Telivy MCP Server
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| AUTH_MODE | No | Authentication mode. | env |
| LOG_LEVEL | No | Logging level. | info |
| MCP_TRANSPORT | No | Transport protocol. | stdio |
| TELIVY_API_KEY | No | API key issued by Telivy. | |
| CONDUIT_S2S_SECRET | No | Secret for Conduit sidecar auth. |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {} |
| logging | {} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| telivy_list_external_scansB | List external (surface) scans - lightweight, agentless domain/email security assessments. |
| telivy_get_external_scanC | Get a single external scan by assessment ID. |
| telivy_list_external_scan_findingsC | List the findings for an external scan. |
| telivy_get_external_scan_findingB | Get details for a single external scan finding by slug. |
| telivy_get_breach_dataB | Get breach records surfaced for an external scan's domain(s) (dark-web/credential exposure). |
| telivy_list_risk_assessmentsB | List risk assessments - deep-scan (agent-based) fleet security assessments, optionally filtered by scan status. |
| telivy_get_risk_assessmentB | Get a single risk assessment by ID. |
| telivy_list_risk_assessment_devicesA | List all deep-scan devices for a risk assessment. |
| telivy_get_risk_assessment_deviceB | Get a single deep-scan device by ID. |
| telivy_get_risk_assessment_scan_statusA | Get scan completion status across all devices in a risk assessment. |
| telivy_list_m365_usersA | Get Microsoft 365 user accounts with login status and MFA info for a risk assessment. |
| telivy_list_gws_usersA | Get Google Workspace user accounts with login and 2SV status for a risk assessment. |
| telivy_get_pii_summaryB | Get the PII exposure summary across all devices in a risk assessment. |
| telivy_get_agent_versionsA | Get the latest Telivy deep-scan agent versions available (Windows and Mac). |
| telivy_get_findingA | Get top-level finding details by slug (e.g. TYPO_SQUATTING, PERSONAL_EMAILS). |
| telivy_get_risk_progressA | Get a risk progress report comparing two scan timestamp groups for an assessment (new/resolved/regressed/open findings). |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
TDQS
Scored across 16 tools
Most tools map cleanly to distinct resources and actions, with clear list/get pairs for scans, assessments, findings, and devices. The only notable ambiguity is between get_external_scan_finding and generic get_finding, since both retrieve finding-like details by slug.
All tools follow a consistent telivy_<verb>_<object> snake_case pattern, using only list and get verbs. Minor semantic differences like get_breach_data or get_risk_progress still fit the established naming convention.
At 16 tools, the set is one above the ideal range but each tool represents a distinct resource view or operation needed for the two main assessment workflows. It feels slightly heavy rather than bloated.
The external scan and risk assessment surfaces are well covered, including findings, devices, breach data, user accounts, PII, progress, and agent versions. Gaps include no direct listing of risk-assessment findings or a way to enumerate finding slugs without prior knowledge.