Which integrations are available for this server?

Provides tools for investigating CVEs, assessing risk, checking compliance, planning remediation, and generating reports on the Qualys vulnerability management platform.

How do I use Qualys MCP Server?

1. Click on "Install Server". 2. Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state. 3. In the chat, type @ followed by the MCP server name and your instructions, e.g., "@Qualys MCP Server investigate CVE-2024-1234" That's it! The server will respond to your query, and you can continue using it as needed. Here is a step-by-step guide with screenshots.

Qualys MCP Server

by bhayanak

Overview Schema Related Servers Score Discussions

TypeScript

Remote

Overview

A TypeScript MCP server that gives AI assistants (Claude, GitHub Copilot, Cursor) access to the Qualys platform. Investigate CVEs, assess risk, check compliance, plan remediation, and generate reports — all through natural language.

Capabilities

Category	What the AI Can Do
Investigation	Deep-dive any CVE, threat actor, host, IP, or free-text topic
Risk Assessment	Cross-domain risk: VMs, cloud (AWS/Azure/GCP), web apps, certificates
Compliance	PCI, HIPAA, CIS, NIST, SOC2 posture checking
Remediation	Patch priorities, deployment status, mitigation coverage
Security Overview	Daily/weekly/monthly security briefing
Reports	Generate, list, download Qualys reports

Related MCP server: DocSentinel

Packages

Package	Description
`qualys-mcp-server`	Standalone MCP server (npm, CLI)
`qualys-mcp-vscode-extension`	VS Code extension with auto-registration

Quick Start

Option 1: VS Code Extension

Install extension from visual studio marketplace
Configure settings: Cmd+, → search "Qualys MCP"
Set username, password, and POD
The server appears automatically in the MCP Servers panel

Option 2: Standalone (Claude Desktop, Cursor)

npx qualys-mcp-server

Or add to your MCP config:

{
  "mcpServers": {
    "qualys": {
      "command": "npx",
      "args": ["-y", "qualys-mcp-server"],
      "env": {
        "QUALYS_MCP_USERNAME": "your-username",
        "QUALYS_MCP_PASSWORD": "your-password",
        "QUALYS_MCP_POD": "US1"
      }
    }
  }
}

Tools

Tool	Description
`qualys_investigate`	Deep-dive CVE, host, IP, or threat actor
`qualys_assess_risk`	Cross-domain risk assessment
`qualys_check_compliance`	Compliance posture for PCI/HIPAA/CIS/NIST/SOC2
`qualys_plan_remediation`	Patch priorities and mitigation planning
`qualys_security_overview`	Security briefing (daily/weekly/monthly)
`qualys_reports`	Report management (list/generate/download/status)
`qualys_cache_status`	View and clear API response cache

Development

pnpm install
pnpm run ci       # typecheck + lint + format + test:coverage
pnpm run build    # Build all packages
pnpm run package  # Build VSIX

License

MIT

This server cannot be installed

license - permissive license

quality - not tested

maintenance

How are these scores calculated?

Maintenance

–Maintainers

–Response time

–Release cycle

–Releases (12mo)

Commit activity

Resources

Need Help?

Related Servers

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Servers

DevSecOps MCP Server
Testing & QA Tools Security Developer Tools
JesusDavidQuarksoft
A
license
B
quality
D
maintenance
An MCP server that integrates SAST, DAST, and SCA security tools to enable AI-driven vulnerability scanning and automated security reporting. It allows AI assistants to execute and analyze results from tools like Semgrep, OWASP ZAP, and Trivy within a DevSecOps workflow.
Last updated 2026-02-04
6
MIT
DocSentinel
RAG Systems Security Autonomous Agents
arthurpanhku
A
license
B
quality
B
maintenance
MCP server for AI agent for cybersecurity: automate assessment of documents, questionnaires & reports. Multi-format parsing, RAG knowledge base,Risks, compliance gaps, remediations.
Last updated 2026-07-24
2
98
MIT
VulnMCP
Security AI & Machine Learning Search
vulnerability-lookup
A
license
A
quality
B
maintenance
An MCP server for vulnerability management that provides tools for automated severity and CWE classification using NLP models. It enables AI agents to query the Vulnerability Lookup API for detailed CVE information and search for security vulnerabilities across various sources.
Last updated 2026-07-02
16
33
AGPL 3.0
nessus_mcp_server
Penetration Testing Security
chanakayaa
A
license
-
quality
D
maintenance
Enables AI assistants to manage Nessus vulnerability scans, analyze results, and generate reports through the MCP protocol.
Last updated 2026-02-08
2
MIT

View all related MCP servers

Related MCP Connectors

mcp-server
MCP server for Pentest-Tools.com: run scans, manage findings and reports via your preffered LLM.
MCP Fortress
Security scanner for MCP servers. Detect vulnerabilities, prompt injection, and tool poisoning.
SmartBear MCP
MCP server for AI access to SmartBear tools, including BugSnag, Reflect, Swagger, PactFlow, QTM4J.

View all MCP Connectors

Latest Blog Posts

Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)
By Om-Shree-0709 on July 25, 2026.
mcp
Agent Identity
OAuth 2.1
Your AI Chatbot Just Exposed Your CEO's Salary to an Intern
By Om-Shree-0709 on July 2, 2026.
Agent Identity
MCP Security
OAuth Delegation
Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)
By Om-Shree-0709 on June 30, 2026.
Agentic Ai
Prompt Injection
WebAssembly

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/bhayanak/qualys-mcp-server'

If you have feedback or need assistance with the MCP directory API, please join our Discord server