Skip to main content
Glama
aqamahn

Tenable OT Security MCP Server

by aqamahn

List network segments and zones

list_segments_and_zones

List OT segments and zones (VLAN, subnet, asset filters) to answer IEC 62443, NERC CIP, and NEI 08-09 compliance questions.

Instructions

Returns Tenable OT's segmentation: every segment (with VLAN, subnet, asset-type filter, system flag, archived flag) and every zone (a higher-level grouping of asset groups). Use this to answer compliance questions about the IEC 62443 Zone & Conduit model, NERC CIP Electronic Security Perimeters, or NEI 08-09 defense-in-depth.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault

No arguments

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault

No arguments

Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden of behavioral disclosure. It clearly states what the tool returns (every segment with all its fields and every zone with its definition). It also explains what a zone is, adding conceptual clarity. While it doesn't discuss pagination, performance, or side effects, this is a simple read-only list operation, and the description gives a complete picture of the output. The lack of explicit side-effect disclosure is acceptable given the read-only nature implied by 'Returns', but some detail on response scope or limitations could push it higher.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is extremely concise and well-structured. It is front-loaded with the primary action ('Returns Tenable OT's segmentation') followed by specific details about segments and zones, and then a clear use-case sentence. Every sentence earns its place: the first defines the output, the second describes the attributes, and the third provides actionable guidance. There is no redundancy or fluff.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's simplicity (no parameters) and the presence of an output schema, the description is complete. It covers what the tool returns (segments and zones with specific fields), what a zone represents, and when to use it (compliance questions). The compliance context adds valuable domain-specific guidance that an agent needs to select the right tool. Nothing critical is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

This tool has zero parameters, and the input schema is empty. The schema description coverage is trivially 100%. The description does not need to explain parameters since there are none. Per the rubric, a baseline of 4 is appropriate for zero-parameter tools, and the description does not miss any opportunity to add value here.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's purpose: to return Tenable OT's segmentation, specifically listing every segment with its attributes (VLAN, subnet, asset-type filter, system flag, archived flag) and every zone. The verb 'Returns' combined with the specific resource (segmentation) makes the action unambiguous. It also distinguishes itself from sibling tools like list_asset_groups and list_network_config by focusing on segments and zones as defined by the IEC 62443 model.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly identifies when to use this tool: 'Use this to answer compliance questions about the IEC 62443 Zone & Conduit model, NERC CIP Electronic Security Perimeters, or NEI 08-09 defense-in-depth.' This gives a clear context. However, it does not mention when not to use it or explicitly contrast with alternative list tools such as list_asset_groups or list_network_config, so it falls short of the highest bar.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Install Server

Other Tools

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/aqamahn/MCP-server-Tenable-OT-V2'

If you have feedback or need assistance with the MCP directory API, please join our Discord server