loading…
Tools for scanning assets and workloads, retrieving vulnerability findings, CVEs, severity, and affected resources. Support prioritization, remediation, exceptions, and verification of fixes.
/api/mcp/srv-vulnerability-managementMCP enable + token are only for calling from an external client — the playground below needs neither.
Create vulnerability exception with business justification and expiration date for risk acceptance
{
"type": "object",
"required": [
"vulnerability_id",
"asset_ids",
"exception_type",
"justification"
],
"properties": {
"asset_ids": {
"type": "array",
"items": {
"type": "string"
}
},
"expires_at": {
"type": "string",
"format": "date"
},
"approved_by": {
"type": "string"
},
"justification": {
"type": "string"
},
"exception_type": {
"enum": [
"risk_accepted",
"false_positive",
"compensating_control"
],
"type": "string"
},
"vulnerability_id": {
"type": "string"
},
"compensating_controls": {
"type": "array",
"items": {
"type": "string"
}
}
}
}Generate vulnerability assessment reports with executive summaries, trend analysis, SLA metrics, and compliance mappings
{
"type": "object",
"required": [
"report_type"
],
"properties": {
"format": {
"enum": [
"pdf",
"xlsx",
"json"
],
"type": "string",
"default": "pdf"
},
"end_date": {
"type": "string",
"format": "date"
},
"start_date": {
"type": "string",
"format": "date"
},
"time_range": {
"enum": [
"7d",
"30d",
"90d",
"1y",
"custom"
],
"type": "string"
},
"report_type": {
"enum": [
"Executive Summary",
"Technical Detail",
"Compliance",
"Trend Analysis",
"SLA Dashboard"
],
"type": "string"
},
"asset_groups": {
"type": "array",
"items": {
"type": "string"
}
},
"include_charts": {
"type": "boolean",
"default": true
},
"severity_filter": {
"type": "array",
"items": {
"enum": [
"Critical",
"High",
"Medium",
"Low"
],
"type": "string"
}
}
}
}Generate executive risk reports with SLA metrics, trending analysis, and compliance status
{
"type": "object",
"required": [
"report_type"
],
"properties": {
"format": {
"enum": [
"json",
"pdf",
"csv"
],
"type": "string",
"default": "json"
},
"time_range": {
"enum": [
"7d",
"30d",
"90d",
"1y"
],
"type": "string"
},
"report_type": {
"enum": [
"executive_summary",
"sla_compliance",
"trend_analysis",
"asset_inventory"
],
"type": "string"
},
"asset_groups": {
"type": "array",
"items": {
"type": "string"
}
},
"include_charts": {
"type": "boolean",
"default": true
}
}
}Retrieve comprehensive asset details including installed software, vulnerability summary, scan history, and configuration details
{
"type": "object",
"required": [
"asset_id"
],
"properties": {
"asset_id": {
"type": "string"
},
"include_software": {
"type": "boolean",
"default": false
},
"include_scan_history": {
"type": "boolean",
"default": false
},
"include_vulnerabilities": {
"type": "boolean",
"default": true
}
}
}Get all vulnerabilities for a specific asset with scan history and patch status
{
"type": "object",
"required": [
"asset_id"
],
"properties": {
"status": {
"type": "array",
"items": {
"enum": [
"open",
"in_progress",
"resolved",
"false_positive",
"risk_accepted"
],
"type": "string"
}
},
"asset_id": {
"type": "string"
},
"severity": {
"type": "array",
"items": {
"enum": [
"critical",
"high",
"medium",
"low",
"informational"
],
"type": "string"
}
},
"include_scan_history": {
"type": "boolean",
"default": false
}
}
}Retrieve vulnerability scan results with newly discovered vulnerabilities and scan statistics
{
"type": "object",
"required": [
"scan_id"
],
"properties": {
"limit": {
"type": "integer",
"default": 100
},
"status": {
"type": "array",
"items": {
"enum": [
"running",
"completed",
"failed",
"cancelled"
],
"type": "string"
}
},
"scan_id": {
"type": "string"
},
"include_raw_output": {
"type": "boolean",
"default": false
}
}
}Retrieve detailed vulnerability information including CVSS metrics, affected assets, and remediation guidance
{
"type": "object",
"required": [
"vulnerability_id"
],
