
Tenable MCP Server (Tenable One)
Contributed58 tools connecting LLMs to Tenable VM and Tenable One: assets, vulns, scans, exposure scores, attack paths, WAS, ASM, CNAPP, containers, compliance.
Tools (58)
- tenable_list_agents
List Nessus agents registered in Tenable VM.
- tenable_get_agent_details
Get detailed information about a specific Nessus agent.
- tenable_list_agent_groups
List all agent groups in Tenable VM.
- tenable_get_agent_group_details
Get details for a specific agent group including its member agents.
- tenable_asm_list_assets
List externally-discovered assets from Tenable ASM.
- tenable_asm_get_asset_details
Get detailed information about a specific ASM-discovered asset.
- tenable_list_assets
List assets from Tenable Vulnerability Management.
- tenable_get_asset_details
Get full details for a specific asset by UUID.
- tenable_list_attack_paths
List top attack paths leading to critical assets (Tenable One).
- tenable_apa_country_coverage
Pre-flight: which countries have APA-rankable paths this session?
- tenable_list_attack_techniques
List top attack techniques found in your environment (Tenable One).
- tenable_list_attack_findings
List attack path findings -- misconfigurations and vulnerability
- tenable_list_audit_events
List audit log events from Tenable VM.
- tenable_cloud_list_resources
List cloud resources from Tenable Cloud Security (CNAPP).
- tenable_cloud_list_findings
List cloud security findings (misconfigurations) from CNAPP.
- tenable_cloud_list_vm_vulns
List virtual machine vulnerabilities from Tenable Cloud Security.
- tenable_cloud_list_container_image_vulns
List container image vulnerabilities from Tenable Cloud Security (CNAPP).
- tenable_list_compliance_findings
List compliance check findings from Tenable VM.
- tenable_get_compliance_summary
Get a summary of compliance check results.
- tenable_list_container_images
List container images from Tenable Container Security.
- tenable_get_container_report
Get the security report for a specific container image.
- tenable_list_container_repos
List container image repositories in Tenable Container Security.
- tenable_list_exclusions
List all scan exclusions in Tenable VM.
- tenable_get_exclusion_details
Get detailed information about a specific scan exclusion.
- tenable_get_exposure_score
Get the organization's Cyber Exposure Score (CES) from Tenable One.
- tenable_get_asset_exposure
Get exposure metrics for a specific asset.
- tenable_get_severity_summary
Get a summary of open vulnerabilities by severity.
- tenable_list_exposure_views
List all Lumin Exposure View cards with current CES + grade + SLA.
- tenable_get_exposure_view
Return CES detail + 14-day trend for a single exposure card.
- tenable_list_folders
List all scan folders in Tenable VM.
- tenable_list_networks
List all networks configured in Tenable VM.
- tenable_get_network_details
Get detailed information about a specific network.
- tenable_get_plugin_details
Get comprehensive details for a Nessus plugin by ID.
- tenable_list_plugin_families
List all Nessus plugin families.
- tenable_list_policies
List all scan policies in Tenable VM.
- tenable_get_policy_details
Get detailed information about a specific scan policy.
- tenable_search_recast_rules
List vulnerability recast and accept rules.
- tenable_launch_scan
Launch an existing scan configuration.
- tenable_stop_scan
Stop a currently running scan.
- tenable_get_scan_history
Get the run history for a scan.
- tenable_list_scanners
List all scanners registered in Tenable VM.
- tenable_get_scanner_details
Get detailed information about a specific scanner.
- tenable_list_scans
List scans from Tenable Vulnerability Management.
- tenable_get_scan_results
Get results for a specific scan by ID.
- tenable_list_tags
List tag categories and their values from Tenable VM.
- tenable_get_asset_tags
Get all tags assigned to a specific asset.
- tenable_create_tag_value
Create a tag category/value pair, or return the existing one if present.
- tenable_assign_tags
Assign one or more tag values to one or more assets.
- tenable_unassign_tags
Remove one or more tag values from one or more assets.
- tenable_list_users
List all users in Tenable VM.
- tenable_list_groups
List all user groups in Tenable VM.
- tenable_verify_patched_assets
Verify that a set of assets no longer carry specific vulnerabilities.
- tenable_list_vulnerabilities
List vulnerabilities from Tenable Vulnerability Management.
- tenable_get_vulnerability_details
Get full details for a vulnerability by plugin ID.
- tenable_get_asset_vulnerabilities
List vulnerabilities for a specific asset by UUID.
- tenable_was_list_configs
List Web Application Scanning configurations.
- tenable_was_list_vulnerabilities
List web application vulnerabilities from Tenable WAS.
- tenable_was_get_scan_details
Get details for a specific WAS scan run.
A comprehensive MCP server for Tenable Vulnerability Management and the wider Tenable One platform. Built by a practitioner running Tenable across a multi-country industrial estate.
What it does
Exposes 58 typed, read-mostly tools across 25 modules so an LLM can work a full exposure-management loop: inventory assets, pull vulnerabilities with severity/VPR/CVE filters, inspect scans and scanners, read Cyber Exposure Scores and per-asset AES/ACR, walk Attack Path Analysis output (including a per-country APA coverage pre-flight that buckets paths by hostname prefix), query Web App Scanning, Attack Surface Management, Cloud Security (CNAPP) and Container Security findings, check compliance results, manage tags, audit platform events, and verify patches actually landed with before/after evidence.
The only write operations are scan launch/stop and tag assignment, each flagged with MCP tool annotations so clients can gate them.
How it works
FastMCP v3 server with a lifespan-managed pyTenable TenableIO client; every synchronous pyTenable call is wrapped in asyncio.to_thread(). Cloud Security tools speak direct GraphQL over httpx with an https-only guard. Export iterators are consumed under a configurable safety cap and paginated in-memory, and all output is Markdown shaped for LLM consumption. A deterministic mock client mirrors the pyTenable interface, so the full tool surface and 104-test suite run with zero credentials (TENABLE_MOCK=true) — useful for demos and agent development before pointing it at a live tenant. License-gated features (Lumin/Tenable One, WAS, ASM, CNAPP) degrade with explanatory messages instead of failing.