Tenable MCP (Management Control Panel)

A Spring Boot application that provides a comprehensive interface for managing and visualizing Tenable.io security data.

Features

• Configuration Management
  • Easy configuration of Tenable.io API credentials
  • Support for custom API endpoints
  • Configurable timeouts and retry policies

• Security Visualization
  • Vulnerability distribution by severity
  • Asset vulnerability trends
  • Top vulnerable assets analysis
  • Vulnerability age distribution
  • Remediation progress tracking
  • Asset risk score distribution
  • Vulnerability category analysis

• Reporting
  • Comprehensive CSV exports
  • Detailed security posture summaries
  • Customizable time range filtering

Prerequisites

• Java 17 or later
• Gradle 7.x or later (included in the project)
• Docker (optional, for containerized deployment)
• Tenable.io API credentials

Quick Start

1. Clone the repository:

git clone https://github.com/yourusername/tenablemcp.git
   cd tenablemcp

2. Run the setup script:

chmod +x setup.sh
   ./setup.sh

3. Update the configuration:

Edit `src/main/resources/application.yml` with your Tenable.io credentials:

tenable:
     apiKey: "your-api-key"
     accessKey: "your-access-key"
     secretKey: "your-secret-key"
     baseUrl: "https://cloud.tenable.com"

4. Run the application:

./gradlew bootRun

Running with Docker

1. Build the Docker image:

docker build -t tenable-mcp .

2. Run the container:

docker run -p 8080:8080 tenable-mcp

API Endpoints

Configuration

• `GET /api/config`
  • Get current configuration
  • Response: Current configuration settings

• `POST /api/config`
  • Update configuration
  • Body: JSON with configuration parameters
  • Example:

{
      "accessKey": "your-access-key",
      "secretKey": "your-secret-key",
      "baseUrl": "https://cloud.tenable.com"
    }

Visualizations

• `GET /api/v1/visualizations/report`
  • Get comprehensive security report
  • Query Parameters:
    • `startTime` (optional): ISO-8601 formatted start time
    • `endTime` (optional): ISO-8601 formatted end time
  • Response: JSON containing multiple visualizations

• `GET /api/v1/visualizations/export/vulnerabilities`
  • Export report as CSV
  • Query Parameters:
    • `startTime` (optional): ISO-8601 formatted start time
    • `endTime` (optional): ISO-8601 formatted end time
  • Response: CSV file download

Visualization Types

1. Vulnerability Distribution

2. Asset Vulnerability Trend

3. Top Vulnerable Assets

4. Vulnerability Age Distribution

5. Remediation Progress

6. Asset Risk Score Distribution

Development

Project Structure

src/main/kotlin/com/tenable/mcp/
├── config/         # Configuration classes
├── controller/     # REST controllers
├── service/        # Business logic
├── client/         # Tenable.io API client
└── model/          # Data models

Building

./gradlew clean build

Running Tests

./gradlew test

Contributing

1. Fork the repository

2. Create a feature branch

3. Commit your changes

4. Push to the branch

5. Create a Pull Request

License

This project is licensed under the MIT License - see the LICENSE file for details.

Support

For support, please open an issue in the GitHub repository or contact the maintainers.