Vai al contenuto principale

Tool MCP

Collega un client AI al tuo account Vulnara. Accede come te, può leggere ciò che puoi leggere tu nella web app e non ottiene mai più del tuo ruolo.

URL MCP
https://vulnara.rso.dev/mcp
Client ID OAuth
hl04e6MSMRY60LdpGh5rdMRQjkPxvldAYoqXdzo4

La maggior parte dei tool legge soltanto. I pochi contrassegnati Modifica i dati sono offerti solo ai membri con accesso AI Scrittura e richiedono comunque il tuo ruolo.

Collega un client

  1. Apri Settings, poi Connectors, e scegli Add custom connector.
  2. Incolla l'URL MCP come indirizzo.
  3. In "Use your own OAuth client", incolla il client ID OAuth. Lascia vuoto il client secret.
  4. Salva, poi accedi con il tuo account Vulnara quando Claude te lo chiede.

Mai esposti ai client AI

  • I token di accesso Git e tutto ciò che ne richiede uno come input
  • I service account
  • Gli inviti
  • Piani, consumi, fatture e metodi di pagamento
  • I valori in chiaro dei secret dietro un finding mascherato
  • Indirizzi email e ID di webhook o canali

Tool (85)

add_risk_actionModifica i dati

Runs the mutation addRiskAction.

Operazione GraphQL: addRiskAction

NomeTipoDescrizione
idID!
inputRiskActionInput!

assess_riskModifica i dati

Runs the mutation assessRisk.

Operazione GraphQL: assessRisk

NomeTipoDescrizione
idID!
inputAssessRiskInput!

asset_context

Runs the query assetContext.

Operazione GraphQL: assetContext

NomeTipoDescrizione
targetTypeRiskLinkTarget
targetIds[ID!]
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

cancel_taskModifica i dati

Runs the mutation cancelTask.

Operazione GraphQL: cancelTask

NomeTipoDescrizione
idID!

clear_finding_triageModifica i dati

Runs the mutation clearFindingTriage.

Operazione GraphQL: clearFindingTriage

NomeTipoDescrizione
repositoryIdID!
matchKeyString!

commit_scans

Runs the query commitScans.

Operazione GraphQL: commitScans

NomeTipoDescrizione
listList
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

create_riskModifica i dati

Runs the mutation createRisk.

Operazione GraphQL: createRisk

NomeTipoDescrizione
inputCreateRiskInput!

dashboard_analytics

Runs the query dashboardAnalytics.

Operazione GraphQL: dashboardAnalytics

NomeTipoDescrizione
daysInt
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

dast_finding

Runs the query dastFinding.

Operazione GraphQL: dastFinding

NomeTipoDescrizione
idID!
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

dast_finding_triage

Runs the query dastFindingTriage.

Operazione GraphQL: dastFindingTriage

NomeTipoDescrizione
webTargetIdID!
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

dast_finding_triage_history

Every decision ever taken on this web target's findings, newest first.

Operazione GraphQL: dastFindingTriageHistory

NomeTipoDescrizione
webTargetIdID!
matchKeyString
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

dast_findings

Runs the query dastFindings.

Operazione GraphQL: dastFindings

NomeTipoDescrizione
listList
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

dismiss_taskModifica i dati

Runs the mutation dismissTask.

Operazione GraphQL: dismissTask

NomeTipoDescrizione
idID!

docker_scan_tool

Runs the query dockerScanTool.

Operazione GraphQL: dockerScanTool

NomeTipoDescrizione
idID!
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

docker_scan_tools

Runs the query dockerScanTools.

Operazione GraphQL: dockerScanTools

NomeTipoDescrizione
listList
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

exploited_findings

KEV first, then by EPSS. epssMin defaults to 0.1.

Operazione GraphQL: exploitedFindings

NomeTipoDescrizione
epssMinFloat
limitInt
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

finding_corroboration

Cross-tool agreement for every secret found in a repository.

Operazione GraphQL: findingCorroboration

NomeTipoDescrizione
repositoryIdID!
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

finding_triage

Decisions in force on a repository's findings. With matchKey, only that finding's - what a finding's drawer needs.

Operazione GraphQL: findingTriage

NomeTipoDescrizione
repositoryIdID!
matchKeyString
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

finding_triage_history

Every decision ever taken on this repository's findings, newest first.

Operazione GraphQL: findingTriageHistory

NomeTipoDescrizione
repositoryIdID!
matchKeyString
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

git_entities

Runs the query gitEntities.

Operazione GraphQL: gitEntities

NomeTipoDescrizione
listList
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

git_entity

Runs the query gitEntity.

Operazione GraphQL: gitEntity

NomeTipoDescrizione
idID!
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

git_user

Runs the query gitUser.

