1. Conduid
  2. Security
  3. Insightvm MCP Server
MCP server · Security

Insightvm MCP Server

by · github.com/sigma-zenko/insightvm-mcp-server

MCP server for Rapid7 InsightVM. Exposes asset triage, vulnerability lookup, scan management, reporting, remediation tracking, and port drift detection to any MCP-compatible LLM or agent.

Unclaimed last commit 7 months ago security
InstallView source
34Low

Scored a month ago · breakdown

About Insightvm MCP Server

Insightvm MCP Server is an MCP server published by sigma-zenko in the Security category: mCP server for Rapid7 InsightVM. Exposes asset triage, vulnerability lookup, scan management, reporting, remediation tracking, and port drift detection to any MCP-compatible LLM or agent.

The repository has 1 stars and 0 forks, with the last commit 7 months ago. Six months or more without a commit doesn't mean the server is broken, but check the open issues before depending on it in production.

Install

From source
git clone https://github.com/sigma-zenko/insightvm-mcp-server

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Tools (8)

insightvm_get_asset_detailFull detail for a single asset: hostname, OS fingerprint, MAC, addresses, risk scores, scan history, and site memberships.

Parameters not published.

insightvm_get_asset_servicesOpen ports and service fingerprints per asset. Fingerprint fields populate only when a credentialed internal scanner has run — absent for assets scanned by external unauthenticated scanners.

Parameters not published.

insightvm_get_asset_vulnerabilitiesVulnerabilities on an asset. Enriches each finding with title, severity, CVSS scores, CVEs, and exploit count via a batch join to `/vulnerabilities/{id}`.

Parameters not published.

insightvm_get_remediationRemediation solutions for a vulnerability. Fetches full solution detail for each reference returned by the API (the solutions endpoint returns hypermedia references only, not full objects).

Parameters not published.

insightvm_get_solution_detailFull detail for a specific remediation solution by ID, including type, affected platforms, time estimate, and step-by-step instructions.

Parameters not published.

insightvm_get_vulnerability_detailFull CVE/CVSS detail for a vulnerability including description, categories, PCI status, exploit count, and fix availability.

Parameters not published.

insightvm_search_assetsSearch assets with optional hostname/IP query, minimum risk score, and site scope. Automatically switches to full-fetch mode when `min_risk_score` and `site_id` are combined (API limitation).

Parameters not published.

insightvm_search_assets_by_criteriaAdvanced asset search using InsightVM filter criteria. Includes `last_scanned_before_days` for client-side date filtering (the `last-scan-date` API filter is silently ignored by InsightVM).

Parameters not published.

Ask AI

✦

Ask AI about Insightvm MCP Server

Powered by Claude · Grounded in docs

I know everything about Insightvm MCP Server. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Questions

About Insightvm MCP Server

How do I install Insightvm MCP Server?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Insightvm MCP Server safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Insightvm MCP Server still maintained?

The last commit was 7 months ago. That's long enough that you should check whether the maintainer is responding to issues before depending on it.