Skip to content
actionlake
Start free

Connectors · Identity & security

Tenable Vulnerability Management MCP server for AI agents.

actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Tenable Vulnerability Management and the rest of your systems. It gives your agent 398 Tenable Vulnerability Management actions (211 reads, 131 writes and 56 that wait for a confirmation) and holds the Tenable Vulnerability Management credential itself, so the agent never does. It paces Tenable Vulnerability Management's limits and records every call.

Connect Tenable Vulnerability Management freeSee pricing

100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.

claude mcp add --transport http actionlake https://connect.actionlake.com/mcp
the first call
do {  action: "tenable_vulnerability_management.users.list_users",  intent: "check which Tenable Vulnerability Management account is connected"}# List users · read · 1 upstream call
  • 398actionsin one signed file
  • 211readlook, never change
  • 131writecreate and update
  • 56wait for a yesdestructive, confirmed first

Set up

Connect Tenable Vulnerability Management in three steps.

  1. 01

    Add actionlake to Claude.

    Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.

    https://connect.actionlake.com/mcp
  2. 02

    Connect Tenable Vulnerability Management.

    API key. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. actionlake stores what you paste write-only, sealed under your tenant's key.

    • access_keyTenable access key
    • secret_keyTenable secret key (the secretKey half generated alongside the access key)
    • regionYour Tenable Vulnerability Management region
    account { op: "connections.requirements", service: "tenable_vulnerability_management" }
# free: exactly what to paste, and what is found for you
  3. 03

    Make the first call. Check before a write.

    Ask in plain words; Claude picks the action. Before anything changes, check validates the call and prices it, for free.

    do    { action: "tenable_vulnerability_management.users.list_users" }# list users · read · 1 upstream callcheck { action: "tenable_vulnerability_management.users.create_user", input: { … } }# free: inputs, permissions, cost and confirmations, nothing sent

Tenable Vulnerability Management at a glance

Sign-in
API key. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead.
You provide
access_keysecret_key
Setup fields
region
Limits we pace to
100 calls per 10 seconds, per connection
API covered
Tenable cloud API (developer.tenable.com OpenAPI 3.1, fetched 2026-10-22)cloud.tenable.com
Built from
Tenable Vulnerability Management's documentation, read 22 October 2026developer.tenable.comdeveloper.tenable.comdeveloper.tenable.com
Service file
Version 1.0.0, signed (Ed25519)
Cached reads
200 of 211 reads, for up to 5 minutes; a write clears what it affects
Shared entities
6, so ask can line Tenable Vulnerability Management up with your other systems
Data
Processed and stored in Sydney, Australia. No US region yet

Capabilities

What an AI agent can do in Tenable Vulnerability Management.

398 actions in 73 areas. Every one carries its effect, so a key can allow the reads and hold the rest.

  • 211readlook, never change
  • 131writecreate and update
  • 56destructivewait for a confirmation

  1. Tags

    15

    7 read · 5 write · 3 destructive

    Add or remove asset tags · Create tag category · Create tag value · List asset tag filters

  2. Users

    15

    4 read · 8 write · 3 destructive

    List users · Create user · Get user details · Update user

  3. Workbenches

    13

    12 read · 0 write · 1 destructive

    List vulnerabilities · List asset vulnerabilities · List asset vulnerabilities for plugin · List assets

  4. Agent tasks

    10

    2 read · 5 write · 3 destructive

    Add agents to a group · Add agents to a network · Assign or remove profile · Check agent group operation status

  5. Filters

    10

    10 read · 0 write · 0 destructive

    List agent filters · List asset filters · List asset filters v2 · List credential filters

  6. Networks

    10

    5 read · 4 write · 1 destructive

    List networks · Create network · Get network details · Update network

  7. Scanner groups

    10

    4 read · 4 write · 2 destructive

    Add scanner to scanner group · Create scanner group · List scan routes · List scanner group details

