Tool MCP
Collega un client AI al tuo account Vulnara. Accede come te, può leggere ciò che puoi leggere tu nella web app e non ottiene mai più del tuo ruolo.
https://vulnara.rso.dev/mcphl04e6MSMRY60LdpGh5rdMRQjkPxvldAYoqXdzo4La maggior parte dei tool legge soltanto. I pochi contrassegnati Modifica i dati sono offerti solo ai membri con accesso AI Scrittura e richiedono comunque il tuo ruolo.
Collega un client
- Apri Settings, poi Connectors, e scegli Add custom connector.
- Incolla l'URL MCP come indirizzo.
- In "Use your own OAuth client", incolla il client ID OAuth. Lascia vuoto il client secret.
- Salva, poi accedi con il tuo account Vulnara quando Claude te lo chiede.
Mai esposti ai client AI
- I token di accesso Git e tutto ciò che ne richiede uno come input
- I service account
- Gli inviti
- Piani, consumi, fatture e metodi di pagamento
- I valori in chiaro dei secret dietro un finding mascherato
- Indirizzi email e ID di webhook o canali
Tool (85)
add_risk_actionModifica i dati
Runs the mutation addRiskAction.
Operazione GraphQL: addRiskAction
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| input | RiskActionInput! |
assess_riskModifica i dati
Runs the mutation assessRisk.
Operazione GraphQL: assessRisk
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| input | AssessRiskInput! |
asset_context
Runs the query assetContext.
Operazione GraphQL: assetContext
| Nome | Tipo | Descrizione |
|---|---|---|
| targetType | RiskLinkTarget | |
| targetIds | [ID!] | |
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
cancel_taskModifica i dati
Runs the mutation cancelTask.
Operazione GraphQL: cancelTask
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! |
clear_finding_triageModifica i dati
Runs the mutation clearFindingTriage.
Operazione GraphQL: clearFindingTriage
| Nome | Tipo | Descrizione |
|---|---|---|
| repositoryId | ID! | |
| matchKey | String! |
commit_scans
Runs the query commitScans.
Operazione GraphQL: commitScans
| Nome | Tipo | Descrizione |
|---|---|---|
| list | List | |
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
create_riskModifica i dati
Runs the mutation createRisk.
Operazione GraphQL: createRisk
| Nome | Tipo | Descrizione |
|---|---|---|
| input | CreateRiskInput! |
dashboard_analytics
Runs the query dashboardAnalytics.
Operazione GraphQL: dashboardAnalytics
| Nome | Tipo | Descrizione |
|---|---|---|
| days | Int | |
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
dast_finding
Runs the query dastFinding.
Operazione GraphQL: dastFinding
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
dast_finding_triage
Runs the query dastFindingTriage.
Operazione GraphQL: dastFindingTriage
| Nome | Tipo | Descrizione |
|---|---|---|
| webTargetId | ID! | |
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
dast_finding_triage_history
Every decision ever taken on this web target's findings, newest first.
Operazione GraphQL: dastFindingTriageHistory
| Nome | Tipo | Descrizione |
|---|---|---|
| webTargetId | ID! | |
| matchKey | String | |
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
dast_findings
Runs the query dastFindings.
Operazione GraphQL: dastFindings
| Nome | Tipo | Descrizione |
|---|---|---|
| list | List | |
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
dismiss_taskModifica i dati
Runs the mutation dismissTask.
Operazione GraphQL: dismissTask
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! |
docker_scan_tool
Runs the query dockerScanTool.
Operazione GraphQL: dockerScanTool
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
docker_scan_tools
Runs the query dockerScanTools.
Operazione GraphQL: dockerScanTools
| Nome | Tipo | Descrizione |
|---|---|---|
| list | List | |
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
exploited_findings
KEV first, then by EPSS. epssMin defaults to 0.1.
