Skip to main content
Glama
Cyreslab-AI

Nessus MCP Server

Server Configuration

Describes the environment variables required to run the server.

NameRequiredDescriptionDefault
NESSUS_URLNoThe URL of the Nessus instance (e.g., https://your-nessus-instance:8834). Required for real mode.
NESSUS_ACCESS_KEYNoThe Nessus API access key. Required for real mode.
NESSUS_SECRET_KEYNoThe Nessus API secret key. Required for real mode.
NESSUS_ALLOW_SELF_SIGNEDNoSet to 'true' to skip TLS certificate verification (for self-signed certificates). Default is 'false'.false

Instructions

Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.

This server publishes no instructions, or was last inspected before Glama recorded them.

Capabilities

Server capabilities have not been inspected yet.

Tools

Functions exposed to the LLM to take actions

NameDescription
list_scan_templatesB

List available Nessus scan templates

start_scanC

Start a new vulnerability scan against a target

get_scan_statusC

Check the status of a running scan

get_scan_resultsC

Get the results of a completed scan

list_scansB

List all scans and their status

get_vulnerability_detailsC

Get detailed information about a specific vulnerability

search_vulnerabilitiesC

Search for vulnerabilities by keyword

Prompts

Interactive templates invoked by user choice

NameDescription

No prompts

Resources

Contextual data attached and managed by the client

NameDescription

No resources

TDQS

B3.4/5.0

Scored across 7 tools

Disambiguation5/5

Every tool has a clearly distinct purpose with no ambiguity. For example, get_scan_results retrieves completed scan data, while get_scan_status checks ongoing scan progress, and list_scans provides an overview of all scans. The separation between vulnerability-focused tools (get_vulnerability_details, search_vulnerabilities) and scan-focused tools is also well-defined.

Naming Consistency5/5

All tools follow a consistent verb_noun pattern using snake_case throughout. The naming convention is perfectly uniform with clear action-object pairs like get_scan_results, list_scans, start_scan, and search_vulnerabilities. There are no deviations in style or structure across the tool set.

Tool Count5/5

With 7 tools, the count is well-scoped for a Nessus vulnerability scanning server. Each tool earns its place by covering essential operations such as scan management (start, list, check status), result retrieval, and vulnerability lookup, without being overly sparse or bloated.

Completeness4/5

The tool surface provides strong coverage for core vulnerability scanning workflows, including scan initiation, monitoring, result access, and vulnerability details. A minor gap exists in the lack of tools for modifying or deleting scans, which might limit full lifecycle management, but agents can still perform key operations effectively.

Maintenance

ActivityMaintained
ResponsivenessNo issues