  8. Shared collections

    10

    5 read · 3 write · 2 destructive

    Add scan configs to shared collection · Create shared collection · Get shared collection details by name · List scan configs in shared collection

65 more areas · 305 actions
  • Asset attributes 9
  • Cloud connectors 9
  • Was scans 9
  • Assets 8
  • Permissions 8
  • Was configs 8
  • Access groups 7
  • Access groups V2 7
  • Agent groups 7
  • Agents 7
  • Exposure initiatives 7
  • Groups 7
  • Policies 7
  • Scan tasks 7
  • Scanners 7
  • Sensor profiles 7
  • Asset exports 6
  • Credentials 6
  • Exposure combinations 6
  • Ot connectors 6
  • Recast rules 6
  • Roles 6
  • Scans 6
  • T1 inventory 6
  • T1 inventory exports 6
  • Was templates 6
  • Agent exclusions 5
  • Compliance exports 5
  • Exclusions 5
  • Pci asv attestations 5
  • Plugins 5
  • Remediation goals 5
  • Remediation projects 5
  • Scan control 5
  • Target groups 5
  • Vuln exports 5
  • Was exports 5
  • Was filters 5
  • Editor 4
  • Folders 4
  • Scanner tasks 4
  • T1 attack path exports 4
  • Was folders 4
  • Scan exports 3
  • Scan history 3
  • Scan status 3
  • Scanner profiles 3
  • Agent config 2
  • API security 2
  • Object permissions 2
  • Remediation scans 2
  • Reports 2
  • Scan results 2
  • Scanner config 2
  • Server 2
  • T1 attack paths 2
  • T1 exposure view 2
  • T1 tags 2
  • Vulnerabilities 2
  • Was plugins 2
  • Was vulnerabilities 2
  • Activity log 1
  • Pci asv scans 1
  • T1 connectors 1
  • Was applications 1

Top actions

The Tenable Vulnerability Management API, shaped for agents.

The ids your agent types, what each does, and the one name it shares with other systems. 36 of Tenable Vulnerability Management's 40 action names are shared with at least one other connector, so an agent learns them once.

ActionWhat it doesEffectSame name in
tenable_vulnerability_management.users.list_usersList usersList users.readidentity.user.list474 connectors
tenable_vulnerability_management.networks.list_networksList networksList networks.readsecurity.network.list15 connectors
tenable_vulnerability_management.users.create_userCreate userCreate user.writeidentity.user.create262 connectors
tenable_vulnerability_management.groups.list_groupsList groupsList groups.readidentity.group.list262 connectors
tenable_vulnerability_management.roles.list_rolesList rolesList roles.readidentity.role.list184 connectors
tenable_vulnerability_management.users.delete_userDelete userDelete user.destructiveidentity.user.delete253 connectors
tenable_vulnerability_management.groups.create_groupCreate groupCreate group.writeidentity.group.create205 connectors
tenable_vulnerability_management.networks.create_networkCreate networkCreate network.writesecurity.network.create8 connectors
tenable_vulnerability_management.roles.create_roleCreate roleCreate role.writeidentity.role.create105 connectors
tenable_vulnerability_management.assets.list_assetsList assetsList assets.readasset.asset.list42 connectors
tenable_vulnerability_management.workbenches.list_vulnerabilitiesList vulnerabilitiesList vulnerabilities.readsecurity.vulnerability.list14 connectors
tenable_vulnerability_management.policies.list_policiesList policiesList policies.readsecurity.scan_policy.list2 connectors

Try it

Prompts to paste into Claude.

Each one names the Tenable Vulnerability Management actions it will call, so you know what it reads and what it changes before you send it.

  1. Readread

    Who has access in Tenable Vulnerability Management? List every user and their role.

    callstenable_vulnerability_management.users.list_users

  2. Writewrite

    Create user in Tenable Vulnerability Management. Show me exactly what you will send before you save it.

    callstenable_vulnerability_management.users.create_user

Governance for Tenable Vulnerability Management

Destructive actions wait for a yes.

