# Tenable.sc MCP Server

> Production MCP bridge to Tenable Security Center with intelligent tools for vulnerability management and asset discovery

- Type: MCP server
- Author: Ahmad Jaber (ABMJ)
- License: GPL-3.0-only
- Trust tier: contributed (passed automated validation and a baseline maintainer review)
- Source repository: https://github.com/ABMJ/tenable-sc-mcp-server
- Repo state: not archived
- Last push: 2026-06-24T12:50:11Z
- Stars: 8 (a popularity signal, not a safety signal)
- Forks: 0 (a popularity signal, not a safety signal)
- Open issues: 0
- Language: Python
- Health checked at: 2026-11-05T20:35:15.821Z
- Integrations: Tenable
- Domains: platform-operations, vulnerability-management
- Tags: security, vulnerability-management, tenable, security-center, vulnerability-scanning, t.sc, t.sc+, tenable-security-center-plus-mcp
- Date added: 2026-06-19
- Transport: both
- Runtime: python
- Auth method: none
- Compatible clients: Claude Desktop, Claude Code
- Tools:
  - `tsc_catalog`: Browse 100+ available Tenable.sc resources
  - `tsc_current_user`: Verify API user identity and permissions
  - `tsc_resource_action`: Unified CRUD interface (list, get, create, update, delete)
  - `tsc_request`: Direct access to any Tenable.sc endpoint
  - `tsc_analyze`: Run analysis queries with caching
  - `tsc_download`: Binary/text download helper
  - `tsc_upload_file`: Multipart file upload helper
  - `tsc_cache_stats`: View cache performance metrics
  - `tsc_cache_clear`: Clear cache entries by pattern
  - `tsc_profile_ip_efficient`: Complete security profile for single IP
  - `tsc_list_vulns_by_ip_summary`: Quick vulnerability counts by severity
  - `tsc_list_vulns_by_ip_full`: Complete vulnerability records with metadata
  - `tsc_list_ips`: List all IPs with filtering
  - `tsc_list_vulns_by_cve`: Search for CVE across infrastructure
  - `tsc_resource_docs`: Returns docs metadata for Tenable.sc resource
- Resources:
  - `tenable-sc://catalog`: Human-readable API catalog
  - `tenable-sc://filters/format-reference`: Comprehensive filter format guide
  - `tenable-sc://filters/reference`: Auto-generated filter reference
- Listing page: https://exchange.tenable.com/mcp-servers/tenable-sc-mcp-server
- Source file: https://github.com/tenable/cyberagents-exchange/blob/main/mcp-servers/tenable-sc-mcp-server.md

The Tenable.sc MCP Server provides AI assistants with direct access to Tenable Security Center's comprehensive vulnerability management platform. It exposes 100+ Tenable.sc API resources through a production-ready Model Context Protocol interface.

## What it does

This MCP server enables AI-powered security workflows by providing:
- **Comprehensive vulnerability queries** - Search CVEs across your infrastructure, list vulnerabilities by IP/severity, and get detailed remediation guidance
- **Asset profiling and discovery** - Profile individual IPs with complete security context, discover assets by criticality, and map asset group membership
- **Intelligent caching** - Built-in Redis/in-memory caching reduces API load and enables 1000x faster repeated queries
- **Generic resource access** - Direct CRUD operations on all Tenable.sc resources (scans, policies, credentials, users, reports)
- **Analysis engine** - Run complex analysis queries with 55+ filters (VPR score, asset criticality, exploit availability, CVSS)

## How it works

The server acts as a stateless proxy between MCP clients and Tenable.sc's REST API. It authenticates using your Tenable.sc API keys and enforces all RBAC permissions from your Security Center instance. The architecture includes:
- Multi-tier caching (in-memory + Redis) with smart TTLs based on data volatility
- 15 core MCP tools including convenience tools for common security workflows
- 3 self-documenting resources with filter format references for complex queries
- Docker Compose deployment with Redis included for production use
- Support for both stdio (Claude Desktop) and HTTP (remote clients) transports

Built with Python 3.11+ and the official MCP SDK.

This is the Markdown version of one of 140 listings on CyberAgents Exchange. The same listing as JSON: https://exchange.tenable.com/api/mcp-servers/tenable-sc-mcp-server.json. The full index and how to read it: https://exchange.tenable.com/llms.txt