Operazione GraphQL: exploitedFindings
| Nome | Tipo | Descrizione |
|---|---|---|
| epssMin | Float | |
| limit | Int | |
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
finding_corroboration
Cross-tool agreement for every secret found in a repository.
Operazione GraphQL: findingCorroboration
| Nome | Tipo | Descrizione |
|---|---|---|
| repositoryId | ID! | |
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
finding_triage
Decisions in force on a repository's findings. With matchKey, only that finding's - what a finding's drawer needs.
Operazione GraphQL: findingTriage
| Nome | Tipo | Descrizione |
|---|---|---|
| repositoryId | ID! | |
| matchKey | String | |
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
finding_triage_history
Every decision ever taken on this repository's findings, newest first.
Operazione GraphQL: findingTriageHistory
| Nome | Tipo | Descrizione |
|---|---|---|
| repositoryId | ID! | |
| matchKey | String | |
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
git_entities
Runs the query gitEntities.
Operazione GraphQL: gitEntities
| Nome | Tipo | Descrizione |
|---|---|---|
| list | List | |
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
git_entity
Runs the query gitEntity.
Operazione GraphQL: gitEntity
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
git_user
Runs the query gitUser.
Operazione GraphQL: gitUser
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
git_users
Runs the query gitUsers.
Operazione GraphQL: gitUsers
| Nome | Tipo | Descrizione |
|---|---|---|
| list | List | |
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
link_riskModifica i dati
Runs the mutation linkRisk.
Operazione GraphQL: linkRisk
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| input | LinkRiskInput! |
list_workspaces
Lists the workspaces you belong to. Pass one as the workspace argument of another tool.
Nessun argomento.
live
Runs the query live.
Nessun argomento.
my_ai_access
The caller's own AI write access in the current tenant.
Operazione GraphQL: myAiAccess
| Nome | Tipo | Descrizione |
|---|---|---|
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
my_user
Runs the query myUser.
Operazione GraphQL: myUser
| Nome | Tipo | Descrizione |
|---|---|---|
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
network
Runs the query network.
Operazione GraphQL: network
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
network_scan_finding
Runs the query networkScanFinding.
Operazione GraphQL: networkScanFinding
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
network_scan_findings
Runs the query networkScanFindings.
Operazione GraphQL: networkScanFindings
| Nome | Tipo | Descrizione |
|---|---|---|
| list | List | |
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
network_scan_result
Runs the query networkScanResult.
Operazione GraphQL: networkScanResult
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
network_scan_results
Runs the query networkScanResults.
Operazione GraphQL: networkScanResults
| Nome | Tipo | Descrizione |
|---|---|---|
| list | List | |
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
networks
Runs the query networks.
Operazione GraphQL: networks
| Nome | Tipo | Descrizione |
|---|---|---|
| list | List | |
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
notification_scope
Runs the query notificationScope.
Operazione GraphQL: notificationScope
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
notification_scopes
Runs the query notificationScopes.
Operazione GraphQL: notificationScopes
| Nome | Tipo | Descrizione |
|---|---|---|
| list | List | |
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
notifications
Runs the query notifications.
Operazione GraphQL: notifications
| Nome | Tipo | Descrizione |
|---|---|---|
| list | List | |
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
organization
Runs the query organization.
Operazione GraphQL: organization
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
organizations
Runs the query organizations.
Operazione GraphQL: organizations
| Nome | Tipo | Descrizione |
|---|---|---|
| list | List | |
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
programming_languages
Runs the query programmingLanguages.
Operazione GraphQL: programmingLanguages
| Nome | Tipo | Descrizione |
|---|---|---|
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
ready
Runs the query ready.
Nessun argomento.
remediation_template
Runs the query remediationTemplate.
Operazione GraphQL: remediationTemplate
| Nome | Tipo | Descrizione |
|---|---|---|
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
repositories
Runs the query repositories.
Operazione GraphQL: repositories
| Nome | Tipo | Descrizione |
|---|---|---|
| list | List | |
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
repository
Runs the query repository.