56 Tenable Vulnerability Management actions are destructive. The first 10:

  • Delete usertenable_vulnerability_management.users.delete_user
  • Delete grouptenable_vulnerability_management.groups.delete_group
  • Delete networktenable_vulnerability_management.networks.delete_network
  • Delete roletenable_vulnerability_management.roles.delete_role
  • Delete scantenable_vulnerability_management.scans.delete_scan
  • Delete policytenable_vulnerability_management.policies.delete_policy
  • Stop scantenable_vulnerability_management.scan_control.stop_scan
  • Unlink agenttenable_vulnerability_management.agents.unlink_agent
  • Delete tag valuetenable_vulnerability_management.tags.delete_tag_value
  • Delete scannertenable_vulnerability_management.scanners.delete_scanner

A destructive action runs only with confirm: true. Under the human policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.

dotenable_vulnerability_management.users.delete_userconfirm_policy: human

Delete user?

intent: the user asked me to delete user

run suspended · waiting for a named person · key tenable-vulnerability-management-agent cannot confirm itself
In the console, or from an emailed signed link.
a key for this connector
account {  op: "keys.create", name: "tenable-vulnerability-management-agent",  allowed_actions: ["tenable_vulnerability_management.*"], cap_calls: 2000,  confirm_policy: "human_for_writes",  approval_rules: [    { match: "tenable_vulnerability_management.users.delete_user", approver: "[email protected]" },    { match: "tenable_vulnerability_management.groups.delete_group", approver: "[email protected]" },    { match: "tenable_vulnerability_management.networks.delete_network", approver: "[email protected]" }  ]}
Illustrative. Scoped to Tenable Vulnerability Management only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person.

Cost

What Tenable Vulnerability Management costs on actionlake.

Every Tenable Vulnerability Management action is one upstream call, the only thing actionlake bills. Searching, check, cost, account and any call Tenable Vulnerability Management refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

  • 1upstream call per actionall 398 Tenable Vulnerability Management actions
  • 398actions pageeach page of a long list is one call
  • 200reads can be cacheda cache hit costs nothing
  • 100,000calls a month, freepaid plans from US$49 a month for 250,000

See pricing

Action index

Every Tenable Vulnerability Management action.

398 actions by area: the id your agent calls, what it does, and its effect.

