# Community MCP Server for Tenable

> 58 tools connecting LLMs to Tenable VM and Tenable One: assets, vulns, scans, exposure scores, attack paths, WAS, ASM, CNAPP, containers, compliance.

- Type: MCP server
- Author: tarhou
- License: MIT
- Trust tier: contributed (passed automated validation and a baseline maintainer review)
- Last reviewed: 2026-07-31
- Source repository: https://github.com/tarhou/tenable-mcp-server
- Repo state: not archived
- Last push: 2026-08-05T01:36:51Z
- Stars: 1 (a popularity signal, not a safety signal)
- Forks: 3 (a popularity signal, not a safety signal)
- Open issues: 0
- Language: Python
- Health checked at: 2026-11-05T20:35:15.821Z
- Integrations: Tenable
- Domains: platform-operations
- Tags: vulnerability-management, exposure-management, tenable-one, attack-path-analysis, cloud-security, python
- Date added: 2026-07-29
- Transport: both
- Runtime: python
- Auth method: api-key
- Compatible clients: Claude Code, Claude Desktop, Cursor, VS Code Copilot
- Tools:
  - `tenable_list_agents`: List Nessus agents registered in Tenable VM.
  - `tenable_get_agent_details`: Get detailed information about a specific Nessus agent.
  - `tenable_list_agent_groups`: List all agent groups in Tenable VM.
  - `tenable_get_agent_group_details`: Get details for a specific agent group including its member agents.
  - `tenable_asm_list_assets`: List externally-discovered assets from Tenable ASM.
  - `tenable_asm_get_asset_details`: Get detailed information about a specific ASM-discovered asset.
  - `tenable_list_assets`: List assets from Tenable Vulnerability Management.
  - `tenable_get_asset_details`: Get full details for a specific asset by UUID.
  - `tenable_list_attack_paths`: List top attack paths leading to critical assets (Tenable One).
  - `tenable_apa_country_coverage`: Pre-flight: which countries have APA-rankable paths this session?
  - `tenable_list_attack_techniques`: List top attack techniques found in your environment (Tenable One).
  - `tenable_list_attack_findings`: List attack path findings -- misconfigurations and vulnerability
  - `tenable_list_audit_events`: List audit log events from Tenable VM.
  - `tenable_cloud_list_resources`: List cloud resources from Tenable Cloud Security (CNAPP).
  - `tenable_cloud_list_findings`: List cloud security findings (misconfigurations) from CNAPP.
  - `tenable_cloud_list_vm_vulns`: List virtual machine vulnerabilities from Tenable Cloud Security.
  - `tenable_cloud_list_container_image_vulns`: List container image vulnerabilities from Tenable Cloud Security (CNAPP).
  - `tenable_list_compliance_findings`: List compliance check findings from Tenable VM.
  - `tenable_get_compliance_summary`: Get a summary of compliance check results.
  - `tenable_list_container_images`: List container images from Tenable Container Security.
  - `tenable_get_container_report`: Get the security report for a specific container image.
  - `tenable_list_container_repos`: List container image repositories in Tenable Container Security.
  - `tenable_list_exclusions`: List all scan exclusions in Tenable VM.
  - `tenable_get_exclusion_details`: Get detailed information about a specific scan exclusion.
  - `tenable_get_exposure_score`: Get the organization's Cyber Exposure Score (CES) from Tenable One.
  - `tenable_get_asset_exposure`: Get exposure metrics for a specific asset.
  - `tenable_get_severity_summary`: Get a summary of open vulnerabilities by severity.
  - `tenable_list_exposure_views`: List all Lumin Exposure View cards with current CES + grade + SLA.
  - `tenable_get_exposure_view`: Return CES detail + 14-day trend for a single exposure card.
  - `tenable_list_folders`: List all scan folders in Tenable VM.
  - `tenable_list_networks`: List all networks configured in Tenable VM.
  - `tenable_get_network_details`: Get detailed information about a specific network.
  - `tenable_get_plugin_details`: Get comprehensive details for a Nessus plugin by ID.
  - `tenable_list_plugin_families`: List all Nessus plugin families.
  - `tenable_list_policies`: List all scan policies in Tenable VM.
  - `tenable_get_policy_details`: Get detailed information about a specific scan policy.
  - `tenable_search_recast_rules`: List vulnerability recast and accept rules.
  - `tenable_launch_scan`: Launch an existing scan configuration.
  - `tenable_stop_scan`: Stop a currently running scan.
  - `tenable_get_scan_history`: Get the run history for a scan.
  - `tenable_list_scanners`: List all scanners registered in Tenable VM.
  - `tenable_get_scanner_details`: Get detailed information about a specific scanner.
  - `tenable_list_scans`: List scans from Tenable Vulnerability Management.
  - `tenable_get_scan_results`: Get results for a specific scan by ID.
  - `tenable_list_tags`: List tag categories and their values from Tenable VM.
  - `tenable_get_asset_tags`: Get all tags assigned to a specific asset.
  - `tenable_create_tag_value`: Create a tag category/value pair, or return the existing one if present.
  - `tenable_assign_tags`: Assign one or more tag values to one or more assets.
  - `tenable_unassign_tags`: Remove one or more tag values from one or more assets.
  - `tenable_list_users`: List all users in Tenable VM.
  - `tenable_list_groups`: List all user groups in Tenable VM.
  - `tenable_verify_patched_assets`: Verify that a set of assets no longer carry specific vulnerabilities.
  - `tenable_list_vulnerabilities`: List vulnerabilities from Tenable Vulnerability Management.
  - `tenable_get_vulnerability_details`: Get full details for a vulnerability by plugin ID.
  - `tenable_get_asset_vulnerabilities`: List vulnerabilities for a specific asset by UUID.
  - `tenable_was_list_configs`: List Web Application Scanning configurations.
  - `tenable_was_list_vulnerabilities`: List web application vulnerabilities from Tenable WAS.
  - `tenable_was_get_scan_details`: Get details for a specific WAS scan run.
- Listing page: https://exchange.tenable.com/mcp-servers/tenable-mcp-server
- Source file: https://github.com/tenable/cyberagents-exchange/blob/main/mcp-servers/tenable-mcp-server.md

