# Tenable MSSP Portal MCP Server

> An MCP server for orchestrating Tenable MSSP child container workflows. Make bulk queries. Take bulk actions.

- Type: MCP server
- Author: andrewspearson
- License: MIT
- Trust tier: contributed (passed automated validation and a baseline maintainer review)
- Source repository: https://github.com/andrewspearson/tenable-mcp-mssp
- Repo state: not archived
- Last push: 2026-06-23T12:16:41Z
- Stars: 9 (a popularity signal, not a safety signal)
- Forks: 1 (a popularity signal, not a safety signal)
- Open issues: 0
- Language: Python
- Health checked at: 2026-11-05T20:35:15.821Z
- Integrations: Tenable, Tenable Hexa AI MCP
- Domains: platform-operations
- Tags: mssp, vulnerability-management, tenable-vm, exposure-management, tenable-one
- Date added: 2026-06-23
- Works with the Tenable Hexa AI MCP server: yes
- Transport: stdio
- Runtime: python
- Auth method: none
- Compatible clients: ChatGPT, Codex, Claude Desktop, Claude Code, Antigravity
- Tools:
  - `list_mssp_child_accounts`: List raw MSSP child account objects returned by Tenable, including license data.
  - `list_available_tenable_mcp_tools`: Discover the Tenable Hexa AI MCP Server tool catalog for one child container licensed for `hexa`.
  - `get_child_container_scope`: Show the configured child container allowlist scope for action tools.
  - `run_tenable_mcp_tool_for_child`: Run one Tenable Hexa AI MCP Server tool on one child container licensed for `hexa`.
  - `run_tenable_mcp_recipe_for_child`: Validate a known sequence of Tenable Hexa AI MCP Server tool calls on one child container licensed for `hexa`.
  - `run_tenable_mcp_recipe_across_child_containers`: Run a known working recipe across multiple child containers licensed for `hexa` with controlled fan-out.
  - `bulk_vm_cve_query`: Start a curated direct pyTenable VM export for CVEs across eligible child containers licensed for `vm`. This tool should be used only when explicitly requested by name.
  - `get_bulk_vm_cve_query_status`: Check status for a server-managed `bulk_vm_cve_query` run.
  - `get_bulk_vm_cve_query_result`: Read final summary and artifact paths for a server-managed `bulk_vm_cve_query` run.
- Listing page: https://exchange.tenable.com/mcp-servers/tenable-mcp-mssp
- Source file: https://github.com/tenable/cyberagents-exchange/blob/main/mcp-servers/tenable-mcp-mssp.md

## What it does

- Provides an MSSP aware wrapper around the [Tenable Hexa AI MCP Server](https://docs.tenable.com/vulnerability-management/Content/getting-started/hexa-AI-MCP.htm).
- Lets you use Tenable Hexa AI MCP Server tools across MSSP child containers through a scoped orchestration layer.
- Provides a tool, named `bulk_vm_cve_query`, to query a CVE or list of CVEs across eligible in-scope child containers. This tool provides a CSV report of findings in those child containers.
- Queries and actions taken against child containers run concurrently and operate on up to 10 child containers at a time.
- Provides the ability to limit which child containers you perform an action on. 
- Lists all child containers and license information.

## How it works

See the tenable-mcp-mssp [README](https://github.com/andrewspearson/tenable-mcp-mssp/blob/main/README.md).

This is the Markdown version of one of 140 listings on CyberAgents Exchange. The same listing as JSON: https://exchange.tenable.com/api/mcp-servers/tenable-mcp-mssp.json. The full index and how to read it: https://exchange.tenable.com/llms.txt