threat-composer MCP Server
threat-composer is a TypeScript MCP server for Claude Desktop, VS Code with npx, uvx/pip, docker. A simple threat modeling tool to help humans to reduce time-to-value when threat modeling
How to use threat-composer MCP Server
Install or run
git clone https://github.com/awslabs/threat-composer.git
cd threat-composer
./scripts/deployDev.shClient configuration
{
"mcpServers": {
"threat-composer-ai": {
"command": "threat-composer-ai-mcp",
"env": {
"AWS_PROFILE": "your-profile-name",
"AWS_REGION": "us-west-2"
}
}
}
}Compatible clients
What is threat-composer MCP Server?
threat-composer is a TypeScript MCP server for Claude Desktop, VS Code with npx, uvx/pip, docker. A simple threat modeling tool to help humans to reduce time-to-value when threat modeling This profile combines repository metadata with install, compatibility, and usage signals so developers can quickly decide whether it fits their agent workflow before opening the source repository.
Automated repository signals based on public metadata such as recency, license, installation evidence, and adoption. These are not a security audit or endorsement.
Key capabilities
- Tool access support
- Shell commands support
- Browser use support
- Document generation support
- Anthropic provider support
- AWS Bedrock provider support
- package.json config support
Technical details
Install or run threat-composer using npx. Check awslabs/threat-composer for the latest setup command.
- Built for TypeScript
- Built for Node.js
- Built for Python
- Built for Docker
- Install or run with npx
- Install or run with uvx/pip
- Install or run with docker
- Install or run with git clone
Requirements and access
Security and permissions
Review permissions before connecting any MCP server to an agent. Pay special attention to whether it can read local files, write data, call external services, or perform destructive actions.
When to use threat-composer MCP Server
- Use it for connecting agents to external tools and data.
- Use it for integrations workflows.
- Use it for coding workflows.
- Use it for data workflows.
- Use it for claude desktop users.
Built with
Explore related resources
Frequently asked questions
What is threat-composer?
threat-composer is a TypeScript MCP server for Claude Desktop, VS Code with npx, uvx/pip, docker. A simple threat modeling tool to help humans to reduce time-to-value when threat modeling
Who is threat-composer best for?
threat-composer is best for connecting agents to external tools and data, integrations workflows, coding workflows, data workflows, claude desktop users.
How do I install threat-composer?
Install or run threat-composer using npx. Check threat-composer for the latest setup command.
Is threat-composer actively maintained?
threat-composer may need a closer maintenance check before production use.
Auto-fetched from GitHub.