Tags15
  • tenable_vulnerability_management.tags.add_or_remove_asset_tagsAdd or remove asset tagswrite
  • tenable_vulnerability_management.tags.create_tag_categoryCreate tag categorywrite
  • tenable_vulnerability_management.tags.create_tag_valueCreate tag valuewrite
  • tenable_vulnerability_management.tags.list_asset_tag_filtersList asset tag filtersread
  • tenable_vulnerability_management.tags.bulk_delete_tag_valuesBulk delete tag valuesdestructive
  • tenable_vulnerability_management.tags.delete_tag_categoryDelete tag categorydestructive
  • and 9 more in this area
Users15
  • tenable_vulnerability_management.users.create_userCreate userwrite
  • tenable_vulnerability_management.users.get_user_detailsGet user detailsread
  • tenable_vulnerability_management.users.list_usersList usersread
  • tenable_vulnerability_management.users.update_userUpdate userwrite
  • tenable_vulnerability_management.users.change_passwordChange passwordwrite
  • tenable_vulnerability_management.users.change_user_roleChange user rolewrite
  • and 9 more in this area
Workbenches13
  • tenable_vulnerability_management.workbenches.list_asset_vulnerabilitiesList asset vulnerabilitiesread
  • tenable_vulnerability_management.workbenches.list_asset_vulnerabilities_for_pluginList asset vulnerabilities for pluginread
  • tenable_vulnerability_management.workbenches.list_assetsList assetsread
  • tenable_vulnerability_management.workbenches.list_vulnerabilitiesList vulnerabilitiesread
  • tenable_vulnerability_management.workbenches.check_export_statusCheck export statusread
  • tenable_vulnerability_management.workbenches.delete_assetDelete assetdestructive
  • and 7 more in this area
Agent tasks10
  • tenable_vulnerability_management.agent_tasks.add_agents_to_a_groupAdd agents to a groupwrite
  • tenable_vulnerability_management.agent_tasks.add_agents_to_a_networkAdd agents to a networkwrite
  • tenable_vulnerability_management.agent_tasks.assign_or_remove_profileAssign or remove profilewrite
  • tenable_vulnerability_management.agent_tasks.check_agent_group_operation_statusCheck agent group operation statusread
  • tenable_vulnerability_management.agent_tasks.get_agent_task_statusGet agent task statusread
  • tenable_vulnerability_management.agent_tasks.remove_agents_from_groupRemove agents from groupdestructive
  • and 4 more in this area
Filters10
  • tenable_vulnerability_management.filters.list_agent_filtersList agent filtersread
  • tenable_vulnerability_management.filters.list_asset_filtersList asset filtersread
  • tenable_vulnerability_management.filters.list_asset_filters_v2List asset filters v2read
  • tenable_vulnerability_management.filters.list_credential_filtersList credential filtersread
  • tenable_vulnerability_management.filters.list_exposure_response_combination_filtersList exposure response combination filtersread
  • tenable_vulnerability_management.filters.list_report_filtersList report filtersread
  • and 4 more in this area
Networks10
  • tenable_vulnerability_management.networks.create_networkCreate networkwrite
  • tenable_vulnerability_management.networks.get_network_detailsGet network detailsread
  • tenable_vulnerability_management.networks.list_networksList networksread
  • tenable_vulnerability_management.networks.update_networkUpdate networkwrite
  • tenable_vulnerability_management.networks.assign_scannersAssign scannerswrite
  • tenable_vulnerability_management.networks.bulk_assign_scannersBulk assign scannerswrite
  • and 4 more in this area
Scanner groups10
  • tenable_vulnerability_management.scanner_groups.add_scanner_to_scanner_groupAdd scanner to scanner groupwrite
  • tenable_vulnerability_management.scanner_groups.create_scanner_groupCreate scanner groupwrite
  • tenable_vulnerability_management.scanner_groups.list_scan_routesList scan routesread
  • tenable_vulnerability_management.scanner_groups.list_scanner_group_detailsList scanner group detailsread
  • tenable_vulnerability_management.scanner_groups.delete_a_scanner_groupDelete a scanner groupdestructive
  • tenable_vulnerability_management.scanner_groups.list_scanner_groupsList scanner groupsread
  • and 4 more in this area
Shared collections10
  • tenable_vulnerability_management.shared_collections.add_scan_configs_to_shared_collectionAdd scan configs to shared collectionwrite
  • tenable_vulnerability_management.shared_collections.create_shared_collectionCreate shared collectionwrite
  • tenable_vulnerability_management.shared_collections.get_shared_collection_details_by_nameGet shared collection details by nameread
