Tool Reference¶
The Mythic MCP Server exposes 148 tools across 18 categories. Each tool has a stable name, a description the AI reads to decide when to use it, and a typed parameter schema.
Auto-generated
These pages are generated directly from the Go source code. They stay in sync with the server automatically on every deploy.
| Category | Tools | Description |
|---|---|---|
| Authentication | 7 | Login, logout, API token lifecycle, session management. |
| C2 Profiles | 10 | C2 profile lifecycle — start/stop listeners, IOCs, sample messages, configuration. |
| Callbacks | 11 | Active agent sessions — list, update, P2P edges, tokens. |
| Commands | 3 | Command schema and parameter introspection. |
| Credentials & Artifacts | 14 | Credential store and artifact (IOC / forensic evidence) tracking. |
| Documentation | 2 | Browse installed agent and C2 profile documentation. |
| Files | 8 | Upload, download, preview, and bulk-export files. |
| Hosts | 5 | Host inventory, network topology mapping. |
| Keylogs | 3 | Keylogger data retrieval by operation or callback. |
| MITRE ATT&CK | 6 | Technique lookup, task/command/operation mapping. |
| Operations | 11 | Operation (campaign) CRUD, event logging, global settings. |
| Operators | 12 | User account management, preferences, secrets, invite links. |
| Payload Discovery | 3 | Introspect build parameters, C2 profile parameters, and available commands for each payload type. |
| Payloads | 12 | Build, download, manage, and inspect agent payload binaries. |
| Processes | 5 | Process enumeration and tree views. |
| Screenshots | 6 | Screenshot capture timeline, thumbnails, downloads. |
| Tags | 11 | Flexible tagging system for any Mythic object. |
| Tasks & Responses | 19 | Issue commands to agents, read output, wait for completion, OPSEC bypass. |