A comprehensive MCP server for **Tenable Vulnerability Management** and the wider **Tenable One** platform. Built by a practitioner running Tenable across a multi-country industrial estate.

## What it does

Exposes 58 typed, read-mostly tools across 25 modules so an LLM can work a full exposure-management loop: inventory assets, pull vulnerabilities with severity/VPR/CVE filters, inspect scans and scanners, read Cyber Exposure Scores and per-asset AES/ACR, walk Attack Path Analysis output (including a per-country APA coverage pre-flight that buckets paths by hostname prefix), query Web App Scanning, Attack Surface Management, Cloud Security (CNAPP) and Container Security findings, check compliance results, manage tags, audit platform events, and verify patches actually landed with before/after evidence.

The only write operations are scan launch/stop and tag assignment, each flagged with MCP tool annotations so clients can gate them.

## How it works

FastMCP v3 server with a lifespan-managed pyTenable `TenableIO` client; every synchronous pyTenable call is wrapped in `asyncio.to_thread()`. Cloud Security tools speak direct GraphQL over httpx with an https-only guard. Export iterators are consumed under a configurable safety cap and paginated in-memory, and all output is Markdown shaped for LLM consumption. A deterministic mock client mirrors the pyTenable interface, so the full tool surface and 104-test suite run with zero credentials (`TENABLE_MOCK=true`) — useful for demos and agent development before pointing it at a live tenant. License-gated features (Lumin/Tenable One, WAS, ASM, CNAPP) degrade with explanatory messages instead of failing.

This is the Markdown version of one of 140 listings on CyberAgents Exchange. The same listing as JSON: https://exchange.tenable.com/api/mcp-servers/tenable-mcp-server.json. The full index and how to read it: https://exchange.tenable.com/llms.txt