  • tenable_vulnerability_management.shared_collections.list_scan_configs_in_shared_collectionList scan configs in shared collectionread
  • tenable_vulnerability_management.shared_collections.delete_shared_collectionDelete shared collectiondestructive
  • tenable_vulnerability_management.shared_collections.get_job_statusGet job statusread
  • and 4 more in this area
Asset attributes9
  • tenable_vulnerability_management.asset_attributes.assign_attributes_to_assetAssign attributes to assetwrite
  • tenable_vulnerability_management.asset_attributes.create_attributeCreate attributewrite
  • tenable_vulnerability_management.asset_attributes.list_attributesList attributesread
  • tenable_vulnerability_management.asset_attributes.list_attributes_assigned_to_assetList attributes assigned to assetread
  • tenable_vulnerability_management.asset_attributes.assign_single_attribute_to_assetAssign single attribute to assetwrite
  • tenable_vulnerability_management.asset_attributes.delete_attributeDelete attributedestructive
  • and 3 more in this area
Cloud connectors9
  • tenable_vulnerability_management.cloud_connectors.create_connectorCreate connectorwrite
  • tenable_vulnerability_management.cloud_connectors.download_cft_templateDownload CFT Templateread
  • tenable_vulnerability_management.cloud_connectors.import_dataImport datawrite
  • tenable_vulnerability_management.cloud_connectors.list_aws_cloudtrailsList AWS cloudtrailsread
  • tenable_vulnerability_management.cloud_connectors.delete_connectorDelete connectordestructive
  • tenable_vulnerability_management.cloud_connectors.download_arm_templateDownload ARM Templateread
  • and 3 more in this area
Was scans9
  • tenable_vulnerability_management.was_scans.download_exported_scanDownload exported scanread
  • tenable_vulnerability_management.was_scans.export_scan_resultsExport scan resultswrite
  • tenable_vulnerability_management.was_scans.search_scansSearch scansread
  • tenable_vulnerability_management.was_scans.search_vulnerabilities_for_scanSearch vulnerabilities for scanread
  • tenable_vulnerability_management.was_scans.delete_scanDelete scandestructive
  • tenable_vulnerability_management.was_scans.get_scan_detailsGet scan detailsread
  • and 3 more in this area
Assets8
  • tenable_vulnerability_management.assets.get_asset_detailsGet asset detailsread
  • tenable_vulnerability_management.assets.import_assetsImport assetswrite
  • tenable_vulnerability_management.assets.list_asset_import_jobsList asset import jobsread
  • tenable_vulnerability_management.assets.list_assetsList assetsread
  • tenable_vulnerability_management.assets.bulk_delete_assetsBulk delete assetsdestructive
  • tenable_vulnerability_management.assets.get_import_job_statusGet import job statusread
  • and 2 more in this area
Permissions8
  • tenable_vulnerability_management.permissions.create_permissionCreate permissionwrite
  • tenable_vulnerability_management.permissions.list_permissionsList permissionsread
  • tenable_vulnerability_management.permissions.list_user_group_permissionsList user group permissionsread
  • tenable_vulnerability_management.permissions.list_user_permissionsList user permissionsread
  • tenable_vulnerability_management.permissions.delete_permissionDelete permissiondestructive
  • tenable_vulnerability_management.permissions.get_current_user_permissionsGet current user permissionsread
  • and 2 more in this area
Was configs8
  • tenable_vulnerability_management.was_configs.create_scan_configurationCreate scan configurationwrite
  • tenable_vulnerability_management.was_configs.get_remediation_scan_configurationGet remediation scan configurationread
  • tenable_vulnerability_management.was_configs.get_scan_configuration_detailsGet scan configuration detailsread
  • tenable_vulnerability_management.was_configs.search_scan_configurationsSearch scan configurationsread
  • tenable_vulnerability_management.was_configs.delete_scan_configurationDelete scan configurationdestructive
  • tenable_vulnerability_management.was_configs.get_scan_configuration_processing_statusGet scan configuration processing statusread
  • and 2 more in this area
Access groups7
  • tenable_vulnerability_management.access_groups.create_access_groupCreate access groupwrite
  • tenable_vulnerability_management.access_groups.list_access_group_filtersList access group filtersread
  • tenable_vulnerability_management.access_groups.list_access_groupsList access groupsread
  • tenable_vulnerability_management.access_groups.list_asset_rule_filtersList asset rule filtersread
