Mythic MCP

Created By
xpna year ago
A simple POC to expose Mythic as a MCP server
Overview

what is Mythic MCP?

Mythic MCP is a proof of concept (POC) that exposes Mythic as a Managed Control Plane (MCP) server, allowing large language models (LLMs) to perform penetration testing on behalf of users.

how to use Mythic MCP?

To use Mythic MCP, you need to set up the MCP server with Claude Desktop by editing the claude_desktop_config.json file to include the server configuration and then start Claude Desktop.

key features of Mythic MCP?

  • Integration with Claude Desktop for easy deployment
  • Allows LLMs to emulate specific threat actors for pentesting
  • Customizable server configuration for various tasks

use cases of Mythic MCP?

  1. Automating penetration testing tasks using LLMs.
  2. Emulating threat actors to test security measures.
  3. Conducting security assessments in a controlled environment.

FAQ from Mythic MCP?

  • What are the requirements to run Mythic MCP?

You need uv, python3, and Claude Desktop or another MCP client.

  • Can I customize the tasks for the LLM?

Yes! You can provide any task description for the LLM to follow.

  • Is Mythic MCP suitable for production use?

This is a proof of concept and may not be suitable for production environments.

Project Info
Created At
a year ago
Updated At
a year ago
Author Name
xpn
Star
0
Language
Python
License
-

Recommend Servers

View All
Voyei

2 hours ago
Bring your real authenticated browser session to AI coding agents. Local-first MCP server + Chrome MV3 extension. No cloud. No telemetry.
@Cubenest

peek records the user's actual logged-in browser (DOM via rrweb, console events, network metadata, optional response bodies via opt-in Deep capture) through a Chrome MV3 extension. The extension ships events through a native-messaging stdio bridge to a local MCP server (peek-mcp), which persists them to a SQLite database at ~/.peek/sessions.db. AI coding agents (Claude Code, Cursor, Cline, Windsurf) read sessions from the database via 10 MCP tools: Tool What it does list_recent_sessions List recently recorded sessions (id, origin, ts, event count). get_session_summary LLM-readable narrative summary of a session. get_session_console_errors Console errors recorded in a session. get_session_network_errors Failed/notable network requests in a session. get_user_action_before_error Last N user actions before a console error. generate_playwright_repro Generate a runnable Playwright test from a session. get_dom_snapshot Reconstruct the DOM at a given timestamp. query_dom_history Timeline of attribute/text changes for a selector. request_authorization Side-panel consent for write actions (Level 3). execute_action Dispatch a UI action (gated by permission level + destructive blocklist). Why local-first matters Every other "browser session for AI" tool ships to a vendor cloud. peek's SQLite + extension live on the user's machine — no remote endpoints, no telemetry. The privacy policy (docs/peek/PRIVACY_POLICY.md) is the source of truth. Install # 1. Add the MCP server to Claude Code claude mcp add peek -- npx -y @peekdev/mcp # 2. Install the Chrome extension from the Chrome Web Store # (link added once the CWS listing is approved)

a day ago