Tenable MCP (Management Control Panel)

A Spring Boot application that provides a comprehensive interface for managing and visualizing Tenable.io security data.

Features

• Configuration Management
• Easy configuration of Tenable.io API credentials
• Support for custom API endpoints
• Configurable timeouts and retry policies

• Security Visualization
• Vulnerability distribution by severity
• Asset vulnerability trends
• Top vulnerable assets analysis
• Vulnerability age distribution
• Remediation progress tracking
• Asset risk score distribution
• Vulnerability category analysis

• Reporting
• Comprehensive CSV exports
• Detailed security posture summaries
• Customizable time range filtering

Prerequisites

• Java 17 or later
• Gradle 7.x or later (included in the project)
• Docker (optional, for containerized deployment)
• Tenable.io API credentials

Quick Start

1. Clone the repository:

git clone https://github.com/yourusername/tenablemcp.git
   cd tenablemcp

2. Run the setup script:

chmod +x setup.sh
   ./setup.sh

3. Update the configuration:

Edit src/main/resources/application.yml with your Tenable.io credentials:

tenable:
     apiKey: "your-api-key"
     accessKey: "your-access-key"
     secretKey: "your-secret-key"
     baseUrl: "https://cloud.tenable.com"

4. Run the application:

./gradlew bootRun

Running with Docker

1. Build the Docker image:

docker build -t tenable-mcp .

2. Run the container:

docker run -p 8080:8080 tenable-mcp

API Endpoints

Configuration

• GET /api/config
• Get current configuration
• Response: Current configuration settings

• POST /api/config
• Update configuration
• Body: JSON with configuration parameters
• Example:

{
      "accessKey": "your-access-key",
      "secretKey": "your-secret-key",
      "baseUrl": "https://cloud.tenable.com"
    }

Visualizations

• GET /api/v1/visualizations/report
• Get comprehensive security report
• Query Parameters:
• startTime (optional): ISO-8601 formatted start time
• endTime (optional): ISO-8601 formatted end time
• Response: JSON containing multiple visualizations

• GET /api/v1/visualizations/export/vulnerabilities
• Export report as CSV
• Query Parameters:
• startTime (optional): ISO-8601 formatted start time
• endTime (optional): ISO-8601 formatted end time
• Response: CSV file download

Visualization Types

1. Vulnerability Distribution

• Pie chart showing distribution by severity
• Color-coded for easy interpretation

2. Asset Vulnerability Trend

• Line chart showing vulnerability trends over time
• Helps track security posture improvements

3. Top Vulnerable Assets

• Bar chart of most vulnerable assets
• Helps prioritize remediation efforts

4. Vulnerability Age Distribution

• Pie chart showing age ranges of vulnerabilities
• Helps identify stale vulnerabilities

5. Remediation Progress

• Doughnut chart showing fixed vs. open vulnerabilities
• Tracks remediation effectiveness

6. Asset Risk Score Distribution

• Bar chart showing distribution of asset risk scores
• Helps identify high-risk assets

Development

Project Structure

src/main/kotlin/com/tenable/mcp/
├── config/         # Configuration classes
├── controller/     # REST controllers
├── service/        # Business logic
├── client/         # Tenable.io API client
└── model/          # Data models

Building

./gradlew clean build

Running Tests

./gradlew test

Contributing

1. Fork the repository

2. Create a feature branch

3. Commit your changes

4. Push to the branch

5. Create a Pull Request

License

This project is licensed under the MIT License - see the LICENSE file for details.

Support

For support, please open an issue in the GitHub repository or contact the maintainers.