{
  "type": "mcp-server",
  "slug": "riskproof",
  "name": "RiskProof",
  "author": "creimer808",
  "description": "Agentic vulnerability investigator that turns Tenable/Nessus findings into evidence-backed remediation decisions",
  "github_url": "https://github.com/creimer808/RiskProof",
  "license": "MIT",
  "tier": "contributed",
  "tags": [
    "vulnerability-prioritization",
    "tenable",
    "nessus",
    "epss",
    "cisa-kev",
    "greynoise",
    "risk-scoring",
    "mcp"
  ],
  "integrations": [
    "Tenable"
  ],
  "domains": [
    "vulnerability-management",
    "threat-intelligence"
  ],
  "date_added": "2026-11-03",
  "last_reviewed": "2026-11-04",
  "transport": "stdio",
  "runtime": "python",
  "auth_method": "none",
  "compatible_clients": [
    "Claude Code",
    "Claude Desktop"
  ],
  "tools_exposed": [
    {
      "name": "import_nessus",
      "description": "Import a .nessus report from the operator-configured import directory and return a KEV-aware triage summary with ranked candidates"
    },
    {
      "name": "import_tenable",
      "description": "Read-only Tenable Vulnerability Management export via API, with an optional asset-tag filter"
    },
    {
      "name": "list_tenable_tags",
      "description": "List the tenant's Tenable tag categories and values to build a tag filter"
    },
    {
      "name": "investigate_finding",
      "description": "Build the evidence record and risk assessment for findings (batches of 25)"
    },
    {
      "name": "enrich_threat_intel",
      "description": "Fetch EPSS scores and CISA KEV status for CVEs, with provenance"
    },
    {
      "name": "verify_applicability",
      "description": "Cross-check scanner claims against observed versions and flag suspected false positives"
    },
    {
      "name": "validate_exposure",
      "description": "Non-destructive connectivity, banner and certificate checks against allowlisted targets only"
    },
    {
      "name": "analyze_exploit_scenario",
      "description": "Describe exploit prerequisites, exposure, KEV-grounded consequences and explicit uncertainties"
    },
    {
      "name": "simulate_remediation",
      "description": "Compare fix, restrict and verify options and their expected risk effects"
    },
    {
      "name": "execute_risk_policy",
      "description": "Apply a P1-P4 decision table and record approval-gated, dry-run-by-default actions"
    },
    {
      "name": "get_audit_trail",
      "description": "Read the append-only audit trail for a finding or recent activity, including pending actions"
    },
    {
      "name": "generate_report",
      "description": "Write a self-contained HTML report of investigated findings (owner-only file permissions)"
    }
  ],
  "resources_exposed": [],
  "prompts_exposed": [],
  "repo": {
    "found": true,
    "archived": false,
    "pushed_at": "2026-11-02T21:40:22Z",
    "stars": 0,
    "forks": 0,
    "open_issues": 0,
    "owner_type": "user",
    "language": "Python",
    "checked_at": "2026-11-05T20:35:15.821Z"
  },
  "url": "https://exchange.tenable.com/mcp-servers/riskproof",
  "json_url": "https://exchange.tenable.com/api/mcp-servers/riskproof.json",
  "markdown_url": "https://exchange.tenable.com/mcp-servers/riskproof.md",
  "source_url": "https://github.com/tenable/cyberagents-exchange/blob/main/mcp-servers/riskproof.md"
}