SSyncDev

Nessus MCP Server

A Model Context Protocol (MCP) server for interacting with the Tenable Nessus vulnerability scanner. This server allows AI assistants to perform

Local serverstdioTypeScript

What is the Nessus MCP Server?

A Model Context Protocol (MCP) server for interacting with the Tenable Nessus vulnerability scanner. This server allows AI assistants to perform vulnerability

What it actually does

  • Vulnerability Scanning — Start and monitor vulnerability scans against specified targets
  • Scan Management — List, track, and retrieve results from vulnerability scans
  • Vulnerability Analysis — Search for and get detailed information about specific vulnerabilities
  • Mock Mode — Fully functional mock mode for testing without a Nessus API key

Configuration

  • Node.js 16 or higher - TypeScript (for development)

More MCP options

Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.

Maintainer setup documentation.

Recorded tools

Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.

ToolWhat it does
list_scan_templatesList available Nessus scan templates
start_scanStart a new vulnerability scan against a target
get_scan_statusCheck the status of a running scan
get_scan_resultsGet the results of a completed scan
list_scansList all scans and their status
get_vulnerability_detailsGet detailed information about a specific vulnerability
search_vulnerabilitiesSearch for vulnerabilities by keyword

How to install the Nessus MCP Server

{
  "mcpServers": {
    "nessus": {
      "command": "node",
      "args": [
        "/path/to/nessus-mcp-server/build/index.js"
      ],
      "env": {
        "NESSUS_URL": "https://your-nessus-instance:8834",
        "NESSUS_ACCESS_KEY": "YOUR_NESSUS_ACCESS_KEY",
        "NESSUS_SECRET_KEY": "YOUR_NESSUS_SECRET_KEY",
        "NESSUS_ALLOW_SELF_SIGNED": "false"
      }
    }
  }
}

From the project documentation. Replace placeholders and example paths before connecting.

Configuration

  • Node.js 16 or higher - TypeScript (for development)
VariableDescriptionRequired
NESSUS_URLDeclared in the maintainer’s client configuration.Check documentation
NESSUS_ACCESS_KEYDeclared in the maintainer’s client configuration.Check documentation
NESSUS_SECRET_KEYDeclared in the maintainer’s client configuration.Check documentation
NESSUS_ALLOW_SELF_SIGNEDDeclared in the maintainer’s client configuration.Check documentation

Example prompts to try

  • “Use Nessus to list scan templates.”
  • “Use Nessus to start scan.”
  • “Use Nessus to get scan status.”

Frequently asked questions

A Model Context Protocol (MCP) server for interacting with the Tenable Nessus vulnerability scanner. This server allows AI assistants to perform vulnerability Confirm the tools offered by your installed version in the connected client. Tool availability and permissions depend on the server and account configuration.

Alternatives to the Nessus MCP Server

NVD Database

Queries the NIST National Vulnerability Database (NVD) via its API.

DatabasesPython★ 14

Cursor Trivy

Scans projects for security vulnerabilities and automatically updates vulnerable dependencies using Trivy.

Security & IdentityPython★ 10

3ilm-mcp

Search 1,032 verified smart contract vulnerability findings from Sherlock audits by pattern.

Security & Identity

A2adependencyinspector-mcp

Remote MCP for A2A dependency inspector MCP, structured receipts, audit logs, and reviewer-ready evi

Security & IdentityRemote

A2areplayreceipt-mcp

Remote MCP for A2A failure replay MCP, structured receipts, audit logs, and reviewer-ready evidence.

Security & IdentityRemote

Abp Io MCP

A comprehensive Model Context Protocol (MCP) server for ABP.IO framework with 48+ tools for application development, UI generation, and management

Developer ToolsTypeScript