{"openapi":"3.1.0","info":{"title":"Tenable Vulnerability Management (BYOK) API","version":"0.1.0","description":"Tenable Vulnerability Management (BYOK) lets an AI assistant read your own Tenable Vulnerability Management data through the Tenable Vulnerability Management API with a key you supply (Tenable API keys as one string: accessKey=ACCESS_KEY;secretKey=SECRET_KEY). Read-only: 12 tools (list_scans, get_scan, get_scan_history, get_scan_status, list_assets, get_asset, list_vulnerabilities,...\n\nEvery operation is read-only or compute-only. The same tools are available over MCP (streamable HTTP) at https://byok-tenable.connectorbay.com/mcp.","contact":{"name":"Unify Dynamics LLC","email":"agent@connectorbay.com","url":"https://connectorbay.com/byok-tenable/docs"},"termsOfService":"https://connectorbay.com/byok-tenable/terms"},"servers":[{"url":"https://byok-tenable.connectorbay.com"}],"externalDocs":{"url":"https://connectorbay.com/byok-tenable/docs"},"security":[{"upstreamKey":[]}],"components":{"securitySchemes":{"bearer":{"type":"http","scheme":"bearer","description":"Optional. A Pro API key raises rate limits; no credentials are required."},"upstreamKey":{"type":"apiKey","in":"header","name":"X-Upstream-Key","description":"Your own key for the service this connector wraps (bring your own key). Used for that one call only; never stored, logged or cached."}},"schemas":{"Error":{"type":"object","properties":{"ok":{"const":false},"error":{"type":"object"}}}}},"paths":{"/v1/tools/list_scans":{"post":{"operationId":"list_scans","summary":"List scan configurations you can view, with status, owner, last start time, progress and schedule details. Use for \"Whic","description":"List scan configurations you can view, with status, owner, last start time, progress and schedule details. Use for \"Which Tenable scans are running or failed recently\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{"folder_id":{"anyOf":[{"minimum":1,"type":"integer"},{"type":"null"}],"default":null,"description":"Only scans in this folder id (see list_folders).","title":"Folder Id"},"last_modification_date":{"anyOf":[{"minimum":0,"type":"integer"},{"type":"null"}],"default":null,"description":"Only scans active or run on or after this Unix time in seconds.","title":"Last Modification Date"}},"title":"list_scansArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}},"/v1/tools/get_scan":{"post":{"operationId":"get_scan","summary":"Get the results of one scan (latest run, or a past run via history_id): scan info, host list with severity counts, and v","description":"Get the results of one scan (latest run, or a past run via history_id): scan info, host list with severity counts, and vulnerabilities found. Use for \"What did Tenable scan 42 find\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{"scan_id":{"description":"Scan identifier: the numeric id or the schedule_uuid from list_scans.","maxLength":80,"title":"Scan Id","type":"string"},"history_id":{"anyOf":[{"minimum":1,"type":"integer"},{"type":"null"}],"default":null,"description":"Identifier of an earlier run from get_scan_history; leave out for the latest run.","title":"History Id"}},"required":["scan_id"],"title":"get_scanArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}},"/v1/tools/get_scan_history":{"post":{"operationId":"get_scan_history","summary":"List the past runs of one scan with status, start and end times and whether results are archived. Use for \"When did Tena","description":"List the past runs of one scan with status, start and end times and whether results are archived. Use for \"When did Tenable scan 42 run before\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{"scan_id":{"description":"Scan identifier: the numeric id or the schedule_uuid from list_scans.","maxLength":80,"title":"Scan Id","type":"string"},"exclude_rollover":{"anyOf":[{"type":"boolean"},{"type":"null"}],"default":true,"description":"True to leave out rollover scans.","title":"Exclude Rollover"},"limit":{"anyOf":[{"maximum":200,"minimum":1,"type":"integer"},{"type":"null"}],"default":50,"description":"How many runs to return (default 50).","title":"Limit"},"offset":{"anyOf":[{"minimum":0,"type":"integer"},{"type":"null"}],"default":0,"description":"Index of the first run to return.","title":"Offset"}},"required":["scan_id"],"title":"get_scan_historyArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}},"/v1/tools/get_scan_status":{"post":{"operationId":"get_scan_status","summary":"Get only the latest status of one scan (for example running, completed, canceled). Use for \"Is Tenable scan 42 