--- title: "Tenable Vulnerability Management MCP server - actionlake" description: "Give Claude 398 Tenable Vulnerability Management actions through one MCP server: tags, users. Your agent never holds the credential. 100,000 calls a month free." canonical: https://actionlake.com/connectors/tenable-vulnerability-management updated: 2026-10-22 --- Connectors · Identity & security # Tenable Vulnerability Management MCP server for AI agents. actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Tenable Vulnerability Management and the rest of your systems. It gives your agent 398 Tenable Vulnerability Management actions (211 reads, 131 writes and 56 that wait for a confirmation) and holds the Tenable Vulnerability Management credential itself, so the agent never does. It paces Tenable Vulnerability Management's limits and records every call. [Connect Tenable Vulnerability Management free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) 100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you. `claude mcp add --transport http actionlake https://connect.actionlake.com/mcp` the first call ``` do { action: "tenable_vulnerability_management.users.list_users", intent: "check which Tenable Vulnerability Management account is connected" } # List users · read · 1 upstream call ``` - 398 actions in one signed file - 211 read look, never change - 131 write create and update - 56 wait for a yes destructive, confirmed first Set up ## Connect Tenable Vulnerability Management in three steps. 1. 01 ### Add actionlake to Claude. Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us. `https://connect.actionlake.com/mcp` 2. 02 ### Connect Tenable Vulnerability Management. API key. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. actionlake stores what you paste write-only, sealed under your tenant's key. - `access_key` Tenable access key - `secret_key` Tenable secret key (the secretKey half generated alongside the access key) - `region` Your Tenable Vulnerability Management region ``` account { op: "connections.requirements", service: "tenable_vulnerability_management" } # free: exactly what to paste, and what is found for you ``` 3. 03 ### Make the first call. Check before a write. Ask in plain words; Claude picks the action. Before anything changes, `check` validates the call and prices it, for free. ``` do { action: "tenable_vulnerability_management.users.list_users" } # list users · read · 1 upstream call check { action: "tenable_vulnerability_management.users.create_user", input: { … } } # free: inputs, permissions, cost and confirmations, nothing sent ``` Tenable Vulnerability Management at a glance **Sign-in** API key. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. **You provide** `access_key` `secret_key` **Setup fields** `region` **Limits we pace to** 100 calls per 10 seconds, per connection **API covered** Tenable cloud API (developer.tenable.com OpenAPI 3.1, fetched 2026-10-22)`cloud.tenable.com` **Built from** Tenable Vulnerability Management's documentation, read 22 October 2026[developer.tenable.com](https://developer.tenable.com/openapi/vulnerability-management.json) [developer.tenable.com](https://developer.tenable.com/openapi/tenable-platform-settings.json) [developer.tenable.com](https://developer.tenable.com/openapi/web-app-scanning.json) **Service file** Version 1.0.0, signed (Ed25519) **Cached reads** 200 of 211 reads, for up to 5 minutes; a write clears what it affects **Shared entities** 6, so ask can line Tenable Vulnerability Management up with your other systems **Data** Processed and stored in Sydney, Australia. No US region yet Capabilities ## What an AI agent can do in Tenable Vulnerability Management. 398 actions in 73 areas. Every one carries its effect, so a key can allow the reads and hold the rest. - **211** read look, never change - **131** write create and update - **56** destructive wait for a confirmation 1. ### Tags 15 7 read · 5 write · 3 destructive Add or remove asset tags · Create tag category · Create tag value · List asset tag filters 2. ### Users 15 4 read · 8 write · 3 destructive List users · Create user · Get user details · Update user 3. ### Workbenches 13 12 read · 0 write · 1 destructive List vulnerabilities · List asset vulnerabilities · List asset vulnerabilities for plugin · List assets 4. ### Agent tasks 10 2 read · 5 write · 3 destructive Add agents to a group · Add agents to a network · Assign or remove profile · Check agent group operation status 5. ### Filters 10 10 read · 0 write · 0 destructive List agent filters · List asset filters · List asset filters v2 · List credential filters 6. ### Networks 10 5 read · 4 write · 1 destructive List networks · Create network · Get network details · Update network 7. ### Scanner groups 10 4 read · 4 write · 2 destructive Add scanner to scanner group · Create scanner group · List scan routes · List scanner group details 8. ### Shared collections 10 5 read · 3 write · 2 destructive Add scan configs to shared collection · Create shared collection · Get shared collection details by name · List scan configs in shared collection **65 more areas · 305 actions** - Asset attributes **9** - Cloud connectors **9** - Was scans **9** - Assets **8** - Permissions **8** - Was configs **8** - Access groups **7** - Access groups V2 **7** - Agent groups **7** - Agents **7** - Exposure initiatives **7** - Groups **7** - Policies **7** - Scan tasks **7** - Scanners **7** - Sensor profiles **7** - Asset exports **6** - Credentials **6** - Exposure combinations **6** - Ot connectors **6** - Recast rules **6** - Roles **6** - Scans **6** - T1 inventory **6** - T1 inventory exports **6** - Was templates **6** - Agent exclusions **5** - Compliance exports **5** - Exclusions **5** - Pci asv attestations **5** - Plugins **5** - Remediation goals **5** - Remediation projects **5** - Scan control **5** - Target groups **5** - Vuln exports **5** - Was exports **5** - Was filters **5** - Editor **4** - Folders **4** - Scanner tasks **4** - T1 attack path exports **4** - Was folders **4** - Scan exports **3** - Scan history **3** - Scan status **3** - Scanner profiles **3** - Agent config **2** - API security **2** - Object permissions **2** - Remediation scans **2** - Reports **2** - Scan results **2** - Scanner config **2** - Server **2** - T1 attack paths **2** - T1 exposure view **2** - T1 tags **2** - Vulnerabilities **2** - Was plugins **2** - Was vulnerabilities **2** - Activity log **1** - Pci asv scans **1** - T1 connectors **1** - Was applications **1** Top actions ## The Tenable Vulnerability Management API, shaped for agents. The ids your agent types, what each does, and the one name it shares with other systems. 36 of Tenable Vulnerability Management's 40 action names are shared with at least one other connector, so an agent learns them once. | Action | What it does | Effect | Same name in | | --- | --- | --- | --- | | `tenable_vulnerability_management.users.list_users` List users | List users. | read | `identity.user.list` 474 connectors | | `tenable_vulnerability_management.networks.list_networks` List networks | List networks. | read | `security.network.list` 15 connectors | | `tenable_vulnerability_management.users.create_user` Create user | Create user. | write | `identity.user.create` 262 connectors | | `tenable_vulnerability_management.groups.list_groups` List groups | List groups. | read | `identity.group.list` 262 connectors | | `tenable_vulnerability_management.roles.list_roles` List roles | List roles. | read | `identity.role.list` 184 connectors | | `tenable_vulnerability_management.users.delete_user` Delete user | Delete user. | destructive | `identity.user.delete` 253 connectors | | `tenable_vulnerability_management.groups.create_group` Create group | Create group. | write | `identity.group.create` 205 connectors | | `tenable_vulnerability_management.networks.create_network` Create network | Create network. | write | `security.network.create` 8 connectors | | `tenable_vulnerability_management.roles.create_role` Create role | Create role. | write | `identity.role.create` 105 connectors | | `tenable_vulnerability_management.assets.list_assets` List assets | List assets. | read | `asset.asset.list` 42 connectors | | `tenable_vulnerability_management.workbenches.list_vulnerabilities` List vulnerabilities | List vulnerabilities. | read | `security.vulnerability.list` 14 connectors | | `tenable_vulnerability_management.policies.list_policies` List policies | List policies. | read | `security.scan_policy.list` 2 connectors | Try it ## Prompts to paste into Claude. Each one names the Tenable Vulnerability Management actions it will call, so you know what it reads and what it changes before you send it. 1. Read read Who has access in Tenable Vulnerability Management? List every user and their role. calls `tenable_vulnerability_management.users.list_users` 