"properties": {
"include_assets": {
"type": "boolean",
"default": true
},
"include_exploits": {
"type": "boolean",
"default": true
},
"vulnerability_id": {
"type": "string"
}
}
}Launch vulnerability scans against specified assets or asset groups with configurable scan profiles and scheduling options
{
"type": "object",
"required": [
"scan_name"
],
"properties": {
"asset_ids": {
"type": "array",
"items": {
"type": "string"
}
},
"scan_name": {
"type": "string"
},
"recurrence": {
"enum": [
"daily",
"weekly",
"monthly"
],
"type": "string"
},
"credentials": {
"type": "array",
"items": {
"type": "string"
}
},
"asset_groups": {
"type": "array",
"items": {
"type": "string"
}
},
"scan_options": {
"type": "object",
"properties": {
"scan_intensity": {
"enum": [
"light",
"normal",
"aggressive"
],
"type": "string"
},
"safe_checks_only": {
"type": "boolean",
"default": true
}
}
},
"scan_profile": {
"enum": [
"Full",
"Quick",
"Compliance",
"Web Application",
"Database"
],
"type": "string"
},
"schedule_type": {
"enum": [
"immediate",
"scheduled",
"recurring"
],
"type": "string"
},
"scheduled_time": {
"type": "string",
"format": "date-time"
}
}
}List assets with vulnerability counts, filtering by asset groups, operating systems, and criticality levels
{
"type": "object",
"required": [],
"properties": {
"limit": {
"type": "integer",
"default": 100,
"maximum": 1000
},
"sort_by": {
"enum": [
"hostname",
"last_scan",
"vuln_count",
"risk_score"
],
"type": "string",
"default": "risk_score"
},
"asset_group": {
"type": "string"
},
"criticality": {
"type": "array",
"items": {
"enum": [
"critical",
"high",
"medium",
"low"
],
"type": "string"
}
},
"operating_system": {
"type": "array",
"items": {
"enum": [
"windows",
"linux",
"macos",
"ios",
"android",
"other"
],
"type": "string"
}
},
"has_vulnerabilities": {
"type": "boolean"
}
}
}Initiate vulnerability scans on specified assets or asset groups with scan profile configuration
{
"type": "object",
"required": [
"scan_profile"
],
"properties": {
"schedule": {
"enum": [
"immediate",
"daily",
"weekly",
"monthly"
],
"type": "string"
},
"asset_ids": {
"type": "array",
"items": {
"type": "string"
}
},
"scan_name": {
"type": "string"
},
"asset_groups": {
"type": "array",
"items": {
"type": "string"
}
},
"scan_profile": {
"enum": [
"full",
"quick",
"compliance",
"web_app",
"database"
],
"type": "string"
},
"notify_on_completion": {
"type": "boolean",
"default": true
}
}
}Search vulnerabilities across assets using CVE identifiers, CVSS scores, asset filters, and vulnerability status
{
"type": "object",
"required": [],
"properties": {
"limit": {
"type": "integer",
"default": 100,
"maximum": 1000
},
"query": {
"type": "string",
"description": "Free text search across CVE descriptions and titles"
},
"offset": {
"type": "integer",
"default": 0
},
"status": {
"type": "array",
"items": {
"enum": [
"open",
"in_progress",
"resolved",
"false_positive",
"risk_accepted"
],
"type": "string"
}
},
"cve_ids": {
"type": "array",
"items": {
"type": "string",
"pattern": "^CVE-\\d{4}-\\d{4,}$"
}
},
"cvss_max": {
"type": "number",
"maximum": 10,
"minimum": 0
},
"cvss_min": {
"type": "number",
"maximum": 10,
"minimum": 0
},
"severity": {
"type": "array",
"items": {
"enum": [
"critical",
"high",
"medium",
"low",
"informational"
],
"type": "string"
}
},
"asset_tags": {
"type": "array",
"items": {
"type": "string"
}
}
}
}Change vulnerability status and assign to security analysts for remediation tracking
{
"type": "object",
"required": [
"vulnerability_id",
"asset_id",
"status"
],
"properties": {
"status": {
"enum": [
"open",
"in_progress",
"resolved",
"false_positive",
"risk_accepted"
],
"type": "string"
},
"asset_id": {
"type": "string"
},
"due_date": {
"type": "string",
"format": "date"
},
"priority": {
"enum": [
"urgent",
"high",
"medium",
"low"
],
"type": "string"
},
"assigned_to": {
"type": "string"
},
"justification": {
"type": "string"
},
"vulnerability_id": {
"type": "string"
}
}
}