tie-mcp-server
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| TIE_API_KEY | Yes | Your TIE API key | |
| TIE_BASE_URL | Yes | Your TIE instance URL (e.g., https://customer.tenable.ad) | |
| TIE_ALLOWED_SAFETY | No | Comma-separated list of allowed safety tiers (read, write, destructive). Default: all tools. |
Capabilities
Features and capabilities supported by this server
| Capability | Details |
|---|---|
| tools | {} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| get_topologyA | Discover the Active Directory environment as a Forest -> Domain tree. Returns each infrastructure (forest) with its directories (domains) and their IDs, so you can obtain the infrastructureId / directoryId values required by other tools. This is the topology (containment) axis and is independent of profiles. Call this first when you do not already know the IDs of the forests or domains you need to query. |
| get_preferred_profileA | Return the user's preferred (default) profile — its id and name — from GET /api/preferences. TIE profiles are configuration lenses, not containers; one is marked preferred. Use this profileId by default in profile-scoped tools unless the user explicitly names a different profile. Prevents querying the wrong profile and getting empty results. |
| get_aboutC | Get about singleton. |
| list_ad_objectsC | Return the last state of every ad-object at the provided timestampBy default, the timestamp is now. Objects out of scope are included |
| get_ad_object_by_directoryC | Get ad-object instance by id. |
| get_ad_object_by_infrastructureC | Get ad-object instance by id. |
| get_ad_object_by_checkerA | Retrieve an AD object by id that have deviances for a specific profile and checker Note: profileId selects a configuration profile (a lens, not a container). If the user has not specified a profile, call get_preferred_profile (or get_preferences) and use preferredProfileId — do not assume profile 1. |
| get_ad_object_in_eventC | Get one ad-object by event and by id |
| get_ad_object_changesB | Get one ad-object changes between a given event and the event which precedes it |
| search_ad_objectsA | Search all AD objects having deviances by profile by checker Note: profileId selects a configuration profile (a lens, not a container). If the user has not specified a profile, call get_preferred_profile (or get_preferences) and use preferredProfileId — do not assume profile 1. |
| get_alertB | Get alert instance by id. |
| update_alertC | Update alert instance. |
| list_profile_alertsA | Retrieve all alert instances. Note: profileId selects a configuration profile (a lens, not a container). If the user has not specified a profile, call get_preferred_profile (or get_preferences) and use preferredProfileId — do not assume profile 1. |
| update_profile_alertsA | Update alerts for one profile Note: profileId selects a configuration profile (a lens, not a container). If the user has not specified a profile, call get_preferred_profile (or get_preferences) and use preferredProfileId — do not assume profile 1. |
| get_api_keyA | Get the API key of the current user |
| create_api_keyB | Create or renew an API key for the current user |
| get_application_settingsB | Get the application settings |
| update_application_settingsC | Update the application settings |
| list_attacksA | Get all attacks Note: profileId selects a configuration profile (a lens, not a container). If the user has not specified a profile, call get_preferred_profile (or get_preferences) and use preferredProfileId — do not assume profile 1. |
| export_attacksA | Get all attacks in CSV rows format Note: profileId selects a configuration profile (a lens, not a container). If the user has not specified a profile, call get_preferred_profile (or get_preferences) and use preferredProfileId — do not assume profile 1. |
| list_attack_typesB | Get attack types |
| get_attack_type_configurationB | Get the attack type configuration |
| update_attack_type_configurationC | Update the attack type configuration |
| list_attack_type_optionsA | Get all the attack type options related to a profile and attack type. Note: profileId selects a configuration profile (a lens, not a container). If the user has not specified a profile, call get_preferred_profile (or get_preferences) and use preferredProfileId — do not assume profile 1. |
| create_attack_type_optionA | Create attack type options related to a profile and attack type. Note: profileId selects a configuration profile (a lens, not a container). If the user has not specified a profile, call get_preferred_profile (or get_preferences) and use preferredProfileId — do not assume profile 1. |
| list_categoriesB | Retrieve all category instances. |
| get_categoryB | Get category instance by id. |
| list_checkersA | Retrieve all checker instances. |
| get_checkerB | Get checker instance by id. |
| list_checker_optionsA | Get all the checker options related to a profile and checker. Note: profileId selects a configuration profile (a lens, not a container). If the user has not specified a profile, call get_preferred_profile (or get_preferences) and use preferredProfileId — do not assume profile 1. |
| create_checker_optionA | Create checker options related to a profile and checker. Note: profileId selects a configuration profile (a lens, not a container). If the user has not specified a profile, call get_preferred_profile (or get_preferences) and use preferredProfileId — do not assume profile 1. |
| get_cloud_statisticsC | Get user info needed to send cloud statistics. |
| list_dashboardsA | Retrieve all dashboard instances. |
| create_dashboardC | Create dashboard instance. |
| get_dashboardB | Get dashboard instance by id. |
| update_dashboardC | Update dashboard instance. |
| delete_dashboardA | Delete dashboard instance with it's associated widgets |
| list_changed_deviancesC | Get all deviances that has been created or resolved since an event |
| get_devianceB | Get ad-object-deviance-history instance by id. |