Operazione GraphQL: repository
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
repository_branches
Branch names for a repository, read from its git provider, so the scan form can offer real branches instead of free-text input.
Operazione GraphQL: repositoryBranches
| Nome | Tipo | Descrizione |
|---|---|---|
| repositoryId | ID! | |
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
repository_dependency_scan_finding_group_facet_counts
Severity and issue-state counts of the tenant-wide repositoryDependencyScanFindingGroups.
Operazione GraphQL: repositoryDependencyScanFindingGroupFacetCounts
| Nome | Tipo | Descrizione |
|---|---|---|
| list | List | |
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
repository_dependency_scan_finding_groups
Runs the query repositoryDependencyScanFindingGroups.
Operazione GraphQL: repositoryDependencyScanFindingGroups
| Nome | Tipo | Descrizione |
|---|---|---|
| list | List | |
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
repository_dependency_scan_findings
Runs the query repositoryDependencyScanFindings.
Operazione GraphQL: repositoryDependencyScanFindings
| Nome | Tipo | Descrizione |
|---|---|---|
| list | List | |
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
review_riskModifica i dati
Runs the mutation reviewRisk.
Operazione GraphQL: reviewRisk
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| input | ReviewRiskInput! |
risk
Runs the query risk.
Operazione GraphQL: risk
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
risk_register_export
Runs the query riskRegisterExport.
Operazione GraphQL: riskRegisterExport
| Nome | Tipo | Descrizione |
|---|---|---|
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
risk_settings
Runs the query riskSettings.
Operazione GraphQL: riskSettings
| Nome | Tipo | Descrizione |
|---|---|---|
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
risk_summary
Runs the query riskSummary.
Operazione GraphQL: riskSummary
| Nome | Tipo | Descrizione |
|---|---|---|
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
risks
Runs the query risks.
Operazione GraphQL: risks
| Nome | Tipo | Descrizione |
|---|---|---|
| filter | RiskFilter | |
| skip | Int | |
| limit | Int | |
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
save_asset_contextModifica i dati
Runs the mutation saveAssetContext.
Operazione GraphQL: saveAssetContext
| Nome | Tipo | Descrizione |
|---|---|---|
| input | AssetContextInput! |
scan_categories
Runs the query scanCategories.
Operazione GraphQL: scanCategories
| Nome | Tipo | Descrizione |
|---|---|---|
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
scan_finding_groups
Runs the query scanFindingGroups.
Operazione GraphQL: scanFindingGroups
| Nome | Tipo | Descrizione |
|---|---|---|
| list | List | |
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
scan_finding_match_group_facet_counts
Severity and issue-state counts of scanFindingMatchGroups under the same filters.
Operazione GraphQL: scanFindingMatchGroupFacetCounts
| Nome | Tipo | Descrizione |
|---|---|---|
| list | List | |
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
scan_finding_match_groups
Findings grouped by cross-tool identity, one row per real secret.
Operazione GraphQL: scanFindingMatchGroups
| Nome | Tipo | Descrizione |
|---|---|---|
| list | List | |
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
scan_findings
Runs the query scanFindings.
Operazione GraphQL: scanFindings
| Nome | Tipo | Descrizione |
|---|---|---|
| list | List | |
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
scan_result
Runs the query scanResult.
Operazione GraphQL: scanResult
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
scan_results
Runs the query scanResults.
Operazione GraphQL: scanResults
| Nome | Tipo | Descrizione |
|---|---|---|
| list | List | |
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
scan_schedule
Runs the query scanSchedule.
Operazione GraphQL: scanSchedule
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
scan_schedules
Runs the query scanSchedules.
Operazione GraphQL: scanSchedules
| Nome | Tipo | Descrizione |
|---|---|---|
| list | List | |
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
set_finding_triageModifica i dati
Runs the mutation setFindingTriage.
