Provides tools for investigating CVEs, assessing risk, checking compliance, planning remediation, and generating reports on the Qualys vulnerability management platform.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type @ followed by the MCP server name and your instructions, e.g., "@Qualys MCP Server investigate CVE-2024-1234"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
A TypeScript MCP server that gives AI assistants (Claude, GitHub Copilot, Cursor) access to the Qualys platform. Investigate CVEs, assess risk, check compliance, plan remediation, and generate reports — all through natural language.
Category | What the AI Can Do |
Investigation | Deep-dive any CVE, threat actor, host, IP, or free-text topic |
Risk Assessment | Cross-domain risk: VMs, cloud (AWS/Azure/GCP), web apps, certificates |
Compliance | PCI, HIPAA, CIS, NIST, SOC2 posture checking |
Remediation | Patch priorities, deployment status, mitigation coverage |
Security Overview | Daily/weekly/monthly security briefing |
Reports | Generate, list, download Qualys reports |
Related MCP server: DocSentinel
Package | Description |
Standalone MCP server (npm, CLI) | |
VS Code extension with auto-registration |
Install extension from visual studio marketplace
Configure settings: Cmd+, → search "Qualys MCP"
Set username, password, and POD
The server appears automatically in the MCP Servers panel
npx qualys-mcp-serverOr add to your MCP config:
{
"mcpServers": {
"qualys": {
"command": "npx",
"args": ["-y", "qualys-mcp-server"],
"env": {
"QUALYS_MCP_USERNAME": "your-username",
"QUALYS_MCP_PASSWORD": "your-password",
"QUALYS_MCP_POD": "US1"
}
}
}
}Tool | Description |
| Deep-dive CVE, host, IP, or threat actor |
| Cross-domain risk assessment |
| Compliance posture for PCI/HIPAA/CIS/NIST/SOC2 |
| Patch priorities and mitigation planning |
| Security briefing (daily/weekly/monthly) |
| Report management (list/generate/download/status) |
| View and clear API response cache |
pnpm install
pnpm run ci # typecheck + lint + format + test:coverage
pnpm run build # Build all packages
pnpm run package # Build VSIXMIT
This server cannot be deployed
MCP server unifying ERPs, CRMs, APIs and knowledge base for Claude, ChatGPT and Gemini.
MCP server for Pentest-Tools.com: run scans, manage findings and reports via your preffered LLM.
AI-powered incident management and server monitoring via MCP.
MCP server enabling AI agents to manage Bitrix24 features via standardized protocol
