Qualys MCP Server

⚠️ Unofficial project. This is a personal project to showcase the viability of connecting AI assistants to Qualys via the Model Context Protocol. It is not affiliated with, endorsed by, or supported by Qualys, Inc.

An MCP server that connects AI assistants to Qualys security data. 7 workflow tools covering vulnerability management, cloud security, containers, compliance, remediation, and more. Pure Python, zero config beyond credentials.

📖 Full documentation →

What’s new in v0.2.9

• Streamable HTTP + Docker support — run the server as a persistent, network-reachable container instead of stdio-only (see Run with Docker below).
• Fixed per-asset detections in issue #229.
• Breaking: now requires Python ≥3.10 and fastmcp ≥2.11 — Python 3.9 installs are no longer supported.

Setup

Add to ~/Library/Application Support/Claude/claude_desktop_config.json:

{
  "mcpServers": {
    "qualys": {
      "command": "uvx",
      "args": ["qualys-mcp"],
      "env": {
        "QUALYS_USERNAME": "your-username",
        "QUALYS_PASSWORD": "your-password",
        "QUALYS_POD": "US2"
      }
    }
  }
}

Set QUALYS_POD to your platform POD — the server derives the correct API and gateway URLs automatically.

Supported pods: US1 US2 US3 US4 EU1 EU2 EU3 IN1 CA1 AE1 UK1 AU1 KSA1

Advanced: If you need to override the auto-derived URLs, set QUALYS_BASE_URL and QUALYS_GATEWAY_URL explicitly instead of QUALYS_POD. Explicit URLs take priority.

Requires uv: brew install uv or curl -LsSf https://astral.sh/uv/install.sh | sh

Updating

uvx caches the resolved build, so a plain uvx qualys-mcp keeps running the version it first downloaded — it does not auto-upgrade when a new release ships. To move to the latest version, clear the cache and restart Claude Desktop:

uv cache clean qualys-mcp

To pin (and control) the version explicitly, set it in your config args:

"args": ["[email protected]"]

pip install -U qualys-mcp only updates a pip-installed copy — it has no effect on the uvx-launched server.

Alternative

pip install qualys-mcp
qualys-mcp

Self-Signed Certificates

For environments with self-signed certs, add "QUALYS_SSL_VERIFY": "false" to the env block.

Run with Docker (Streamable HTTP)

Prefer a persistent, network-reachable server over the uvx stdio setup above? Run it as a container instead:

docker build -t qualys-mcp:latest .
cp .env.example .env
$EDITOR .env                      # set your Qualys credentials
docker compose up -d
claude mcp add --transport http qualys http://127.0.0.1:8000/mcp/

See docs/DOCKER.md for the full guide: environment variables, connecting other MCP clients, security notes, and troubleshooting.

Tools