Operazione GraphQL: setFindingTriage
| Nome | Tipo | Descrizione |
|---|---|---|
| input | SetFindingTriageInput! |
set_git_entity_ignore_pathsModifica i dati
Runs the mutation setGitEntityIgnorePaths.
Operazione GraphQL: setGitEntityIgnorePaths
| Nome | Tipo | Descrizione |
|---|---|---|
| input | SetGitEntityIgnorePathsInput! |
set_repository_enabledModifica i dati
Runs the mutation setRepositoryEnabled.
Operazione GraphQL: setRepositoryEnabled
| Nome | Tipo | Descrizione |
|---|---|---|
| input | SetRepositoryEnabledInput! |
set_repository_ignore_pathsModifica i dati
Runs the mutation setRepositoryIgnorePaths.
Operazione GraphQL: setRepositoryIgnorePaths
| Nome | Tipo | Descrizione |
|---|---|---|
| input | SetRepositoryIgnorePathsInput! |
start_network_scanModifica i dati
Runs the mutation startNetworkScan.
Operazione GraphQL: startNetworkScan
| Nome | Tipo | Descrizione |
|---|---|---|
| input | StartNetworkScanInput! |
start_repository_scanModifica i dati
Names one scanner by id. Superseded by startRepositoryCategoryScan, and kept working: it is what the GitHub Action's scan-tools input and the CLI flag send from customers' own repositories.
Operazione GraphQL: startRepositoryScan
| Nome | Tipo | Descrizione |
|---|---|---|
| input | StartRepositoryScanInput! |
statistics
Runs the query statistics.
Operazione GraphQL: statistics
| Nome | Tipo | Descrizione |
|---|---|---|
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
task
Runs the query task.
Operazione GraphQL: task
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
tasks
Runs the query tasks.
Operazione GraphQL: tasks
| Nome | Tipo | Descrizione |
|---|---|---|
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
tenant_posture
Runs the query tenantPosture.
Operazione GraphQL: tenantPosture
| Nome | Tipo | Descrizione |
|---|---|---|
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
terms_acceptance
The caller's own acceptance of the Platform Terms in the current tenant.
Operazione GraphQL: termsAcceptance
| Nome | Tipo | Descrizione |
|---|---|---|
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
test_notification_scopeModifica i dati
Send a test notification to the rule's channel and record its reachability as the channel status.
Operazione GraphQL: testNotificationScope
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! |
triage_exceptions
Every exception in force across the tenant, code and DAST. With expiringWithinDays, only those lapsing within it.
Operazione GraphQL: triageExceptions
| Nome | Tipo | Descrizione |
|---|---|---|
| expiringWithinDays | Int | |
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
unread_notification_count
Runs the query unreadNotificationCount.
Operazione GraphQL: unreadNotificationCount
| Nome | Tipo | Descrizione |
|---|---|---|
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
update_riskModifica i dati
Runs the mutation updateRisk.
Operazione GraphQL: updateRisk
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| input | UpdateRiskInput! |
update_risk_actionModifica i dati
Runs the mutation updateRiskAction.
Operazione GraphQL: updateRiskAction
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| actionId | ID! | |
| input | UpdateRiskActionInput! |
web_scan_result
Runs the query webScanResult.
Operazione GraphQL: webScanResult
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
web_scan_results
Runs the query webScanResults.
Operazione GraphQL: webScanResults
| Nome | Tipo | Descrizione |
|---|---|---|
| list | List | |
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
web_target
Runs the query webTarget.
Operazione GraphQL: webTarget
| Nome | Tipo | Descrizione |
|---|---|---|
| id | ID! | |
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
web_targets
Runs the query webTargets.
Operazione GraphQL: webTargets
| Nome | Tipo | Descrizione |
|---|---|---|
| list | List | |
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |
workspace_overview
Runs the query workspaceOverview.
Operazione GraphQL: workspaceOverview
| Nome | Tipo | Descrizione |
|---|---|---|
| gitEntityId | ID! | |
| workspace | String | Which workspace to act in. Omit it when you belong to only one. |