Propose new technique for Reconnaissance: MCP Server Enumeration

[vgudur-dev]

Hi, I'm a new contributor and I'd like to add the first technique for the Reconnaissance tactic (ATK-TA0043). I'm proposing 'MCP Server Enumeration'. Could you please assign a Technique ID (e.g., SAFE-T0101) so I can create the file structure correctly? Thank you!

[bishnubista]

Hi @vgudur-dev, welcome to the project! 👋

Great proposal — Reconnaissance (ATK-TA0043) is currently the only tactic with no documented techniques, so this would be a valuable first contribution.

Assigned Technique ID: SAFE-T2201

Please use the following structure:

techniques/SAFE-T2201/README.md

Important Note: Naming Conflict

There is an existing technique SAFE-T1601: MCP Server Enumeration under Discovery (ATK-TA0007). Since Discovery covers post-compromise enumeration (attacker already has access), your Reconnaissance technique should focus on pre-compromise intelligence gathering (external scanning, no prior access).

To differentiate, please consider a more specific name such as:

• External MCP Infrastructure Reconnaissance
• MCP Server Fingerprinting
• Pre-Compromise MCP Discovery

Or keep "MCP Server Enumeration" but make the pre-compromise scope very clear in the description.

Getting Started

1. Use the TEMPLATE.md as your starting point
2. Set Tactic to Reconnaissance (ATK-TA0043)
3. Reference SAFE-T1601 in the Related Techniques section
4. Map to relevant MITRE ATT&CK Reconnaissance techniques (e.g., T1595 Active Scanning, T1592 Gather Victim Host Information)

Looking forward to your PR!