2. Write write Create user in Tenable Vulnerability Management. Show me exactly what you will send before you save it. calls `tenable_vulnerability_management.users.create_user` Governance for Tenable Vulnerability Management ## Destructive actions wait for a yes. 56 Tenable Vulnerability Management actions are destructive. The first 10: - Delete user `tenable_vulnerability_management.users.delete_user` - Delete group `tenable_vulnerability_management.groups.delete_group` - Delete network `tenable_vulnerability_management.networks.delete_network` - Delete role `tenable_vulnerability_management.roles.delete_role` - Delete scan `tenable_vulnerability_management.scans.delete_scan` - Delete policy `tenable_vulnerability_management.policies.delete_policy` - Stop scan `tenable_vulnerability_management.scan_control.stop_scan` - Unlink agent `tenable_vulnerability_management.agents.unlink_agent` - Delete tag value `tenable_vulnerability_management.tags.delete_tag_value` - Delete scanner `tenable_vulnerability_management.scanners.delete_scanner` A destructive action runs only with `confirm: true`. Under the `human` policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after. do tenable_vulnerability_management.users.delete_user confirm_policy: **human** Delete user? **intent:** the user asked me to delete user run suspended · waiting for a named person · key _tenable-vulnerability-management-agent_ cannot confirm itself In the console, or from an emailed signed link. a key for this connector ``` account { op: "keys.create", name: "tenable-vulnerability-management-agent", allowed_actions: ["tenable_vulnerability_management.*"], cap_calls: 2000, confirm_policy: "human_for_writes", approval_rules: [ { match: "tenable_vulnerability_management.users.delete_user", approver: "lead@example.com" }, { match: "tenable_vulnerability_management.groups.delete_group", approver: "lead@example.com" }, { match: "tenable_vulnerability_management.networks.delete_network", approver: "lead@example.com" } ] } ``` Illustrative. Scoped to Tenable Vulnerability Management only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person. Cost ## What Tenable Vulnerability Management costs on actionlake. Every Tenable Vulnerability Management action is one upstream call, the only thing actionlake bills. Searching, `check`, `cost`, `account` and any call Tenable Vulnerability Management refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. - 1 upstream call per action all 398 Tenable Vulnerability Management actions - 398 actions page each page of a long list is one call - 200 reads can be cached a cache hit costs nothing - 100,000 calls a month, free paid plans from US$49 a month for 250,000 [See pricing](https://actionlake.com/pricing) Action index ## Every Tenable Vulnerability Management action. 398 actions by area: the id your agent calls, what it does, and its effect. **Tags 15** - `tenable_vulnerability_management.tags.add_or_remove_asset_tags` Add or remove asset tags write - `tenable_vulnerability_management.tags.create_tag_category` Create tag category write - `tenable_vulnerability_management.tags.create_tag_value` Create tag value write - `tenable_vulnerability_management.tags.list_asset_tag_filters` List asset tag filters read - `tenable_vulnerability_management.tags.bulk_delete_tag_values` Bulk delete tag values destructive - `tenable_vulnerability_management.tags.delete_tag_category` Delete tag category destructive - and 9 more in this area **Users 15** - `tenable_vulnerability_management.users.create_user` Create user write - `tenable_vulnerability_management.users.get_user_details` Get user details read - `tenable_vulnerability_management.users.list_users` List users read - `tenable_vulnerability_management.users.update_user` Update user write - `tenable_vulnerability_management.users.change_password` Change password write - `tenable_vulnerability_management.users.change_user_role` Change user role write - and 9 more in this area **Workbenches 13** - `tenable_vulnerability_management.workbenches.list_asset_vulnerabilities` List asset vulnerabilities read - `tenable_vulnerability_management.workbenches.list_asset_vulnerabilities_for_plugin` List asset vulnerabilities for plugin read - `tenable_vulnerability_management.workbenches.list_assets` List assets read - `tenable_vulnerability_management.workbenches.list_vulnerabilities` List vulnerabilities read - `tenable_vulnerability_management.workbenches.check_export_status` Check export status read - `tenable_vulnerability_management.workbenches.delete_asset` Delete asset destructive - and 7 more in this area **Agent tasks 10** - `tenable_vulnerability_management.agent_tasks.add_agents_to_a_group` Add agents to a group write - `tenable_vulnerability_management.agent_tasks.add_agents_to_a_network` Add agents to a network write - `tenable_vulnerability_management.agent_tasks.assign_or_remove_profile` Assign or remove profile write - `tenable_vulnerability_management.agent_tasks.check_agent_group_operation_status` Check agent group operation status read - `tenable_vulnerability_management.agent_tasks.get_agent_task_status` Get agent task status read - `tenable_vulnerability_management.agent_tasks.remove_agents_from_group` Remove agents from group destructive - and 4 more in this area **Filters 10** - `tenable_vulnerability_management.filters.list_agent_filters` List agent filters read - `tenable_vulnerability_management.filters.list_asset_filters` List asset filters read - `tenable_vulnerability_management.filters.list_asset_filters_v2` List asset filters v2 read - `tenable_vulnerability_management.filters.list_credential_filters` List credential filters read - `tenable_vulnerability_management.filters.list_exposure_response_combination_filters` List exposure response combination filters read - `tenable_vulnerability_management.filters.list_report_filters` List report filters read - and 4 more in this area **Networks 10** - `tenable_vulnerability_management.networks.create_network` Create network write - `tenable_vulnerability_management.networks.get_network_details` Get network details read - `tenable_vulnerability_management.networks.list_networks` List networks read - `tenable_vulnerability_management.networks.update_network` Update network write - `tenable_vulnerability_management.networks.assign_scanners` Assign scanners write - `tenable_vulnerability_management.networks.bulk_assign_scanners` Bulk assign scanners write - and 4 more in this area **Scanner groups 10** - `tenable_vulnerability_management.scanner_groups.add_scanner_to_scanner_group` Add scanner to scanner group write - `tenable_vulnerability_management.scanner_groups.create_scanner_group` Create scanner group write - `tenable_vulnerability_management.scanner_groups.list_scan_routes` List scan routes read - `tenable_vulnerability_management.scanner_groups.list_scanner_group_details` List scanner group details read - `tenable_vulnerability_management.scanner_groups.delete_a_scanner_group` Delete a scanner group destructive - `tenable_vulnerability_management.scanner_groups.list_scanner_groups` List scanner groups read - and 4 more in this area **Shared collections 10** - `tenable_vulnerability_management.shared_collections.add_scan_configs_to_shared_collection` Add scan configs to shared collection write - `tenable_vulnerability_management.shared_collections.create_shared_collection` Create shared collection write - `tenable_vulnerability_management.shared_collections.get_shared_collection_details_by_name` Get shared collection details by name read - `tenable_vulnerability_management.shared_collections.list_scan_configs_in_shared_collection` List scan configs in shared collection read - `tenable_vulnerability_management.shared_collections.delete_shared_collection` Delete shared collection destructive - `tenable_vulnerability_management.shared_collections.get_job_status` Get job status read - and 4 more in this area **Asset attributes 9** - `tenable_vulnerability_management.asset_attributes.assign_attributes_to_asset` Assign attributes to asset write - `tenable_vulnerability_management.asset_attributes.create_attribute` Create attribute write - `tenable_vulnerability_management.asset_attributes.list_attributes` List attributes read - `tenable_vulnerability_management.asset_attributes.list_attributes_assigned_to_asset` List attributes assigned to asset read - `tenable_vulnerability_management.asset_attributes.assign_single_attribute_to_asset` Assign single attribute to asset write - `tenable_vulnerability_management.asset_attributes.delete_attribute` Delete attribute destructive - and 3 more in this area **Cloud connectors 9** - `tenable_vulnerability_management.cloud_connectors.create_connector` Create connector write - `tenable_vulnerability_management.cloud_connectors.download_cft_template` Download CFT Template read - `tenable_vulnerability_management.cloud_connectors.import_data` Import data write - `tenable_vulnerability_management.cloud_connectors.list_aws_cloudtrails` List AWS cloudtrails read - `tenable_vulnerability_management.cloud_connectors.delete_connector` Delete connector destructive - `tenable_vulnerability_management.cloud_connectors.download_arm_template` Download ARM Template read - and 3 more in this area **Was scans 9** - `tenable_vulnerability_management.was_scans.download_exported_scan` Download exported scan read - `tenable_vulnerability_management.was_scans.export_scan_results` Export scan results write - `tenable_vulnerability_management.was_scans.search_scans` Search scans read - `tenable_vulnerability_management.was_scans.search_vulnerabilities_for_scan` Search vulnerabilities for scan read - `tenable_vulnerability_management.was_scans.delete_scan` Delete scan destructive - `tenable_vulnerability_management.was_scans.get_scan_details` Get scan details read - and 3 more in this area **Assets 8** - `tenable_vulnerability_management.assets.get_asset_details` Get asset details read - `tenable_vulnerability_management.assets.import_assets` Import assets write - `tenable_vulnerability_management.assets.list_asset_import_jobs` List asset import jobs read - `tenable_vulnerability_management.assets.list_assets` List assets read - `tenable_vulnerability_management.assets.bulk_delete_assets` Bulk delete assets destructive - `tenable_vulnerability_management.assets.get_import_job_status` Get import job status read - and 2 more in this area **Permissions 8** - `tenable_vulnerability_management.permissions.create_permission` Create permission write - `tenable_vulnerability_management.permissions.list_permissions` List permissions read - `tenable_vulnerability_management.permissions.list_user_group_permissions` List user group permissions read - `tenable_vulnerability_management.permissions.list_user_permissions` List user permissions read - `tenable_vulnerability_management.permissions.delete_permission` Delete permission destructive - `tenable_vulnerability_management.permissions.get_current_user_permissions` Get current user permissions read - and 2 more in this area **Was configs 8** - `tenable_vulnerability_management.was_configs.create_scan_configuration` Create scan configuration write - `tenable_vulnerability_management.was_configs.get_remediation_scan_configuration` Get remediation scan configuration read - `tenable_vulnerability_management.was_configs.get_scan_configuration_details` Get scan configuration details read - `tenable_vulnerability_management.was_configs.search_scan_configurations` Search scan configurations read - `tenable_vulnerability_management.was_configs.delete_scan_configuration` Delete scan configuration destructive - `tenable_vulnerability_management.was_configs.get_scan_configuration_processing_status` Get scan configuration processing status read - and 2 more in this area **Access groups 7** - `tenable_vulnerability_management.access_groups.create_access_group` Create access group write - `tenable_vulnerability_management.access_groups.list_access_group_filters` List access group filters read - `tenable_vulnerability_management.access_groups.list_access_groups` List access groups read - `tenable_vulnerability_management.access_groups.list_asset_rule_filters` List asset rule filters read - `tenable_vulnerability_management.access_groups.delete_access_group` Delete access group destructive - `tenable_vulnerability_management.access_groups.get_access_group_details` Get access group details read - and 1 more in this area **Access groups V2 7** - `tenable_vulnerability_management.access_groups_v2.create_access_group` Create access group write - `tenable_vulnerability_management.access_groups_v2.list_access_group_filters` List access group filters read - `tenable_vulnerability_management.access_groups_v2.list_access_groups` List access groups read - `tenable_vulnerability_management.access_groups_v2.list_asset_rule_filters` List asset rule filters read - `tenable_vulnerability_management.access_groups_v2.delete_access_group` Delete access group destructive - `tenable_vulnerability_management.access_groups_v2.get_access_group_details` Get access group details read - and 1 more in this area **Agent groups 7** - `tenable_vulnerability_management.agent_groups.add_agent_to_group` Add agent to group write - `tenable_vulnerability_management.agent_groups.create_agent_group` Create