Skip to main content
MCP Servers / Tenable MCP Server (Tenable One)

Tenable MCP Server (Tenable One)

Contributed

58 tools connecting LLMs to Tenable VM and Tenable One: assets, vulns, scans, exposure scores, attack paths, WAS, ASM, CNAPP, containers, compliance.

Authortarhou
Transportboth
Runtimepython
LicenseMIT
AddedJul 29, 2026

Compatible Clients

Claude CodeClaude DesktopCursorVS Code Copilot

Integrations

Tenable

Tools (58)

  1. tenable_list_agents

    List Nessus agents registered in Tenable VM.

  2. tenable_get_agent_details

    Get detailed information about a specific Nessus agent.

  3. tenable_list_agent_groups

    List all agent groups in Tenable VM.

  4. tenable_get_agent_group_details

    Get details for a specific agent group including its member agents.

  5. tenable_asm_list_assets

    List externally-discovered assets from Tenable ASM.

  6. tenable_asm_get_asset_details

    Get detailed information about a specific ASM-discovered asset.

  7. tenable_list_assets

    List assets from Tenable Vulnerability Management.

  8. tenable_get_asset_details

    Get full details for a specific asset by UUID.

  9. tenable_list_attack_paths

    List top attack paths leading to critical assets (Tenable One).

  10. tenable_apa_country_coverage

    Pre-flight: which countries have APA-rankable paths this session?

  11. tenable_list_attack_techniques

    List top attack techniques found in your environment (Tenable One).

  12. tenable_list_attack_findings

    List attack path findings -- misconfigurations and vulnerability

  13. tenable_list_audit_events

    List audit log events from Tenable VM.

  14. tenable_cloud_list_resources

    List cloud resources from Tenable Cloud Security (CNAPP).

  15. tenable_cloud_list_findings

    List cloud security findings (misconfigurations) from CNAPP.

  16. tenable_cloud_list_vm_vulns

    List virtual machine vulnerabilities from Tenable Cloud Security.

  17. tenable_cloud_list_container_image_vulns

    List container image vulnerabilities from Tenable Cloud Security (CNAPP).

  18. tenable_list_compliance_findings

    List compliance check findings from Tenable VM.

  19. tenable_get_compliance_summary

    Get a summary of compliance check results.

  20. tenable_list_container_images

    List container images from Tenable Container Security.

  21. tenable_get_container_report

    Get the security report for a specific container image.

  22. tenable_list_container_repos

    List container image repositories in Tenable Container Security.

  23. tenable_list_exclusions

    List all scan exclusions in Tenable VM.

  24. tenable_get_exclusion_details

    Get detailed information about a specific scan exclusion.

  25. tenable_get_exposure_score

    Get the organization's Cyber Exposure Score (CES) from Tenable One.

  26. tenable_get_asset_exposure

    Get exposure metrics for a specific asset.

  27. tenable_get_severity_summary

    Get a summary of open vulnerabilities by severity.

  28. tenable_list_exposure_views

    List all Lumin Exposure View cards with current CES + grade + SLA.

  29. tenable_get_exposure_view

    Return CES detail + 14-day trend for a single exposure card.

  30. tenable_list_folders

    List all scan folders in Tenable VM.

  31. tenable_list_networks

    List all networks configured in Tenable VM.

  32. tenable_get_network_details

    Get detailed information about a specific network.

  33. tenable_get_plugin_details

    Get comprehensive details for a Nessus plugin by ID.

  34. tenable_list_plugin_families

    List all Nessus plugin families.

  35. tenable_list_policies

    List all scan policies in Tenable VM.

  36. tenable_get_policy_details

    Get detailed information about a specific scan policy.

  37. tenable_search_recast_rules

    List vulnerability recast and accept rules.

  38. tenable_launch_scan

    Launch an existing scan configuration.

  39. tenable_stop_scan

    Stop a currently running scan.

  40. tenable_get_scan_history

    Get the run history for a scan.

  41. tenable_list_scanners

    List all scanners registered in Tenable VM.

  42. tenable_get_scanner_details

    Get detailed information about a specific scanner.

  43. tenable_list_scans

    List scans from Tenable Vulnerability Management.

  44. tenable_get_scan_results

    Get results for a specific scan by ID.

  45. tenable_list_tags

    List tag categories and their values from Tenable VM.

  46. tenable_get_asset_tags

    Get all tags assigned to a specific asset.

  47. tenable_create_tag_value

    Create a tag category/value pair, or return the existing one if present.

  48. tenable_assign_tags

    Assign one or more tag values to one or more assets.

  49. tenable_unassign_tags

    Remove one or more tag values from one or more assets.

  50. tenable_list_users

    List all users in Tenable VM.

  51. tenable_list_groups

    List all user groups in Tenable VM.

  52. tenable_verify_patched_assets

    Verify that a set of assets no longer carry specific vulnerabilities.

  53. tenable_list_vulnerabilities

    List vulnerabilities from Tenable Vulnerability Management.

  54. tenable_get_vulnerability_details

    Get full details for a vulnerability by plugin ID.

  55. tenable_get_asset_vulnerabilities

    List vulnerabilities for a specific asset by UUID.

  56. tenable_was_list_configs

    List Web Application Scanning configurations.

  57. tenable_was_list_vulnerabilities

    List web application vulnerabilities from Tenable WAS.

  58. tenable_was_get_scan_details

    Get details for a specific WAS scan run.

Tags

vulnerability-managementexposure-managementtenable-oneattack-path-analysiscloud-securitypython

A comprehensive MCP server for Tenable Vulnerability Management and the wider Tenable One platform. Built by a practitioner running Tenable across a multi-country industrial estate.

What it does

Exposes 58 typed, read-mostly tools across 25 modules so an LLM can work a full exposure-management loop: inventory assets, pull vulnerabilities with severity/VPR/CVE filters, inspect scans and scanners, read Cyber Exposure Scores and per-asset AES/ACR, walk Attack Path Analysis output (including a per-country APA coverage pre-flight that buckets paths by hostname prefix), query Web App Scanning, Attack Surface Management, Cloud Security (CNAPP) and Container Security findings, check compliance results, manage tags, audit platform events, and verify patches actually landed with before/after evidence.

The only write operations are scan launch/stop and tag assignment, each flagged with MCP tool annotations so clients can gate them.

How it works

FastMCP v3 server with a lifespan-managed pyTenable TenableIO client; every synchronous pyTenable call is wrapped in asyncio.to_thread(). Cloud Security tools speak direct GraphQL over httpx with an https-only guard. Export iterators are consumed under a configurable safety cap and paginated in-memory, and all output is Markdown shaped for LLM consumption. A deterministic mock client mirrors the pyTenable interface, so the full tool surface and 104-test suite run with zero credentials (TENABLE_MOCK=true) — useful for demos and agent development before pointing it at a live tenant. License-gated features (Lumin/Tenable One, WAS, ASM, CNAPP) degrade with explanatory messages instead of failing.