  • tenable_vulnerability_management.access_groups.delete_access_groupDelete access groupdestructive
  • tenable_vulnerability_management.access_groups.get_access_group_detailsGet access group detailsread
  • and 1 more in this area
Access groups V27
  • tenable_vulnerability_management.access_groups_v2.create_access_groupCreate access groupwrite
  • tenable_vulnerability_management.access_groups_v2.list_access_group_filtersList access group filtersread
  • tenable_vulnerability_management.access_groups_v2.list_access_groupsList access groupsread
  • tenable_vulnerability_management.access_groups_v2.list_asset_rule_filtersList asset rule filtersread
  • tenable_vulnerability_management.access_groups_v2.delete_access_groupDelete access groupdestructive
  • tenable_vulnerability_management.access_groups_v2.get_access_group_detailsGet access group detailsread
  • and 1 more in this area
Agent groups7
  • tenable_vulnerability_management.agent_groups.add_agent_to_groupAdd agent to groupwrite
  • tenable_vulnerability_management.agent_groups.create_agent_groupCreate agent groupwrite
  • tenable_vulnerability_management.agent_groups.get_agent_group_detailsGet agent group detailsread
  • tenable_vulnerability_management.agent_groups.list_agent_groupsList agent groupsread
  • tenable_vulnerability_management.agent_groups.delete_agent_groupDelete agent groupdestructive
  • tenable_vulnerability_management.agent_groups.remove_agent_from_groupRemove agent from groupdestructive
  • and 1 more in this area
Agents7
  • tenable_vulnerability_management.agents.get_agent_detailsGet agent detailsread
  • tenable_vulnerability_management.agents.get_agent_safe_mode_summaryGet agent safe mode summaryread
  • tenable_vulnerability_management.agents.list_agentsList agentsread
  • tenable_vulnerability_management.agents.list_agents_by_groupList agents by groupread
  • tenable_vulnerability_management.agents.rename_agentRename agentwrite
  • tenable_vulnerability_management.agents.send_instructions_to_an_agentSend instructions to an agentwrite
  • and 1 more in this area
Exposure initiatives7
  • tenable_vulnerability_management.exposure_initiatives.create_initiativeCreate initiativewrite
  • tenable_vulnerability_management.exposure_initiatives.get_filter_details_for_an_initiativeGet filter details for an initiativeread
  • tenable_vulnerability_management.exposure_initiatives.get_initiative_detailsGet initiative detailsread
  • tenable_vulnerability_management.exposure_initiatives.list_initiativesList initiativesread
  • tenable_vulnerability_management.exposure_initiatives.delete_initiativeDelete initiativedestructive
  • tenable_vulnerability_management.exposure_initiatives.share_initiativeShare initiativewrite
  • and 1 more in this area
Groups7
  • tenable_vulnerability_management.groups.create_groupCreate groupwrite
  • tenable_vulnerability_management.groups.delete_groupDelete groupdestructive
  • tenable_vulnerability_management.groups.list_groupsList groupsread
  • tenable_vulnerability_management.groups.update_groupUpdate groupwrite
  • tenable_vulnerability_management.groups.add_user_to_groupAdd user to groupwrite
  • tenable_vulnerability_management.groups.list_users_in_groupList users in groupread
  • and 1 more in this area
Policies7
  • tenable_vulnerability_management.policies.create_policyCreate policywrite
  • tenable_vulnerability_management.policies.list_policiesList policiesread
  • tenable_vulnerability_management.policies.list_policy_detailsList policy detailsread
  • tenable_vulnerability_management.policies.update_policyUpdate policywrite
  • tenable_vulnerability_management.policies.copy_policyCopy policywrite
  • tenable_vulnerability_management.policies.delete_policyDelete policydestructive
  • and 1 more in this area
Scan tasks7
  • tenable_vulnerability_management.scan_tasks.convert_credentialsConvert credentialswrite
  • tenable_vulnerability_management.scan_tasks.copy_scanCopy scanwrite
  • tenable_vulnerability_management.scan_tasks.import_uploaded_scanImport uploaded scanwrite
  • tenable_vulnerability_management.scan_tasks.test_scan_routesTest scan routesread
  • tenable_vulnerability_management.scan_tasks.enable_scheduleEnable schedulewrite
  • tenable_vulnerability_management.scan_tasks.get_scan_countGet scan countread
  • and 1 more in this area
Scanners7
  • tenable_vulnerability_management.scanners.get_scanner_detailsGet scanner detailsread
  • tenable_vulnerability_management.scanners.list_aws_scan_targetsList AWS scan targetsread
