Back to Browse

Qualys MCP Server

Developer ToolsUse Caution4.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

Full Qualys portal management over MCP: VMDR, PC, WAS, Cloud Agent, Container Security & more

About

Full Qualys portal management over MCP: VMDR, PC, WAS, Cloud Agent, Container Security & more

Security Report

4.2
Use Caution4.2High Risk

This is a well-structured MCP server for Qualys portal management with proper authentication architecture and a thoughtful safety tier system for destructive operations. However, there are moderate concerns around credential handling in function parameters, insufficient input validation on some API parameters, and broad network/API access that, while appropriate for the server's purpose, warrants user awareness. The destructive operation gating mechanism is a strong security design element. Supply chain analysis found 4 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

3 files analyzed · 11 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

What You'll Need

Set these up before or after installing:

POD code (US1…KSA1) — auto‑fills API + Gateway URLsOptional

Environment variable: QUALYS_PLATFORM

Names the console in logs and the server nameOptional

Environment variable: QUALYS_CONSOLE_LABEL

true to register the destructive tierOptional

Environment variable: QUALYS_ENABLE_DESTRUCTIVE

Comma‑separated allowlist to scope a console to its licensed modulesOptional

Environment variable: QUALYS_MCP_MODULES

Optional shared secret for the HTTP transportOptional

Environment variable: QUALYS_MCP_API_KEY

QUALYS_USERNAMERequired
QUALYS_PASSWORDRequired

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-rijul170-qualys-mcp": {
      "env": {
        "QUALYS_PASSWORD": "your-qualys-password-here",
        "QUALYS_PLATFORM": "your-qualys-platform-here",
        "QUALYS_USERNAME": "your-qualys-username-here",
        "QUALYS_MCP_API_KEY": "your-qualys-mcp-api-key-here",
        "QUALYS_MCP_MODULES": "your-qualys-mcp-modules-here",
        "QUALYS_CONSOLE_LABEL": "your-qualys-console-label-here",
        "QUALYS_ENABLE_DESTRUCTIVE": "your-qualys-enable-destructive-here"
      },
      "args": [
        "qualys-mcp-full"
      ],
      "command": "uvx"
    }
  }
}

Reviews

No reviews yet

Be the first to review this server!

Qualys MCP Server - Full Qualys portal management over MCP: VMDR, PC, WAS, | MCP Marketplace