agent group write - `tenable_vulnerability_management.agent_groups.get_agent_group_details` Get agent group details read - `tenable_vulnerability_management.agent_groups.list_agent_groups` List agent groups read - `tenable_vulnerability_management.agent_groups.delete_agent_group` Delete agent group destructive - `tenable_vulnerability_management.agent_groups.remove_agent_from_group` Remove agent from group destructive - and 1 more in this area **Agents 7** - `tenable_vulnerability_management.agents.get_agent_details` Get agent details read - `tenable_vulnerability_management.agents.get_agent_safe_mode_summary` Get agent safe mode summary read - `tenable_vulnerability_management.agents.list_agents` List agents read - `tenable_vulnerability_management.agents.list_agents_by_group` List agents by group read - `tenable_vulnerability_management.agents.rename_agent` Rename agent write - `tenable_vulnerability_management.agents.send_instructions_to_an_agent` Send instructions to an agent write - and 1 more in this area **Exposure initiatives 7** - `tenable_vulnerability_management.exposure_initiatives.create_initiative` Create initiative write - `tenable_vulnerability_management.exposure_initiatives.get_filter_details_for_an_initiative` Get filter details for an initiative read - `tenable_vulnerability_management.exposure_initiatives.get_initiative_details` Get initiative details read - `tenable_vulnerability_management.exposure_initiatives.list_initiatives` List initiatives read - `tenable_vulnerability_management.exposure_initiatives.delete_initiative` Delete initiative destructive - `tenable_vulnerability_management.exposure_initiatives.share_initiative` Share initiative write - and 1 more in this area **Groups 7** - `tenable_vulnerability_management.groups.create_group` Create group write - `tenable_vulnerability_management.groups.delete_group` Delete group destructive - `tenable_vulnerability_management.groups.list_groups` List groups read - `tenable_vulnerability_management.groups.update_group` Update group write - `tenable_vulnerability_management.groups.add_user_to_group` Add user to group write - `tenable_vulnerability_management.groups.list_users_in_group` List users in group read - and 1 more in this area **Policies 7** - `tenable_vulnerability_management.policies.create_policy` Create policy write - `tenable_vulnerability_management.policies.list_policies` List policies read - `tenable_vulnerability_management.policies.list_policy_details` List policy details read - `tenable_vulnerability_management.policies.update_policy` Update policy write - `tenable_vulnerability_management.policies.copy_policy` Copy policy write - `tenable_vulnerability_management.policies.delete_policy` Delete policy destructive - and 1 more in this area **Scan tasks 7** - `tenable_vulnerability_management.scan_tasks.convert_credentials` Convert credentials write - `tenable_vulnerability_management.scan_tasks.copy_scan` Copy scan write - `tenable_vulnerability_management.scan_tasks.import_uploaded_scan` Import uploaded scan write - `tenable_vulnerability_management.scan_tasks.test_scan_routes` Test scan routes read - `tenable_vulnerability_management.scan_tasks.enable_schedule` Enable schedule write - `tenable_vulnerability_management.scan_tasks.get_scan_count` Get scan count read - and 1 more in this area **Scanners 7** - `tenable_vulnerability_management.scanners.get_scanner_details` Get scanner details read - `tenable_vulnerability_management.scanners.list_aws_scan_targets` List AWS scan targets read - `tenable_vulnerability_management.scanners.list_running_scans` List running scans read - `tenable_vulnerability_management.scanners.list_scanners` List scanners read - `tenable_vulnerability_management.scanners.delete_scanner` Delete scanner destructive - `tenable_vulnerability_management.scanners.get_scanner_key` Get scanner key read - and 1 more in this area **Sensor profiles 7** - `tenable_vulnerability_management.sensor_profiles.clone_profile` Clone profile write - `tenable_vulnerability_management.sensor_profiles.create_profile` Create profile write - `tenable_vulnerability_management.sensor_profiles.list_available_plugin_sets` List available plugin sets read - `tenable_vulnerability_management.sensor_profiles.list_profiles` List profiles read - `tenable_vulnerability_management.sensor_profiles.delete_profile` Delete profile destructive - `tenable_vulnerability_management.sensor_profiles.get_profile_details` Get