Stig MCP runs on your own machine — the client starts it, so there is no endpoint to ping. 307 installs a week from pypi. Last commit 6 Oct 2026.
MCP server: MITRE ATT&CK® -> NIST 800-53r5 -> DISA STIG fix/check steps, mitigations and detections
Today is the operative word: we check Stig MCP every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add stig-mcp -- uvx stig-mcp
{
"mcpServers": {
"stig-mcp": {
"args": [
"stig-mcp"
],
"command": "uvx"
}
}
}
[mcp_servers.stig-mcp]
command = "uvx"
args = ["stig-mcp"]
{
"mcpServers": {
"stig-mcp": {
"args": [
"stig-mcp"
],
"command": "uvx"
}
}
}
{
"mcpServers": {
"stig-mcp": {
"args": [
"stig-mcp"
],
"command": "uvx"
}
}
}
This one needs environment variables set before it will start:
STIG_MCP_DATA (Directory holding the knowledge base and downloaded sources).
The author declared them in the registry entry; get the values from the project itself.
MCP server providing 50+ tools for MITRE ATT&CK techniques, groups, and mitigations
OT security standards: IEC 62443, NIST 800-82/53, MITRE ATT&CK for ICS
Deterministic, offline FMECA MCP server: failure modes, criticality matrix, mitigations, readiness
MCP server for ScanMalware.com URL scanning, malware detection, and analysis.
MCP server for PR code review, commit messages, changelogs, and secret detection.
Python MCP server for AWS CLI inspection and operations
Local-first MCP server for PlantUML and Mermaid diagrams with drift detection.
isolved and ApplicantPro jobs, tenant discovery, and change detection as an MCP server.
Answers built from our own checks of this server.