Qualys MCP Server
Provides tools for investigating CVEs, assessing risk, checking compliance, planning remediation, and generating reports on the Qualys vulnerability management platform.
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@Qualys MCP Serverinvestigate CVE-2024-1234"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
Overview
A TypeScript MCP server that gives AI assistants (Claude, GitHub Copilot, Cursor) access to the Qualys platform. Investigate CVEs, assess risk, check compliance, plan remediation, and generate reports — all through natural language.
Capabilities
Category | What the AI Can Do |
Investigation | Deep-dive any CVE, threat actor, host, IP, or free-text topic |
Risk Assessment | Cross-domain risk: VMs, cloud (AWS/Azure/GCP), web apps, certificates |
Compliance | PCI, HIPAA, CIS, NIST, SOC2 posture checking |
Remediation | Patch priorities, deployment status, mitigation coverage |
Security Overview | Daily/weekly/monthly security briefing |
Reports | Generate, list, download Qualys reports |
Related MCP server: DocSentinel
Packages
Package | Description |
Standalone MCP server (npm, CLI) | |
VS Code extension with auto-registration |
Quick Start
Option 1: VS Code Extension
Install extension from visual studio marketplace
Configure settings:
Cmd+,→ search "Qualys MCP"Set username, password, and POD
The server appears automatically in the MCP Servers panel
Option 2: Standalone (Claude Desktop, Cursor)
npx qualys-mcp-serverOr add to your MCP config:
{
"mcpServers": {
"qualys": {
"command": "npx",
"args": ["-y", "qualys-mcp-server"],
"env": {
"QUALYS_MCP_USERNAME": "your-username",
"QUALYS_MCP_PASSWORD": "your-password",
"QUALYS_MCP_POD": "US1"
}
}
}
}Tools
Tool | Description |
| Deep-dive CVE, host, IP, or threat actor |
| Cross-domain risk assessment |
| Compliance posture for PCI/HIPAA/CIS/NIST/SOC2 |
| Patch priorities and mitigation planning |
| Security briefing (daily/weekly/monthly) |
| Report management (list/generate/download/status) |
| View and clear API response cache |
Development
pnpm install
pnpm run ci # typecheck + lint + format + test:coverage
pnpm run build # Build all packages
pnpm run package # Build VSIXLicense
MIT
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
No tool schema history has been recorded yet.
This server cannot be installed
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Connectors
MCP server unifying ERPs, CRMs, APIs and knowledge base for Claude, ChatGPT and Gemini.
MCP server for Pentest-Tools.com: run scans, manage findings and reports via your preffered LLM.
- mttrlyOAuthcom.mttrly
AI-powered incident management and server monitoring via MCP.
MCP server enabling AI agents to manage Bitrix24 features via standardized protocol
Related MCP Servers
- AlicenseBqualityDmaintenanceAn MCP server that integrates SAST, DAST, and SCA security tools to enable AI-driven vulnerability scanning and automated security reporting. It allows AI assistants to execute and analyze results from tools like Semgrep, OWASP ZAP, and Trivy within a DevSecOps workflow.6MIT
- AlicenseBqualityAmaintenanceMCP server for AI agent for cybersecurity: automate assessment of documents, questionnaires & reports. Multi-format parsing, RAG knowledge base,Risks, compliance gaps, remediations.286MIT
- AlicenseAqualityAmaintenanceAn MCP server for vulnerability management that provides tools for automated severity and CWE classification using NLP models. It enables AI agents to query the Vulnerability Lookup API for detailed CVE information and search for security vulnerabilities across various sources.1642AGPL 3.0
- AlicenseNot gradedqualityDmaintenanceEnables AI assistants to manage Nessus vulnerability scans, analyze results, and generate reports through the MCP protocol.2MIT
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/bhayanak/qualys-mcp-server'
If you have feedback or need assistance with the MCP directory API, please join our Discord server