  • tenable_vulnerability_management.scanners.list_running_scansList running scansread
  • tenable_vulnerability_management.scanners.list_scannersList scannersread
  • tenable_vulnerability_management.scanners.delete_scannerDelete scannerdestructive
  • tenable_vulnerability_management.scanners.get_scanner_keyGet scanner keyread
  • and 1 more in this area
Sensor profiles7
  • tenable_vulnerability_management.sensor_profiles.clone_profileClone profilewrite
  • tenable_vulnerability_management.sensor_profiles.create_profileCreate profilewrite
  • tenable_vulnerability_management.sensor_profiles.list_available_plugin_setsList available plugin setsread
  • tenable_vulnerability_management.sensor_profiles.list_profilesList profilesread
  • tenable_vulnerability_management.sensor_profiles.delete_profileDelete profiledestructive
  • tenable_vulnerability_management.sensor_profiles.get_profile_detailsGet profile detailsread
  • and 1 more in this area
Asset exports6
  • tenable_vulnerability_management.asset_exports.download_assets_chunkDownload assets chunkread
  • tenable_vulnerability_management.asset_exports.export_assets_v1Export assets v1write
  • tenable_vulnerability_management.asset_exports.export_assets_v2Export assets v2write
  • tenable_vulnerability_management.asset_exports.list_asset_export_jobsList asset export jobsread
  • tenable_vulnerability_management.asset_exports.cancel_asset_exportCancel asset exportdestructive
  • tenable_vulnerability_management.asset_exports.get_assets_export_statusGet assets export statusread
Credentials6
  • tenable_vulnerability_management.credentials.create_managed_credentialCreate managed credentialwrite
  • tenable_vulnerability_management.credentials.get_managed_credential_detailsGet managed credential detailsread
  • tenable_vulnerability_management.credentials.list_credential_typesList credential typesread
  • tenable_vulnerability_management.credentials.list_managed_credentialsList managed credentialsread
  • tenable_vulnerability_management.credentials.delete_managed_credentialDelete managed credentialdestructive
  • tenable_vulnerability_management.credentials.update_managed_credentialUpdate managed credentialwrite
Exposure combinations6
  • tenable_vulnerability_management.exposure_combinations.create_combinationCreate combinationwrite
  • tenable_vulnerability_management.exposure_combinations.get_combination_detailsGet combination detailsread
  • tenable_vulnerability_management.exposure_combinations.list_combination_timelinesList combination timelinesread
  • tenable_vulnerability_management.exposure_combinations.list_combinationsList combinationsread
  • tenable_vulnerability_management.exposure_combinations.delete_combinationDelete combinationdestructive
  • tenable_vulnerability_management.exposure_combinations.update_combinationUpdate combinationwrite
Ot connectors6
  • tenable_vulnerability_management.ot_connectors.create_ot_connectorCreate OT connectorwrite
  • tenable_vulnerability_management.ot_connectors.generate_linking_keyGenerate linking keywrite
  • tenable_vulnerability_management.ot_connectors.get_ot_connector_detailsGet OT connector detailsread
  • tenable_vulnerability_management.ot_connectors.list_ot_connectorsList OT connectorsread
  • tenable_vulnerability_management.ot_connectors.delete_ot_connectorDelete OT connectordestructive
  • tenable_vulnerability_management.ot_connectors.update_ot_connectorUpdate OT connectorwrite
Recast rules6
  • tenable_vulnerability_management.recast_rules.create_recast_ruleCreate recast rulewrite
  • tenable_vulnerability_management.recast_rules.get_recast_rule_detailsGet recast rule detailsread
  • tenable_vulnerability_management.recast_rules.list_recast_rule_filtersList recast rule filtersread
  • tenable_vulnerability_management.recast_rules.search_recast_rulesSearch recast rulesread
  • tenable_vulnerability_management.recast_rules.delete_recast_ruleDelete recast ruledestructive
  • tenable_vulnerability_management.recast_rules.update_recast_ruleUpdate recast rulewrite
Roles6
  • tenable_vulnerability_management.roles.create_roleCreate rolewrite
  • tenable_vulnerability_management.roles.get_role_detailsGet role detailsread
  • tenable_vulnerability_management.roles.list_rolesList rolesread
  • tenable_vulnerability_management.roles.update_roleUpdate rolewrite
  • tenable_vulnerability_management.roles.delete_roleDelete roledestructive
  • tenable_vulnerability_management.roles.list_role_permissionsList role permissionsread