Operazione GraphQL: gitUser

NomeTipoDescrizione
idID!
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

git_users

Runs the query gitUsers.

Operazione GraphQL: gitUsers

NomeTipoDescrizione
listList
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

list_workspaces

Lists the workspaces you belong to. Pass one as the workspace argument of another tool.

Nessun argomento.

live

Runs the query live.

Nessun argomento.

my_ai_access

The caller's own AI write access in the current tenant.

Operazione GraphQL: myAiAccess

NomeTipoDescrizione
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

my_user

Runs the query myUser.

Operazione GraphQL: myUser

NomeTipoDescrizione
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

network

Runs the query network.

Operazione GraphQL: network

NomeTipoDescrizione
idID!
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

network_scan_finding

Runs the query networkScanFinding.

Operazione GraphQL: networkScanFinding

NomeTipoDescrizione
idID!
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

network_scan_findings

Runs the query networkScanFindings.

Operazione GraphQL: networkScanFindings

NomeTipoDescrizione
listList
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

network_scan_result

Runs the query networkScanResult.

Operazione GraphQL: networkScanResult

NomeTipoDescrizione
idID!
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

network_scan_results

Runs the query networkScanResults.

Operazione GraphQL: networkScanResults

NomeTipoDescrizione
listList
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

networks

Runs the query networks.

Operazione GraphQL: networks

NomeTipoDescrizione
listList
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

notification_scope

Runs the query notificationScope.

Operazione GraphQL: notificationScope

NomeTipoDescrizione
idID!
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

notification_scopes

Runs the query notificationScopes.

Operazione GraphQL: notificationScopes

NomeTipoDescrizione
listList
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

notifications

Runs the query notifications.

Operazione GraphQL: notifications

NomeTipoDescrizione
listList
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

organization

Runs the query organization.

Operazione GraphQL: organization

NomeTipoDescrizione
idID!
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

organizations

Runs the query organizations.

Operazione GraphQL: organizations

NomeTipoDescrizione
listList
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

programming_languages

Runs the query programmingLanguages.

Operazione GraphQL: programmingLanguages

NomeTipoDescrizione
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

ready

Runs the query ready.

Nessun argomento.

remediation_template

Runs the query remediationTemplate.

Operazione GraphQL: remediationTemplate

NomeTipoDescrizione
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

repositories

Runs the query repositories.

Operazione GraphQL: repositories

NomeTipoDescrizione
listList
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

repository

Runs the query repository.

Operazione GraphQL: repository

NomeTipoDescrizione
idID!
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

repository_branches

Branch names for a repository, read from its git provider, so the scan form can offer real branches instead of free-text input.

Operazione GraphQL: repositoryBranches

NomeTipoDescrizione
repositoryIdID!
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

repository_dependency_scan_finding_group_facet_counts

Severity and issue-state counts of the tenant-wide repositoryDependencyScanFindingGroups.

Operazione GraphQL: repositoryDependencyScanFindingGroupFacetCounts

NomeTipoDescrizione
listList
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

repository_dependency_scan_finding_groups

Runs the query repositoryDependencyScanFindingGroups.

Operazione GraphQL: repositoryDependencyScanFindingGroups

NomeTipoDescrizione
listList
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

repository_dependency_scan_findings

Runs the query repositoryDependencyScanFindings.

Operazione GraphQL: repositoryDependencyScanFindings

NomeTipoDescrizione
listList
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

review_riskModifica i dati

Runs the mutation reviewRisk.

Operazione GraphQL: reviewRisk

NomeTipoDescrizione
idID!
inputReviewRiskInput!

risk

Runs the query risk.

Operazione GraphQL: risk

NomeTipoDescrizione
idID!
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

risk_register_export

Runs the query riskRegisterExport.

Operazione GraphQL: riskRegisterExport

NomeTipoDescrizione
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

risk_settings

Runs the query riskSettings.

Operazione GraphQL: riskSettings

NomeTipoDescrizione
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

risk_summary

Runs the query riskSummary.

Operazione GraphQL: riskSummary

NomeTipoDescrizione
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

risks

Runs the query risks.

Operazione GraphQL: risks

NomeTipoDescrizione
filterRiskFilter
skipInt
limitInt
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

save_asset_contextModifica i dati

Runs the mutation saveAssetContext.

Operazione GraphQL: saveAssetContext

NomeTipoDescrizione
inputAssetContextInput!

scan_categories

Runs the query scanCategories.

Operazione GraphQL: scanCategories

NomeTipoDescrizione
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

scan_finding_groups

Runs the query scanFindingGroups.

Operazione GraphQL: scanFindingGroups

NomeTipoDescrizione
listList
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

scan_finding_match_group_facet_counts

Severity and issue-state counts of scanFindingMatchGroups under the same filters.

