An MCP server that gives AI assistants full operational control of the Mythic C2 Framework .
概览
An MCP server that gives AI assistants full operational control of the Mythic C2 Framework . Documentation · Tool Reference · Lab Walkthrough Mythic MCP Server exposes every meaningful operation in the Mythic C2 Framework as a structured Model Context Protocol tool. Connect it to Claude, ChatGPT, or any MCP client and operate Mythic through natural language. - — login, API tokens, session management - — build, download, inspect agents (Xenon, Poseidon, Forge, …) - — list, task, pivot, manage active sessions - — start/stop listeners, IOCs, configuration - — issue commands, read output, wait for completion - — upload, download, preview, bulk export - — technique lookup, coverage mapping - — campaign management, event logs, global settings - — credentials, artifacts, hosts, processes, screenshots, keylogs, tags, operators, commands, documentation See the full Getting Started guide for all options. ¹ One of API token or username/password is required.
README
以下为原文 README 节选，完整内容请查看原文。
Mythic MCP Server
An MCP server that gives AI assistants full operational control of the Mythic C2 Framework.
Documentation · Tool Reference · Lab Walkthrough
147 tools · 18 categories · Go · Mythic ≥ 3.3.0
Mythic MCP Server exposes every meaningful operation in the Mythic C2 Framework as a structured Model Context Protocol tool. Connect it to Claude, ChatGPT, or any MCP client and operate Mythic through natural language.
flowchart LR
A["🤖 AI Assistant"] -- MCP --> B["⚡ Mythic MCP Server"]
B -- SDK --> C["🎯 Mythic C2"]
C -- GraphQL + REST --> B
B -- MCP --> A
Capabilities
- Auth — login, API tokens, session management
- Payloads — build, download, inspect agents (Xenon, Poseidon, Forge, …)
- Callbacks — list, task, pivot, manage active sessions
- C2 Profiles — start/stop listeners, IOCs, configuration
- Tasks — issue commands, read output, wait for completion
- Files — upload, download, preview, bulk export
- MITRE ATT&CK — technique lookup, coverage mapping
- Operations — campaign management, event logs, global settings
- + 10 more categories — credentials, artifacts, hosts, processes, screenshots, keylogs, tags, operators, commands, documentation
Full schema for every tool: Tool Reference →
Quick Start
# Build
go build -o mythic-mcp ./cmd/mythic-mcp
# Run (stdio — Claude Desktop)
MYTHIC_URL=https://mythic.lab:7443 \
MYTHIC_API_TOKEN=your-token \
./mythic-mcp
# Run (HTTP/SSE — Docker / remote)
MCP_TRANSPORT=http MCP_HTTP_PORT=3333 \
MYTHIC_URL=https://mythic.lab:7443 \
MYTHIC_API_TOKEN=your-token \
./mythic-mcp
Docker
安装
docker run -d --name mythic-mcp --network mythic_default \配置
{
"mcpServers": {
"mythic": {
"command": "/path/to/mythic-mcp",
"env": {
"MYTHIC_URL": "https://mythic.lab:7443",
"MYTHIC_API_TOKEN": "your-token"
}
}
}
}