Caldera Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Caldera Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
MCP server for MITRE Caldera adversary emulation platform.
Connects any MCP-compatible AI client (Claude, Cursor, VS Code, etc.) to a running Caldera instance. Build attack scenarios from natural language, inspect connected agents, and manage operations — all through conversation.
Important: This tool connects an AI to a live adversary emulation platform. Only point it at Caldera instances you own and are authorized to operate. Always review scope before executing any operation.
| Group | Tools |
|---|---|
| Health | caldera_health_check |
| Agents | caldera_list_agents, caldera_get_agent |
| Abilities | caldera_list_abilities, caldera_get_ability, caldera_create_ability, caldera_delete_ability |
| Adversaries | caldera_list_adversaries, caldera_get_adversary, caldera_create_adversary, caldera_update_adversary, caldera_delete_adversary |
| Operations | caldera_list_operations, caldera_get_operation, caldera_create_operation, caldera_set_operation_state, caldera_get_operation_results, caldera_delete_operation |
Key behaviors:
caldera_list_abilities supports filters: technique_id, tactic, platformcaldera_create_operation defaults to state="paused" — operations never start automaticallyRequires uv.
CALDERA_URL=http://my-caldera:8888 \
CALDERA_API_KEY=your-red-api-key \
uvx caldera-mcppip install caldera-mcp
CALDERA_URL=http://my-caldera:8888 CALDERA_API_KEY=your-red-api-key caldera-mcpdocker run --rm \
-e CALDERA_URL=http://my-caldera:8888 \
-e CALDERA_API_KEY=your-red-api-key \
-p 8081:8081 \
ghcr.io/cowboy-samurai/caldera-mcp \
--transport sse| Variable | Required | Default | Description |
|---|---|---|---|
CALDERA_API_KEY | Yes | — | Caldera red team API key |
CALDERA_URL | No | http://localhost:8888 | Caldera server base URL |
The red team API key can be found in your Caldera config (conf/local.yml → api_key_red), or in the container logs if auto-generated.
Add to .mcp.json in your project root:
{
"mcpServers": {
"caldera": {
"command": "uvx",
"args": ["caldera-mcp"],
"env": {
"CALDERA_URL": "http://my-caldera:8888",
"CALDERA_API_KEY": "your-red-api-key"
}
}
}
}Add to claude_desktop_config.json:
{
"mcpServers": {
"caldera": {
"command": "uvx",
"args": ["caldera-mcp"],
"env": {
"CALDERA_URL": "http://my-caldera:8888",
"CALDERA_API_KEY": "your-red-api-key"
}
}
}
}If your Caldera instance is remote and you want the MCP server to run as a persistent process:
caldera-mcp --transport sse --host 127.0.0.1 --port 8081Then configure your client to connect via SSE:
{
"mcpServers": {
"caldera": {
"type": "sse",
"url": "http://localhost:8081/sse"
}
}
}Once connected, talk to your AI client naturally:
List all alive agentsFind abilities for T1059.001 on WindowsCreate an adversary from these techniques: T1566.001, T1059.001, T1003.001What operations are currently running?Operations created through this server default to paused state. Always review scope — techniques, commands, and targeted hosts — before resuming any operation.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.