Nessus MCP Server
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| NESSUS_URL | No | The URL of the Nessus instance (e.g., https://your-nessus-instance:8834). Required for real mode. | |
| NESSUS_ACCESS_KEY | No | The Nessus API access key. Required for real mode. | |
| NESSUS_SECRET_KEY | No | The Nessus API secret key. Required for real mode. | |
| NESSUS_ALLOW_SELF_SIGNED | No | Set to 'true' to skip TLS certificate verification (for self-signed certificates). Default is 'false'. | false |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Server capabilities have not been inspected yet.
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| list_scan_templatesB | List available Nessus scan templates |
| start_scanC | Start a new vulnerability scan against a target |
| get_scan_statusC | Check the status of a running scan |
| get_scan_resultsC | Get the results of a completed scan |
| list_scansB | List all scans and their status |
| get_vulnerability_detailsC | Get detailed information about a specific vulnerability |
| search_vulnerabilitiesC | Search for vulnerabilities by keyword |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
TDQS
Scored across 7 tools
Every tool has a clearly distinct purpose with no ambiguity. For example, get_scan_results retrieves completed scan data, while get_scan_status checks ongoing scan progress, and list_scans provides an overview of all scans. The separation between vulnerability-focused tools (get_vulnerability_details, search_vulnerabilities) and scan-focused tools is also well-defined.
All tools follow a consistent verb_noun pattern using snake_case throughout. The naming convention is perfectly uniform with clear action-object pairs like get_scan_results, list_scans, start_scan, and search_vulnerabilities. There are no deviations in style or structure across the tool set.
With 7 tools, the count is well-scoped for a Nessus vulnerability scanning server. Each tool earns its place by covering essential operations such as scan management (start, list, check status), result retrieval, and vulnerability lookup, without being overly sparse or bloated.
The tool surface provides strong coverage for core vulnerability scanning workflows, including scan initiation, monitoring, result access, and vulnerability details. A minor gap exists in the lack of tools for modifying or deleting scans, which might limit full lifecycle management, but agents can still perform key operations effectively.