红蓝攻防
点击放大

An MCP (Model Context Protocol) server that provides access to Atomic Red Team tests.
The ser the following MCP tools:
query_atomics - Search atomics by technique ID, name, description, or platformrefresh_atomics - Download latest atomics from GitHub - atomic test YAMLget_ - Get the atomic test schemaexecute_atomic - Execute atomic tests (requires ART_EXECUTION_ENABLED=true)And resources:
file://documents/{technique_id} - Read atomic test files by technique IDThe Atomic Red Team MCP server can be installed in de tools and AI assistants. Choose your platform below for detailed installation instructions:
Recommended: Using uvx
Using Docker
Each platform supports multiple installation methods:
1. u) - Easiest setup, automatic updates
1. Docker - Isolated en, consistent across systems
1. Remote Server ⚠️ - Hosted on Railway (free tier, may ha)
Check the .en file for a list of en and their default .
#### Ser
ART_MCP_TRANSPORT - Transport protocol (stdio, sse, streamable-http)ART_MCP_HOST - Server host address (default: 0.0.0.0)ART_MCP_PORT - Server port number (default: 8000)#### Repository Configuration
ART_GITHUB_URL - GitHub URL for atomics repository (default: <)ART_GITHUB_USER - GitHub user/org (default: redcanaryco)ART_GITHUB_REPO - Repository name (default: atomic-red-team)ART_DATA_DIR - Local directory path where atomic test files are stored (default: ./atomics)#### Security Configuration
ART_EXECUTION_ENABLED - Enable the execute_atomic tool (default: false). Set to true, 1, or yes to enable. ⚠️ WARNING: Only enable in controlled en as this allows executing potentially dangerous security tests.#### Authentication Configuration
ART_AUTH_TOKEN - Static bearer token for authentication (optional, authentication disabled if not set)ART_AUTH_CLIENT_ID - Client identifier for authenticated requests (default: authorized-client)By default, the execute_atomic tool is disabled for safety reasons. To enable it:
⚠️ Security Warning: Only enable atomic test execution in controlled, isolated en (like test VMs or sandboxes). These tests can modify system state, create files, execute commands, and perform actions that may be flagged as malicious by security tools.
The ser static token authentication for securing access to the MCP tools and resources. When enabled, clients must include a bearer token in the Authorization header:
To enable authentication:
1. Set the ART_AUTH_TOKEN en :
1. Start the server (authentication is automatically enabled)
1. Clients authenticate by including the token in requests:
Security Notes:
ART_AUTH_TOKEN is set, all requests must include a valid bearer tokenExample with Docker:
开发语言:Python
Star 数:132
该项目属于红蓝攻防方向的开源资源,代码结构清晰,适合安全研究人员学习参考。项目围绕MCP server for Atomic Red Team展开,提供了可运行的实现,对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。
从技术实现角度看,此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论,梳理项目的初始化流程、核心模块职责与数据流转,逐步掌握其中的技术细节与设计思路。
1. 下载源码压缩包,解压到本地环境。
2. 根据项目类型准备对应的运行环境与依赖。
3. 按照 README 中的步骤完成配置与部署。
4. 在隔离的测试环境中运行验证,避免影响生产系统。
本资源来源于开源社区,仅供安全研究、技术学习与合法授权范围内的攻防演练使用,请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。
| 资源标题 | atomic-red-team-mcp - MCP server for Atomic Red Team |
| 所属分类 | 红蓝攻防 |
| 发布作者 | admin |
| 发布时间 | 2026-10-06 00:50:55 |
| 下载权限 | 免费下载 |
| 附件数量 | 2 个下载链接 |
| 浏览次数 | 284 |
| 讨论数量 | 0 |
| 主题状态 | 正常讨论中 |