Skip to main content
Glama
Sign In
bhayanak

Qualys MCP Server

by bhayanak
OverviewSchemaSourceRelated ServersDiscussionsAdmin
TypeScript
Remote

Overview

A TypeScript MCP server that gives AI assistants (Claude, GitHub Copilot, Cursor) access to the Qualys platform. Investigate CVEs, assess risk, check compliance, plan remediation, and generate reports — all through natural language.

Capabilities

Category

What the AI Can Do

Investigation

Deep-dive any CVE, threat actor, host, IP, or free-text topic

Risk Assessment

Cross-domain risk: VMs, cloud (AWS/Azure/GCP), web apps, certificates

Compliance

PCI, HIPAA, CIS, NIST, SOC2 posture checking

Remediation

Patch priorities, deployment status, mitigation coverage

Security Overview

Daily/weekly/monthly security briefing

Reports

Generate, list, download Qualys reports

Related MCP server: DocSentinel

Packages

Package

Description

qualys-mcp-server

Standalone MCP server (npm, CLI)

qualys-mcp-vscode-extension

VS Code extension with auto-registration

Quick Start

Option 1: VS Code Extension

  1. Install extension from visual studio marketplace

  2. Configure settings: Cmd+, → search "Qualys MCP"

  3. Set username, password, and POD

  4. The server appears automatically in the MCP Servers panel

Option 2: Standalone (Claude Desktop, Cursor)

npx qualys-mcp-server

Or add to your MCP config:

{
  "mcpServers": {
    "qualys": {
      "command": "npx",
      "args": ["-y", "qualys-mcp-server"],
      "env": {
        "QUALYS_MCP_USERNAME": "your-username",
        "QUALYS_MCP_PASSWORD": "your-password",
        "QUALYS_MCP_POD": "US1"
      }
    }
  }
}

Tools

Tool

Description

qualys_investigate

Deep-dive CVE, host, IP, or threat actor

qualys_assess_risk

Cross-domain risk assessment

qualys_check_compliance

Compliance posture for PCI/HIPAA/CIS/NIST/SOC2

qualys_plan_remediation

Patch priorities and mitigation planning

qualys_security_overview

Security briefing (daily/weekly/monthly)

qualys_reports

Report management (list/generate/download/status)

qualys_cache_status

View and clear API response cache

Development

pnpm install
pnpm run ci       # typecheck + lint + format + test:coverage
pnpm run build    # Build all packages
pnpm run package  # Build VSIX

License

MIT

This server cannot be deployed

One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Maintenance

ActivityInactive
ResponsivenessNo issues

Resources

Related MCP Connectors

Related MCP Servers

  • DevSecOps MCP Server

    JesusDavidQuarksoft
    A
    license
    B
    quality
    D
    maintenance
    An MCP server that integrates SAST, DAST, and SCA security tools to enable AI-driven vulnerability scanning and automated security reporting. It allows AI assistants to execute and analyze results from tools like Semgrep, OWASP ZAP, and Trivy within a DevSecOps workflow.
    6
    MIT

  • DocSentinel

    arthurpanhku
    A
    license
    B
    quality
    A
    maintenance
    MCP server for AI agent for cybersecurity: automate assessment of documents, questionnaires & reports. Multi-format parsing, RAG knowledge base,Risks, compliance gaps, remediations.
    2
    88
    MIT

  • VulnMCP

    vulnerability-lookup
    A
    license
    A
    quality
    A
    maintenance
    An MCP server for vulnerability management that provides tools for automated severity and CWE classification using NLP models. It enables AI agents to query the Vulnerability Lookup API for detailed CVE information and search for security vulnerabilities across various sources.
    16
    43
    AGPL 3.0