| export_checker_dataA | Get all ad objects of a deviance in CSV rows format Note: profileId selects a configuration profile (a lens, not a container). If the user has not specified a profile, call get_preferred_profile (or get_preferences) and use preferredProfileId — do not assume profile 1. |
| list_deviances_by_directoryC | Get all deviances for a directory. |
| get_deviance_by_directoryC | Get ad-object-deviance-history instance by id. |
| update_devianceC | Update ad-object-deviance-history instance. |
| list_deviances_by_directory_and_checkerA | Get all deviances related to a single directory and checker. Note: profileId selects a configuration profile (a lens, not a container). If the user has not specified a profile, call get_preferred_profile (or get_preferences) and use preferredProfileId — do not assume profile 1. |
| list_deviances_by_checkerA | Get all deviances by checker. Note: profileId selects a configuration profile (a lens, not a container). If the user has not specified a profile, call get_preferred_profile (or get_preferences) and use preferredProfileId — do not assume profile 1. |
| update_deviances_by_checkerB | Update instances matching a checkerId. Note: profileId selects a configuration profile (a lens, not a container). If the user has not specified a profile, call get_preferred_profile (or get_preferences) and use preferredProfileId — do not assume profile 1. |
| search_deviances_by_ad_objectB | Search all deviances by profile by checker by AD object Note: profileId selects a configuration profile (a lens, not a container). If the user has not specified a profile, call get_preferred_profile (or get_preferences) and use preferredProfileId — do not assume profile 1. |
| update_deviances_by_ad_objectA | Update the deviances emitted on a specific AD object and for a specific checker. Note: profileId selects a configuration profile (a lens, not a container). If the user has not specified a profile, call get_preferred_profile (or get_preferences) and use preferredProfileId — do not assume profile 1. |
| list_deviances_by_eventA | Get all deviances by eventId. Note: profileId selects a configuration profile (a lens, not a container). If the user has not specified a profile, call get_preferred_profile (or get_preferences) and use preferredProfileId — do not assume profile 1. |
| list_directoriesB | Retrieve all directory instances. |
| create_directoryC | Create directory instance. |
| get_directoryB | Get directory instance by id. |
| list_directories_by_infrastructureB | Get all directories for a given infrastructure |
| get_directory_by_infrastructureC | Get directory instance by id. |
| update_directoryC | Update directory instance. |
| delete_directoryC | Delete directory instance. |
| list_email_notifiersA | Retrieve all email-notifier instances. |
| create_email_notifierC | Create email-notifier instance. |
| get_email_notifierB | Get email-notifier instance by id. |
| update_email_notifierC | Update email-notifier instance. |
| delete_email_notifierB | Delete email-notifier instance. |
| test_email_notifierC | Send a test email notification by id |
| test_email_notifier_by_email_notifierC | Send a test email notification |
| get_eventB | Get event instance by id. |
| get_event_by_directoryC | Get event instance by id. |
| search_eventsD | Search events instances |
| list_infrastructuresB | Retrieve all infrastructure instances. |
| create_infrastructureC | Create infrastructure instance. |
| get_infrastructureA | Get infrastructure instance by id. |
| update_infrastructureC | Update infrastructure instance. |
| delete_infrastructureB | Delete infrastructure instance. |
| get_ldap_configurationB | Get ldap-configuration singleton. |
| update_ldap_configurationC | Update ldap-configuration singleton. |
| get_licenseC | Get license singleton. |
| update_licenseC | Create new license singleton |
| get_product_associationC | Get product association in the License |
| get_lockout_policyA | Get the lockout policy |
| update_lockout_policyB | Update the lockout policy |
| get_metricsA | Collect Eridanis and SQL Server health metrics. |
| get_preferencesB | Get a user's preferences |
| update_preferencesC | Update a user's preferences |
| list_profilesB | Retrieve all profile instances. |
| create_profileC | Create profile instance. |
| get_profileA | Get profile instance by id. |
| update_profileC | Update profile instance. |
| delete_profileC | Delete profile instance. |
| clone_profileB | Creates a new profile from another one |
| unstage_profileC | Unstages change of the related profile |
| commit_profileD | Commits change of the related profile |
| list_reasonsA | Retrieve all reason instances. |
| get_reasonB | Get reason instance by id. |
| list_reasons_by_checkerA | Retrieve all reason instances that have deviances for a specific profile and checker. Note: profileId selects a configuration profile (a lens, not a container). If the user has not specified a profile, call get_preferred_profile (or get_preferences) and use preferredProfileId — do not assume profile 1. |
| list_reasons_by_eventA | Retrieve all reason instances for which we have deviances for a specific profile, directory and event. Note: profileId selects a configuration profile (a lens, not a container). If the user has not specified a profile, call get_preferred_profile (or get_preferences) and use preferredProfileId — do not assume profile 1. |
| get_relay_linking_keyA | Get current linking key for relay setup |
| get_report_access_tokenA | Returns the authentication token required to pull data from Tenable Cloud |
| refresh_report_access_tokenB | Updates the authentication token required to pull data from Tenable Cloud |
| list_rolesA | Retrieve all role instances. |
| create_roleC | Create role instance. |
| get_user_creation_defaultsB | Return the default roles for user creation |
| get_roleC | Get role instance by id. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
Latest Blog Posts
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/taherkaraki/tie-mcp-server'
If you have feedback or need assistance with the MCP directory API, please join our Discord server