Tenable OT MCP Server (Enterprise Manager Edition)

Query OT assets

Get one OT asset

Get vulnerabilities for one asset

List configured custom fields

Query attack-pathway data (relational, not computed)

Query vulnerability clusters (relational join, not computed)

Query temporal patterns (event sequence, not motif analysis)

Get asset intelligence bundle (joined data, not narrative)

List paired ICP appliances via EM

Query OT events

Get one OT event

List asset groups (active)

List archived asset groups

Get an asset group by id

List email groups

Get an email group by id

Find email groups that route through a given SMTP server

List schedule groups

List archived schedule groups

Get a schedule group by id

List tag groups

Get a tag group by id

Discover tags eligible for a tag group

List rule groups

List archived rule groups

Get a rule group by id

List port groups

List archived port groups

Get a port group by id

List protocol groups

List archived protocol groups

Get a protocol group by id

List user groups (ICP-level)

List archived user groups (ICP-level)

Get a user group by id (ICP-level)

List user groups (Enterprise Manager level)

List archived user groups (Enterprise Manager level)

Get a user group by id (Enterprise Manager level)

Create an asset group (tag-like grouping)

Update an asset group's metadata or membership

Archive (soft-delete) an asset group

Bulk toggle display-tag flag on asset groups

Create an email group (alert recipient list)

Update an email group (rename, change SMTP server, or replace recipients)

Archive (delete) an email group

Create a schedule group (policy window)

Update a schedule group

Archive (delete) a schedule group

Create a tag group (PLC controller-tag rollup)

Update a tag group

Archive (delete) a tag group

Create a rule group (IDS rule bundle)

Update a rule group

Archive (delete) a rule group

Create a port group (port-range bundle for PortPolicy)

Update a port group

Archive (delete) a port group

Create a protocol group (protocol+port-range bundle)

Update a protocol group

Archive (delete) a protocol group

Create a user group (ICP-level)

Edit a user group (ICP-level)

Archive (delete) a user group (ICP-level)

Reassign a user's group memberships (ICP-level)

Create a user group (Enterprise Manager level)

Edit a user group (Enterprise Manager level)

Archive (delete) a user group (Enterprise Manager level)

Reassign an EM user's group memberships

List detection policies

Query policy findings

List policy exclusions

List active scans

Get one active scan

Get past executions of an active scan

Define an active scan (NEW — does not run it)

Edit an active-scan definition

Enable an active scan

Disable an active scan

Delete an active-scan definition

Define a port-scan job (NEW — does not run it)

Edit a port-scan job

Define an SNMP scan job (NEW — does not run it)

Edit an SNMP scan job

Define a controller-discovery scan (NEW — does not run it)

Edit a controller-discovery scan job

Define an asset-discovery scan (NEW — does not run it)

Edit an asset-discovery scan job

Define an inactive-probing scan (NEW — does not run it)

Edit an inactive-probing scan job

Edit the subnets-discovery scan

List sensors

Check Tenable OT connection

Summarize the OT environment

List network segments and zones

Get communication paths for an asset

Query vulnerability findings

Query OT vulnerabilities

Get one vulnerability

Hide an OT asset (filter from default views)

Restore a hidden OT asset

Bulk-hide assets matching a filter

Bulk-restore assets matching a filter

Remove asset entries by IP address

Recalculate one asset's risk score

Recalculate risk across the deployment

Edit an OT asset's properties

Bulk-edit OT assets matching a filter

Reset one asset's operator-set metadata

Create a custom-field slot

Rename a custom-field slot

Delete a custom-field slot

Enable a detection policy

Disable a detection policy

Archive a detection policy

Bulk enable detection policies

Bulk disable detection policies

Bulk archive detection policies

Create activity exclusion

Create conversation exclusion

Delete policy exclusion

Resolve detection findings