de en es ja ko ru zh

tanium-gateway-mcp

Name: tanium-gateway-mcp
Author: do345

by do345

Overview Schema Related Servers Score Discussions

TypeScript

Local

Tanium Gateway MCP

这是一个将 Tanium Gateway GraphQL API 暴露为 Model Context Protocol (MCP) 服务器的 Node.js 项目。您可以在 Claude Desktop、Cursor、VS Code、Gemini CLI 等 MCP Host 中，通过自然语言查询 Tanium 资产、漏洞、补丁和部署信息。

功能概览

MCP 功能	内容
Tools	8 个模块，约 20 个 Tool（Asset、Comply、Deploy、Discover、Integrity Monitor、Patch、Reporting、Threat Response）
Resources	FieldFilter 语法、Tool 目录、已知限制（静态文档）
Prompts	每周漏洞报告、补丁合规快照、资产分类报告

服务器使用 stdio 传输。LLM 通过 MCP 调用 Tool，服务器代为请求 Tanium Gateway GraphQL。

MCP Host (Claude / Cursor / Gemini …)
        │  MCP (stdio)
        ▼
tanium-gateway-mcp
        │  GraphQL (session 헤더)
        ▼
Tanium Gateway (`/plugin/products/gateway/graphql`)

Related MCP server: Purple AI MCP Server

要求

Node.js 18 或更高版本（ES2022 / ESM）
Tanium 环境中的 Gateway GraphQL 端点
API 令牌（通过 session 标头传递）

安装

git clone <이 저장소 URL>
cd tanium-gateway-mcp_dev   # 또는 클론한 디렉터리 이름
npm install

环境变量

在项目根目录创建 .env 文件。请勿提交令牌。 .gitignore 中已包含 .env。

TANIUM_BASE_URL=https://your-tanium-instance.example.com
TANIUM_GRAPHQL_PATH=/plugin/products/gateway/graphql
TANIUM_API_TOKEN=your-api-token

变量	必填	说明
`TANIUM_BASE_URL`	是	Tanium 实例基础 URL
`TANIUM_API_TOKEN`	是	Gateway API 令牌
`TANIUM_GRAPHQL_PATH`	否	默认值 `/plugin/products/gateway/graphql`
`NODE_TLS_REJECT_UNAUTHORIZED`	否	设为 `0` 时禁用 TLS 验证。仅限开发/测试

根据内部版本的不同，认证标头名称可能不是 session。如果出现 401，请检查 src/tanium-client.ts。

构建与运行

npm run build          # TypeScript → dist/
node dist/index.js     # stdio MCP 서버 (Host가 spawn하는 방식과 동일)

开发时如需直接运行 TypeScript：

npm run dev

如需通过 GUI 查看 Tool 列表：

npm run inspect

（使用 @modelcontextprotocol/inspector）

MCP Host 配置示例（Cursor）

~/.cursor/mcp.json 或项目 .cursor/mcp.json：

{
  "mcpServers": {
    "tanium-gateway": {
      "command": "node",
      "args": ["/절대경로/tanium-gateway-mcp_dev/dist/index.js"],
      "env": {
        "TANIUM_BASE_URL": "https://your-tanium-instance.example.com",
        "TANIUM_GRAPHQL_PATH": "/plugin/products/gateway/graphql",
        "TANIUM_API_TOKEN": "your-api-token"
      }
    }
  }
}

配置后请先执行一次 npm run build，然后在 Cursor 中重新加载 MCP 服务器。

Gemini CLI、VS Code Copilot 等其他 Host 的集成方式，请参考 docs/Gemini _MCP _Host _연동 _가이드.md。

Tool 列表

Asset

Tool	说明
`get_all_assets`	全部资产（操作系统、处理器、是否虚拟化等）
`get_asset_product_endpoints`	按厂商/产品/版本筛选已安装资产
`get_installed_applications`	已安装/正在运行的应用程序传感器

Comply

Tool	说明
`get_compliance_findings`	策略/标准违规 findings
`get_cve_findings`	全部 CVE findings
`get_filtered_cve_findings`	按严重程度、CISA KEV、日期等筛选

Deploy

Tool	说明
`get_deploy_packages`	软件包目录
`get_deployment_status`	部署进度状态
`deploy_package_to_group`	向组部署软件包（写入操作，视环境可能受限）

Discover

Tool	说明
`get_discover_interfaces`	Discover 接口（资产）列表
`get_unmanaged_interfaces`	仅未管理资产
`get_discover_labels`	按标签统计已管理/未管理资产

Integrity Monitor

Tool	说明
`get_integrity_monitor_status`	IM 部署状态
`get_integrity_monitor_monitors`	监视器（扫描设置）
`get_integrity_monitor_watchlists`	监视列表（监视路径）

