Repository navigation
v1.0.0
First release of tmi-mcp, a local stdio MCP server that lets AI agents do threat-modeling work against a TMI server.
Install (macOS)
brew install ericfitz/tap/tmi-mcp
tmi-mcp inittmi-mcp init registers the server as tmi with Claude Code, Codex, and Grok Build (whichever are installed) and prints a sample ~/.config/tmi-mcp/config.yaml if you have none. Elsewhere: go install github.com/ericfitz/tmi-mcp/cmd/tmi-mcp@latest.
What's in it
- Tools:
auth,threat_models,threats,diagrams,assets,documents,notes,repositories,metadata,projects,teams. - OAuth (PKCE) browser login on first use; tokens persist in the OS keychain (mode-600 file fallback); automatic refresh and one retry on 401.
- Multiple TMI servers via config profiles; optional fixed
callback_portfor servers with a fixed-port callback allowlist. - Server instructions tell the agent how the tools fit together.
- Several harness sessions can share one login: a process that loses a refresh-token race picks up the tokens the winner saved instead of opening a browser.