Operazione GraphQL: scanFindingMatchGroupFacetCounts

NomeTipoDescrizione
listList
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

scan_finding_match_groups

Findings grouped by cross-tool identity, one row per real secret.

Operazione GraphQL: scanFindingMatchGroups

NomeTipoDescrizione
listList
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

scan_findings

Runs the query scanFindings.

Operazione GraphQL: scanFindings

NomeTipoDescrizione
listList
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

scan_result

Runs the query scanResult.

Operazione GraphQL: scanResult

NomeTipoDescrizione
idID!
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

scan_results

Runs the query scanResults.

Operazione GraphQL: scanResults

NomeTipoDescrizione
listList
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

scan_schedule

Runs the query scanSchedule.

Operazione GraphQL: scanSchedule

NomeTipoDescrizione
idID!
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

scan_schedules

Runs the query scanSchedules.

Operazione GraphQL: scanSchedules

NomeTipoDescrizione
listList
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

set_finding_triageModifica i dati

Runs the mutation setFindingTriage.

Operazione GraphQL: setFindingTriage

NomeTipoDescrizione
inputSetFindingTriageInput!

set_git_entity_ignore_pathsModifica i dati

Runs the mutation setGitEntityIgnorePaths.

Operazione GraphQL: setGitEntityIgnorePaths

NomeTipoDescrizione
inputSetGitEntityIgnorePathsInput!

set_repository_enabledModifica i dati

Runs the mutation setRepositoryEnabled.

Operazione GraphQL: setRepositoryEnabled

NomeTipoDescrizione
inputSetRepositoryEnabledInput!

set_repository_ignore_pathsModifica i dati

Runs the mutation setRepositoryIgnorePaths.

Operazione GraphQL: setRepositoryIgnorePaths

NomeTipoDescrizione
inputSetRepositoryIgnorePathsInput!

start_network_scanModifica i dati

Runs the mutation startNetworkScan.

Operazione GraphQL: startNetworkScan

NomeTipoDescrizione
inputStartNetworkScanInput!

start_repository_scanModifica i dati

Names one scanner by id. Superseded by startRepositoryCategoryScan, and kept working: it is what the GitHub Action's scan-tools input and the CLI flag send from customers' own repositories.

Operazione GraphQL: startRepositoryScan

NomeTipoDescrizione
inputStartRepositoryScanInput!

statistics

Runs the query statistics.

Operazione GraphQL: statistics

NomeTipoDescrizione
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

task

Runs the query task.

Operazione GraphQL: task

NomeTipoDescrizione
idID!
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

tasks

Runs the query tasks.

Operazione GraphQL: tasks

NomeTipoDescrizione
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

tenant_posture

Runs the query tenantPosture.

Operazione GraphQL: tenantPosture

NomeTipoDescrizione
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

terms_acceptance

The caller's own acceptance of the Platform Terms in the current tenant.

Operazione GraphQL: termsAcceptance

NomeTipoDescrizione
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

test_notification_scopeModifica i dati

Send a test notification to the rule's channel and record its reachability as the channel status.

Operazione GraphQL: testNotificationScope

NomeTipoDescrizione
idID!

triage_exceptions

Every exception in force across the tenant, code and DAST. With expiringWithinDays, only those lapsing within it.

Operazione GraphQL: triageExceptions

NomeTipoDescrizione
expiringWithinDaysInt
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

unread_notification_count

Runs the query unreadNotificationCount.

Operazione GraphQL: unreadNotificationCount

NomeTipoDescrizione
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

update_riskModifica i dati

Runs the mutation updateRisk.

Operazione GraphQL: updateRisk

NomeTipoDescrizione
idID!
inputUpdateRiskInput!

update_risk_actionModifica i dati

Runs the mutation updateRiskAction.

Operazione GraphQL: updateRiskAction

NomeTipoDescrizione
idID!
actionIdID!
inputUpdateRiskActionInput!

web_scan_result

Runs the query webScanResult.

Operazione GraphQL: webScanResult

NomeTipoDescrizione
idID!
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

web_scan_results

Runs the query webScanResults.

Operazione GraphQL: webScanResults

NomeTipoDescrizione
listList
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

web_target

Runs the query webTarget.

Operazione GraphQL: webTarget

NomeTipoDescrizione
idID!
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

web_targets

Runs the query webTargets.

Operazione GraphQL: webTargets

NomeTipoDescrizione
listList
workspaceStringWhich workspace to act in. Omit it when you belong to only one.

workspace_overview

Runs the query workspaceOverview.

Operazione GraphQL: workspaceOverview

NomeTipoDescrizione
gitEntityIdID!
workspaceStringWhich workspace to act in. Omit it when you belong to only one.