Patch

Tool	说明
`get_patch_definitions`	基于 CVE 的补丁目录
`get_patch_deployment`	特定部署详情
`get_patch_applicability`	按计算机组筛选适用补丁

Reporting

Tool	说明
`get_reports`	已保存报告列表
`get_report_result_data`	报告结果数据

Threat Response

Tool	说明
`get_endpoint_threat_alerts`	端点威胁警报
`resolve_threat_alert`	处理警报（写入操作）

列表型查询使用 Tanium Gateway 通用 FieldFilter（path / op / value / any / filters）。语法也包含在 MCP Resource tanium://docs/field-filter-syntax 中。

Prompts

Prompt	用途
`weekly_vuln_report`	最近 N 天 Critical/CISA KEV CVE 摘要
`patch_compliance_snapshot`	合规 Pass/Fail 及违规分组
`asset_classification_report`	资产分类 + Discover 管理比例

项目结构

src/
  index.ts                 # MCP 서버 엔트리 (stdio)
  tanium-client.ts         # GraphQL 클라이언트
  resources.ts             # MCP Resources
  prompts.ts               # MCP Prompts
  tools/                   # 모듈별 Tool
    asset.ts
    comply.ts
    deploy.ts
    discover.ts
    integrityMonitor.ts
    patch.ts
    reporting.ts
    threatResponse.ts
docs/
  Tanium_Gateway_MCP_구축_가이드.md

上传到 GitHub 之前

请勿提交 .env。（已在 .gitignore 中）
如果 mcp.json、.cursor/mcp.json 中包含真实令牌，请勿放入仓库。 示例中只使用占位符。
不提交 dist/ 和 node_modules/。克隆后通过 npm install 和 npm run build 生成。

已知限制

以下领域目前无法通过 Tool 查询。详情请参考 Resource tanium://docs/known-limitations。

资产生命周期、EOL 预计日期、自定义重要性等级
补丁 SLA、审批工作流、自动回滚
Self Service Portal、MDM、Disk Encryption 等其他模块全局

许可证

如果此仓库中没有许可证文件，建议在上传时明确使用条款。

Install Server

license - not found

quality

maintenance

How are these scores calculated?

Maintenance

–Maintainers

–Response time

–Release cycle

–Releases (12mo)

Commit activity

Resources

GitHub Repository

Need Help?

Related Servers

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Tools

View all tools

Related MCP Servers

ZeroPath MCP Serverofficial
Security Developer Tools Code Analysis
ZeroPathAI
A
license
B
quality
D
maintenance
Allows developers to query security findings (SAST issues, secrets, patches) using natural language within AI-assisted tools like Claude Desktop, Cursor, and other MCP-compatible environments.
Updated 2 months ago (2026-07-08 20:34 UTC)
17
9
MIT
Purple AI MCP Serverofficial
Security AI & Machine Learning
Sentinel-One
A
license
A
quality
B
maintenance
Enables MCP clients to interact with SentinelOne's cybersecurity platform for security analysis, threat investigation, and asset management through natural language queries. Provides read-only access to alerts, vulnerabilities, misconfigurations, and inventory data.
Updated 2 months ago (2026-07-01 16:49 UTC)
33
90
MIT
unifi-mcp
Networking & Infrastructure Monitoring
yo61
A
license
A
quality
B
maintenance
Enables querying UniFi network devices and data using natural language through MCP clients like Claude Desktop.
Updated 2 days ago (2026-08-23 23:09 UTC)
4
53
1
MIT
tenable-mcp
Security Penetration Testing
nguyenthdat
A
license
A
quality
C
maintenance
Exposes Tenable security operations as MCP tools for AI-powered security workflows, enabling asset, vulnerability, scan, plugin, and tag management via natural language.
Updated 2 months ago (2026-07-09 08:11 UTC)
17
MIT

View all related MCP servers

Related MCP Connectors

Microsoft MCP Server for Enterprise
Official Microsoft MCP Server to query Microsoft Entra data using natural language
alex-llm-attack-mcp-server
Query and retrieve information about various adversarial tactics and techniques used in cyber atta…
Steep
Query metrics, targets, entities, and team data in your Steep workspace via MCP.

View all MCP Connectors

Latest Blog Posts

Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)
By Om-Shree-0709 on July 25, 2026.
mcp
Agent Identity
OAuth 2.1
Your AI Chatbot Just Exposed Your CEO's Salary to an Intern
By Om-Shree-0709 on July 2, 2026.
Agent Identity
MCP Security
OAuth Delegation
Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)
By Om-Shree-0709 on June 30, 2026.
Agentic Ai
Prompt Injection
WebAssembly

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/do345/Tanium-Gateway-MCP'

If you have feedback or need assistance with the MCP directory API, please join our Discord server