Scans 6T1 inventory 6T1 inventory exports 6Was templates 6Agent exclusions 5Compliance exports 5Exclusions 5Pci asv attestations 5Plugins 5Remediation goals 5Remediation projects 5Scan control 5Target groups 5Vuln exports 5Was exports 5Was filters 5Editor 4Folders 4Scanner tasks 4T1 attack path exports 4Was folders 4Scan exports 3Scan history 3Scan status 3Scanner profiles 3Agent config 2API security 2Object permissions 2Remediation scans 2Reports 2Scan results 2Scanner config 2Server 2T1 attack paths 2T1 exposure view 2T1 tags 2Vulnerabilities 2Was plugins 2Was vulnerabilities 2Activity log 1Pci asv scans 1T1 connectors 1Was applications 1

This index shows a sample of each area. All 398 actions, with their inputs and prices, are in the catalogue, which a free sandbox key can search.

Questions

The Tenable Vulnerability Management MCP server, answered.

Is there a Tenable Vulnerability Management MCP server for Claude?

Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 398 Tenable Vulnerability Management actions across tags, users, workbenches and agent tasks, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Tenable Vulnerability Management.

What do I need to connect Tenable Vulnerability Management?

Tenable access key and Tenable secret key (the secretKey half generated alongside the access key). Plus your region. The free call account { op: "connections.requirements", service: "tenable_vulnerability_management" } lists exactly what to paste.

Can an AI agent delete or change things in Tenable Vulnerability Management?

Only if its key allows it, and only with an explicit confirmation. 56 Tenable Vulnerability Management actions are destructive, including delete user, delete group and delete network. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.

Will an AI agent use up my Tenable Vulnerability Management API limit?

actionlake paces every call to the limits in the Tenable Vulnerability Management service file: 100 calls per 10 seconds per connection. Repeated reads are answered from cache (200 Tenable Vulnerability Management actions can be), which never reaches Tenable Vulnerability Management.

What does a Tenable Vulnerability Management action cost?

One upstream call, the only unit actionlake bills. A list that pages bills one call per page (398 Tenable Vulnerability Management actions page). Cache hits, searches, dry runs and calls Tenable Vulnerability Management refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

Which Tenable Vulnerability Management API does it cover?

The Tenable cloud API (developer.tenable.com OpenAPI 3.1, fetched 2026-10-22) at cloud.tenable.com by default, or the base URL set when you connect. It is built from Tenable Vulnerability Management's documentation as read on 22 October 2026. 398 actions in 73 areas, each one in the signed service file (version 1.0.0).

Does actionlake keep my Tenable Vulnerability Management data, and where?

actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Tenable Vulnerability Management credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.

Which AI clients can use it?

Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.

More connectors like Tenable Vulnerability Management

Shares the most action names with

Joins with, on shared entities

Browse

actionlake is independent. It is not made or endorsed by Tenable Vulnerability Management; the name is the vendor's own. Counts are from the Tenable Vulnerability Management service file, version 1.0.0.

Give your agent Tenable Vulnerability Management today.

Connect Tenable Vulnerability Management freeSee pricing

Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.