no longer have -- for example when a launch_attack / launch_scenario call's connection dropped before it returned, or to ch

• get_context

  Check this account's context before planning or launching: whether it is a Mitigant DEMO account and what that allows. Call this first on a new connection. If isDemo is true, every attack or scenario with allowedOnDemo=false WILL be rejected at launch -- treat those as not runnab

• clean_up_attack 看起来像是对 AI 下的指令

  Clean up a previously launched attack, restoring the cloud resources it changed back to their pre-attack state. Clean-up is normally AUTOMATIC after a short, deliberate inspection window (so the team can verify the attack and collect evidence first); calling this kicks it off imm

• get_attack_evidence

  Get the evidence Mitigant collected for a previously launched attack -- what the account's own logging (CloudTrail, GuardDuty) recorded about it. Returns an 'evidence' summary (counts, sources, and a plain-language statement) plus the raw records, each with an evidenceUrl that op

• list_threat_actors

  List every real-world threat actor Mitigant's catalog tracks (name, description, references). Not scoped to a cloud service. Use this to find an actor's exact name (e.g. 'Storm-0940', 'Scattered Spider') before calling get_attacks_by_threat_actor, or to summarize what an actor is

• get_attacks_by_threat_actor

  Find the managed attacks that demonstrate a named threat actor's real techniques, for one cloud service -- e.g. 'which Azure attacks demonstrate Scattered Spider', or to plan a red team exercise around one actor's known behavior. Get the actor's exact name from list_threat_actors

基础检查i

我们检查的是任何人都能看到的信息；我们没有阅读代码。不适用的检查项不计入总数。 · 检查于 2026年11月13日

• ✓ 通过

  作者与仓库一致

  注册名称已通过 GitHub 账户 mitigant 验证，该账户拥有此仓库

• … 尚未检查

  仍在维护

  我们还没有从 GitHub 读取这个仓库

• … 尚未检查

  有许可证

  我们还没有从 GitHub 读取这个仓库

• ✓ 通过

  端点有响应

  在 395 毫秒内响应（HTTP 200）

• – 不适用

  使用 OAuth 登录

  无需登录

• ✕ 未通过

  工具描述中没有隐藏指令

  有 2 个工具描述包含看起来像是对 AI 下指令的文字。安装前请先阅读下方的内容

用户评价

还没有评价

用 Google 登录后写评价

与“开发者工具”中的其他服务器比较i

• 星标数多于此分类中其他 5829 个服务器的 0%
• 发布到注册中心的时间比此分类中其他 5829 个服务器的 59% 更新
• 基础检查结果等于或优于此分类中其他 5829 个服务器的 44%

与注册中心里这个分类中所有活跃的服务器比较。只有当发布者拥有该仓库时，星标数才计入。

同类别的其他选择

同一分类中其他作者的服务器，按星标数排序。

如何看卡片：↓ 每周下载量i★ GitHub 星标i三大支柱：评价 · 检查 · 使用情况i更新 = 最新版本发布到注册中心的时间i

REA

Reverse engineer anything from your terminal or agent with one CLI and MCP server.

作者：morluto·广泛使用·↓ 38.9万/周·★ 45.5万·昨天更新

在你的电脑上运行

安装

GitHub

Connect AI assistants to GitHub - manage repos, issues, PRs, and workflows through natural language.

作者：github·广泛使用·★ 3.4万·10天前更新

电脑或云端

安装

Serena MCP: the IDE for your agent

A powerful toolkit for coding, providing semantic retrieval and editing capabilities.

作者：oraios·广泛使用·↓ 3.5万/周·★ 3.1万·6个月前更新

在你的电脑上运行

安装

作者的 README

仓库中没有找到 README