Nessus MCP Server

🚀 Nessus MCP Server

A Model Context Protocol (MCP) server for interacting with the Tenable Nessus vulnerability scanner. This server enables AI assistants to perform vulnerability scans and analysis via the MCP protocol.

✨ Features

• Vulnerability Scanning: Initiate and monitor vulnerability scans against specified targets.
• Scan Management: List, track, and retrieve results of completed scans.
• Vulnerability Analysis: Search for and obtain detailed information on specific vulnerabilities.
• Simulation Mode: A fully functional simulation mode for testing without the need for a Nessus API key.

🛠️ Tools

The server provides the following tools:

📦 Installation

Prerequisites

• Node.js 16 or higher
• TypeScript (for development)

Build from Source

1. Clone the repository:

   git clone https://github.com/Cyreslab-AI/nessus-mcp-server.git
   cd nessus-mcp-server
   

2. Install dependencies:

   npm install
   

3. Build the server:

   npm run build
   

💻 Usage

Run in Simulation Mode

By default, the server runs in simulation mode and does not require a Nessus API key:

node build/index.js

Connect to the Nessus API

To connect to a real Nessus instance, set the following environment variables:

NESSUS_URL=https://your-nessus-instance:8834
NESSUS_ACCESS_KEY=your-access-key
NESSUS_SECRET_KEY=your-secret-key

Then run the server:

node build/index.js

Use with Claude for Desktop

To use this server with Claude for Desktop:

1. Edit your Claude for Desktop configuration file:

   • macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
   • Windows: %APPDATA%\Claude\claude_desktop_config.json

2. Add the server configuration:

{
  "mcpServers": {
    "nessus": {
      "command": "node",
      "args": ["/path/to/nessus-mcp-server/build/index.js"],
      "env": {
        "NESSUS_URL": "https://your-nessus-instance:8834",
        "NESSUS_ACCESS_KEY": "your-access-key",
        "NESSUS_SECRET_KEY": "your-secret-key"
      }
    }
  }
}

In simulation mode, the env section can be omitted.

💻 Usage Examples

Basic Usage

Start a Scan

start_scan:
  target: 192.168.1.1
  scan_type: basic-network-scan

Get Scan Results

get_scan_results:
  scan_id: scan-1234567890

Search for Vulnerabilities

search_vulnerabilities:
  keyword: log4j

🔧 Development

Project Structure

• src/index.ts: The main entry point of the server.
• src/nessus-api.ts: A Nessus API client with mock fallback.
• src/mock-data.ts: Mock vulnerability data for testing.
• src/tools/: Tool implementations.
• src/utils/: Utility functions.

Add a New Tool

1. Define the tool schema and handler in the appropriate file in src/tools/.
2. Import and register the tool in src/index.ts.

📄 License

MIT

⚠️ Disclaimer

This server is not affiliated with or endorsed by Tenable or its Nessus trademark. Nessus is a trademark of Tenable, Inc.