Mythic MCP

Name: Mythic MCP
Author: xpn

@xpn

Repository

About Mythic MCP

A simple POC to expose Mythic as a MCP server

#mythic-mcp #mcp-server #pentesting

Basic information

Config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "mythic_mcp": {
      "command": "/Users/xpn/.local/bin/uv",
      "args": [
        "--directory",
        "/full/path/to/mythic_mcp/",
        "run",
        "main.py",
        "mythic_admin",
        "mythic_admin_password",
        "localhost",
        "7443"
      ]
    }
  }
}

Tools

No tools detected

We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.

Overview

What is Mythic MCP?

Mythic MCP is a demo MCP server that integrates LLMs with the Mythic command-and-control framework, allowing LLMs to perform automated penetration testing on behalf of the user. It is intended for pentesters and security researchers using MCP-compatible clients like Claude Desktop.

How to use Mythic MCP?

Install uv and Python 3, then edit your claude_desktop_config.json to add a server entry pointing to the Mythic MCP directory with command, args (including Mythic admin credentials, host, and port), and launch Claude Desktop. Sample prompts are provided to task the LLM with threat‑actor emulation.

Key features of Mythic MCP

Quick MCP demo for the Mythic C2 framework
Enables LLMs to automate penetration testing steps
Works with Claude Desktop and other MCP clients
Uses uv and Python 3 for easy deployment
Includes sample prompts for threat actor emulation

Use cases of Mythic MCP

Automate an APT31‑style attack to add a flag to a target file
Have an LLM execute a sequence of pentesting actions described by a threat actor profile
Integrate Mythic tasks into a conversational AI workflow

FAQ from Mythic MCP

What are the requirements for running Mythic MCP?

You need uv, Python 3, and an MCP client such as Claude Desktop.

How do I configure Mythic MCP with Claude Desktop?

Edit claude_desktop_config.json to add an mcpServers entry with the command set to the uv binary, and args including the full path to the Mythic MCP directory, your Mythic admin username, password, host, and port number (e.g., 7443).

Can I use Mythic MCP with MCP clients other than Claude Desktop?

Yes, the README lists “Claude Desktop (or other MCP Client)” as a requirement, indicating client flexibility.

What credentials does Mythic MCP require?

The server expects a Mythic admin username and password to be passed as command‑line arguments, followed by the host and port of the Mythic instance.

What kind of prompts does Mythic MCP support?

The README provides a sample prompt that tasks the LLM as an automated pentester emulating a specific threat actor (e.g., APT31) with a concrete objective, such as adding a flag to a file on a remote host.