MCP Kill-Chain Research — Stage 1 (Identity ≠ Behavior) MCP server

MCP Kill-Chain Research — Stage 1 (Identity ≠ Behavior) is the official remote MCP server from gtfo.dev. It answers at https://ailm.gtfo.dev/mcp over streamable HTTP and asks you to sign in with your gtfo.dev account before it lists its tools, so your client opens a login the first time it connects. Our probes reached it 10 of 10 times since 5 September 2026; the last check, on 18 October 2026, got the sign-in challenge, so it is up.

Security research: MCP registries verify identity, not tool behavior. See gtfo.dev.

Description as the publisher wrote it.

What MCP Kill-Chain Research — Stage 1 (Identity ≠ Behavior) needs before it works

A sign-in. The server refused to list its tools to an anonymous client and answered with an authentication challenge, which is how an MCP server protected by OAuth behaves. Add it with one of the setups below; the first connection opens a login for your gtfo.dev account, and the tools appear once you have approved it.

Add MCP Kill-Chain Research — Stage 1 (Identity ≠ Behavior) to your AI client

Every block below points at https://ailm.gtfo.dev/mcp. Pick your client and copy.

claude mcp add --transport http mcp-kill-chain-research-stage-1 https://ailm.gtfo.dev/mcp

{
  "mcpServers": {
    "mcp-kill-chain-research-stage-1": {
      "command": "npx",
      "args": ["-y", "mcp-remote", "https://ailm.gtfo.dev/mcp"]
    }
  }
}

{
  "mcpServers": {
    "mcp-kill-chain-research-stage-1": {
      "url": "https://ailm.gtfo.dev/mcp"
    }
  }
}

{
  "servers": {
    "mcp-kill-chain-research-stage-1": {
      "type": "http",
      "url": "https://ailm.gtfo.dev/mcp"
    }
  }
}

{
  "context_servers": {
    "mcp-kill-chain-research-stage-1": {
      "url": "https://ailm.gtfo.dev/mcp"
    }
  }
}

{
  "mcpServers": {
    "mcp-kill-chain-research-stage-1": {
      "serverUrl": "https://ailm.gtfo.dev/mcp"
    }
  }
}

{
  "mcpServers": {
    "mcp-kill-chain-research-stage-1": {
      "url": "https://ailm.gtfo.dev/mcp"
    }
  }
}

name: MCP Kill-Chain Research — Stage 1 (Identity ≠ Behavior)
version: 0.0.1
schema: v1
mcpServers:
  - name: MCP Kill-Chain Research — Stage 1 (Identity ≠ Behavior)
    type: streamable-http
    url: https://ailm.gtfo.dev/mcp

{
  "mcpServers": {
    "mcp-kill-chain-research-stage-1": {
      "httpUrl": "https://ailm.gtfo.dev/mcp"
    }
  }
}

{
  "mcpServers": {
    "mcp-kill-chain-research-stage-1": {
      "type": "http",
      "url": "https://ailm.gtfo.dev/mcp"
    }
  }
}

{
  "mcpServers": {
    "mcp-kill-chain-research-stage-1": {
      "url": "https://ailm.gtfo.dev/mcp"
    }
  }
}

goose://extension?url=https%3A%2F%2Failm.gtfo.dev%2Fmcp&type=streamable_http&id=mcp-kill-chain-research-stage-1&name=MCP%20Kill-Chain%20Research%20%E2%80%94%20Stage%201%20%28Identity%20%E2%89%A0%20Behavior%29

Is MCP Kill-Chain Research — Stage 1 (Identity ≠ Behavior) up right now?

It answered our last check on 18 October 2026 in 143 ms. Over 10 checks since 5 September 2026 it answered 10. Status here comes from Neuronto's own probes, not from the publisher.

MCP servers similar to MCP Kill-Chain Research — Stage 1 (Identity ≠ Behavior)

Questions about MCP Kill-Chain Research — Stage 1 (Identity ≠ Behavior)

Is there an official MCP Kill-Chain Research — Stage 1 (Identity ≠ Behavior) MCP server?

Yes. It is published by gtfo.dev and served from ailm.gtfo.dev, the vendor's own domain: https://ailm.gtfo.dev/mcp.

How do I sign in to MCP Kill-Chain Research — Stage 1 (Identity ≠ Behavior)?

Add the server with a setup above. The first time your client connects it opens the sign-in page for gtfo.dev; approve it and the tools load.

Is MCP Kill-Chain Research — Stage 1 (Identity ≠ Behavior) down?

It answered our last check on 18 October 2026 in 143 ms. Over 10 checks since 5 September 2026 it answered 10.

How do I add MCP Kill-Chain Research — Stage 1 (Identity ≠ Behavior) to Cursor?

Put the server under mcpServers in ~/.cursor/mcp.json with the URL https://ailm.gtfo.dev/mcp. The exact JSON is above, with the same setup for Claude Code, Claude Desktop, VS Code, Windsurf, Zed, Gemini CLI and the rest.

Does MCP Kill-Chain Research — Stage 1 (Identity ≠ Behavior) need an API key?

It needs a sign-in rather than a key you paste: the server answered with an authentication challenge, so your client runs the login when it first connects.

Where this comes from

Publisher: dev.gtfo. Endpoint host: ailm.gtfo.dev. ARD identifier: urn:air:dev.gtfo:mcp:mcp-killchain-stage1-weather. First indexed 31 August 2026. The tools are exactly what the server returned; nothing on this page is inferred from its name. Ranking in Neuronto search is never for sale.