English Français العربية

Mitigant

Official registry Cloud and DevOps

Run real, auto-recovered cloud attacks on AWS, Azure and GCP to test your defenses.

Source code Website

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

Remote (streamable-http)
Claude Code 
claude mcp add --transport http mitigant 'https://mcp.mitigant.io/mcp' --header 'apiToken: <Your Mitigant API key, generated in the Mitigant web app under Settings -> Application Keys. The server scopes every call to that key'\''s organization and role.>'
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "mitigant": {
            "type": "http",
            "url": "https://mcp.mitigant.io/mcp",
            "headers": {
                "apiToken": "<Your Mitigant API key, generated in the Mitigant web app under Settings -> Application Keys. The server scopes every call to that key's organization and role.>"
            }
        }
    }
}

Frequently asked questions

What is Mitigant?

Run real, auto-recovered cloud attacks on AWS, Azure and GCP to test your defenses.

How do I install Mitigant?

It runs as a remote server. In Claude Code: claude mcp add --transport http mitigant 'https://mcp.mitigant.io/mcp' --header 'apiToken: <Your Mitigant API key, generated in the Mitigant web app under Settings -> Application Keys. The server scopes every call to that key'\''s organization and role.>'. For other clients, paste the JSON configuration from this page into their MCP settings.

Does Mitigant need an API key?

Yes. It expects apiToken, which you set in its configuration.

Is Mitigant open source?

Its code is public on GitHub, but the repository does not declare a standard license.

Who maintains Mitigant?

It is published by mitigant. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.