profile details read - and 1 more in this area **Asset exports 6** - `tenable_vulnerability_management.asset_exports.download_assets_chunk` Download assets chunk read - `tenable_vulnerability_management.asset_exports.export_assets_v1` Export assets v1 write - `tenable_vulnerability_management.asset_exports.export_assets_v2` Export assets v2 write - `tenable_vulnerability_management.asset_exports.list_asset_export_jobs` List asset export jobs read - `tenable_vulnerability_management.asset_exports.cancel_asset_export` Cancel asset export destructive - `tenable_vulnerability_management.asset_exports.get_assets_export_status` Get assets export status read **Credentials 6** - `tenable_vulnerability_management.credentials.create_managed_credential` Create managed credential write - `tenable_vulnerability_management.credentials.get_managed_credential_details` Get managed credential details read - `tenable_vulnerability_management.credentials.list_credential_types` List credential types read - `tenable_vulnerability_management.credentials.list_managed_credentials` List managed credentials read - `tenable_vulnerability_management.credentials.delete_managed_credential` Delete managed credential destructive - `tenable_vulnerability_management.credentials.update_managed_credential` Update managed credential write **Exposure combinations 6** - `tenable_vulnerability_management.exposure_combinations.create_combination` Create combination write - `tenable_vulnerability_management.exposure_combinations.get_combination_details` Get combination details read - `tenable_vulnerability_management.exposure_combinations.list_combination_timelines` List combination timelines read - `tenable_vulnerability_management.exposure_combinations.list_combinations` List combinations read - `tenable_vulnerability_management.exposure_combinations.delete_combination` Delete combination destructive - `tenable_vulnerability_management.exposure_combinations.update_combination` Update combination write **Ot connectors 6** - `tenable_vulnerability_management.ot_connectors.create_ot_connector` Create OT connector write - `tenable_vulnerability_management.ot_connectors.generate_linking_key` Generate linking key write - `tenable_vulnerability_management.ot_connectors.get_ot_connector_details` Get OT connector details read - `tenable_vulnerability_management.ot_connectors.list_ot_connectors` List OT connectors read - `tenable_vulnerability_management.ot_connectors.delete_ot_connector` Delete OT connector destructive - `tenable_vulnerability_management.ot_connectors.update_ot_connector` Update OT connector write **Recast rules 6** - `tenable_vulnerability_management.recast_rules.create_recast_rule` Create recast rule write - `tenable_vulnerability_management.recast_rules.get_recast_rule_details` Get recast rule details read - `tenable_vulnerability_management.recast_rules.list_recast_rule_filters` List recast rule filters read - `tenable_vulnerability_management.recast_rules.search_recast_rules` Search recast rules read - `tenable_vulnerability_management.recast_rules.delete_recast_rule` Delete recast rule destructive - `tenable_vulnerability_management.recast_rules.update_recast_rule` Update recast rule write **Roles 6** - `tenable_vulnerability_management.roles.create_role` Create role write - `tenable_vulnerability_management.roles.get_role_details` Get role details read - `tenable_vulnerability_management.roles.list_roles` List roles read - `tenable_vulnerability_management.roles.update_role` Update role write - `tenable_vulnerability_management.roles.delete_role` Delete role destructive - `tenable_vulnerability_management.roles.list_role_permissions` List role permissions read Scans **6** T1 inventory **6** T1 inventory exports **6** Was templates **6** Agent exclusions **5** Compliance exports **5** Exclusions **5** Pci asv attestations **5** Plugins **5** Remediation goals **5** Remediation projects **5** Scan control **5** Target groups **5** Vuln exports **5** Was exports **5** Was filters **5** Editor **4** Folders **4** Scanner tasks **4** T1 attack path exports **4** Was folders **4** Scan exports **3** Scan history **3** Scan status **3** Scanner profiles **3** Agent config **2** API security **2** Object permissions **2** Remediation scans **2** Reports **2** Scan results **2** Scanner config **2** Server **2** T1 attack paths **2** T1 exposure view **2** T1 tags **2** Vulnerabilities **2** Was plugins **2** Was vulnerabilities **2** Activity log **1** Pci asv scans **1** T1 connectors **1** Was applications **1** This index shows a sample of each area. All 398 actions, with their inputs and prices, are in the [catalogue](https://actionlake.com/console/catalogue), which a free sandbox key can search. Questions ## The Tenable Vulnerability Management MCP server, answered. **Is there a Tenable Vulnerability Management MCP server for Claude?** Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 398 Tenable Vulnerability Management actions across tags, users, workbenches and agent tasks, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Tenable Vulnerability Management. **What do I need to connect Tenable Vulnerability Management?** Tenable access key and Tenable secret key (the secretKey half generated alongside the access key). Plus your region. The free call account { op: "connections.requirements", service: "tenable_vulnerability_management" } lists exactly what to paste. **Can an AI agent delete or change things in Tenable Vulnerability Management?** Only if its key allows it, and only with an explicit confirmation. 56 Tenable Vulnerability Management actions are destructive, including delete user, delete group and delete network. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it. **Will an AI agent use up my Tenable Vulnerability Management API limit?** actionlake paces every call to the limits in the Tenable Vulnerability Management service file: 100 calls per 10 seconds per connection. Repeated reads are answered from cache (200 Tenable Vulnerability Management actions can be), which never reaches Tenable Vulnerability Management. **What does a Tenable Vulnerability Management action cost?** One upstream call, the only unit actionlake bills. A list that pages bills one call per page (398 Tenable Vulnerability Management actions page). Cache hits, searches, dry runs and calls Tenable Vulnerability Management refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. **Which Tenable Vulnerability Management API does it cover?** The Tenable cloud API (developer.tenable.com OpenAPI 3.1, fetched 2026-10-22) at cloud.tenable.com by default, or the base URL set when you connect. It is built from Tenable Vulnerability Management's documentation as read on 22 October 2026. 398 actions in 73 areas, each one in the signed service file (version 1.0.0). **Does actionlake keep my Tenable Vulnerability Management data, and where?** actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Tenable Vulnerability Management credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models. **Which AI clients can use it?** Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names. ## More connectors like Tenable Vulnerability Management Shares the most action names with - [Keycloak Admin REST API 14](https://actionlake.com/connectors/keycloak-admin-rest-api) - [OneLogin 14](https://actionlake.com/connectors/onelogin) - [Doppler 13](https://actionlake.com/connectors/doppler) - [SailPoint Identity Security Cloud 12](https://actionlake.com/connectors/sailpoint-identity-security-cloud) - [BeyondTrust Password Safe 10](https://actionlake.com/connectors/beyondtrust-password-safe) - [Cloudflare 10](https://actionlake.com/connectors/cloudflare) Joins with, on shared entities - [Fortinet FortiGate 5](https://actionlake.com/connectors/fortinet-fortigate) - [HaloPSA 4](https://actionlake.com/connectors/halopsa) - [Sophos Central 4](https://actionlake.com/connectors/sophos-central) - [Cisco Umbrella 4](https://actionlake.com/connectors/cisco-umbrella) - [Motive 4](https://actionlake.com/connectors/motive) - [ServiceNow 3](https://actionlake.com/connectors/servicenow) Browse - [All Identity & security connectors](https://actionlake.com/connectors/category/identity-and-security) - [All connectors](https://actionlake.com/connectors) - [How actionlake compares](https://actionlake.com/compare) actionlake is independent. It is not made or endorsed by Tenable Vulnerability Management; the name is the vendor's own. Counts are from the Tenable Vulnerability Management service file, version 1.0.0. ## Give your agent Tenable Vulnerability Management today. [Connect Tenable Vulnerability Management free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free. --- Source: https://actionlake.com/connectors/tenable-vulnerability-management More: https://actionlake.com/llms.txt