finished\"","description":"Get only the latest status of one scan (for example running, completed, canceled). Use for \"Is Tenable scan 42 finished\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{"scan_id":{"description":"Scan identifier: the numeric id or the schedule_uuid from list_scans.","maxLength":80,"title":"Scan Id","type":"string"}},"required":["scan_id"],"title":"get_scan_statusArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}},"/v1/tools/list_assets":{"post":{"operationId":"list_assets","summary":"List assets Tenable has identified, with IP addresses, FQDNs, operating systems, last seen time, ACR and exposure scores","description":"List assets Tenable has identified, with IP addresses, FQDNs, operating systems, last seen time, ACR and exposure scores and sources. May hold up to 5,000 assets; the answer is trimmed. Use for \"Which assets does Tenable know about\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{},"title":"list_assetsArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}},"/v1/tools/get_asset":{"post":{"operationId":"get_asset","summary":"Get one asset by UUID: names, addresses, operating system, tags, installed software, scores and first and last seen time","description":"Get one asset by UUID: names, addresses, operating system, tags, installed software, scores and first and last seen times. Use for \"Show me Tenable asset details for a UUID\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{"asset_uuid":{"description":"Asset UUID from list_assets.","maxLength":64,"title":"Asset Uuid","type":"string"}},"required":["asset_uuid"],"title":"get_assetArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}},"/v1/tools/list_vulnerabilities":{"post":{"operationId":"list_vulnerabilities","summary":"List recorded vulnerabilities across all assets (grouped by plugin) with severity, VPR score, CVSS scores, and how many ","description":"List recorded vulnerabilities across all assets (grouped by plugin) with severity, VPR score, CVSS scores, and how many times each was found. Severity 0 is info and 4 is critical. Use for \"What are my most severe Tenable vulnerabilities\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{"date_range":{"anyOf":[{"maximum":3650,"minimum":1,"type":"integer"},{"type":"null"}],"default":null,"description":"How many days of data, counting back from today, to include (for example 30).","title":"Date Range"},"filter_name":{"anyOf":[{"maxLength":120,"type":"string"},{"type":"null"}],"default":null,"description":"Name of one filter to apply, for example 'plugin.attributes.risk_factor' or 'severity'.","title":"Filter Name"},"filter_quality":{"anyOf":[{"maxLength":30,"type":"string"},{"type":"null"}],"default":null,"description":"Operator for that filter, for example 'eq', 'neq', 'match' or 'gt'.","title":"Filter Quality"},"filter_value":{"anyOf":[{"maxLength":200,"type":"string"},{"type":"null"}],"default":null,"description":"Value to compare with, for example 'Critical' or 'High'.","title":"Filter Value"}},"title":"list_vulnerabilitiesArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}},"/v1/tools/list_asset_vulnerabilities":{"post":{"operationId":"list_asset_vulnerabilities","summary":"List the vulnerabilities recorded on one asset, with severity, VPR score, CVSS scores and state. Use for \"What vulnerabi","description":"List the vulnerabilities recorded on one asset, with severity, VPR score, CVSS scores and state. Use for \"What vulnerabilities does Tenable list on this asset\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{"asset_id":{"description":"Asset UUID from list_assets.","maxLength":64,"title":"Asset Id","type":"string"},"date_range":{"anyOf":[{"maximum":3650,"minimum":1,"type":"integer"},{"type":"null"}],"default":null,"description":"How many days of data, counting back from today, to include (for example 30).","title":"Date Range"},"filter_name":{"anyOf":[{"maxLength":120,"type":"string"},{"type":"null"}],"default":null,"description":"Name of one filter to apply, for example 'plugin.attributes.risk_factor' or 'severity'.","title":"Filter Name"},"filter_quality":{"anyOf":[{"maxLength":30,"type":"string"},{"type":"null"}],"default":null,"description":"Operator for that filter, for example 'eq', 'neq', 'match' or 'gt'.","title":"Filter Quality"},"filter_value":{"anyOf":[{"maxLength":200,"type":"string"},{"type":"null"}],"default":null,"description":"Value to compare with, for example 'Critical' or 'High'.","title":"Filter Value"}},"required":["asset_id"],"title":"list_asset_vulnerabilitiesArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}},"/v1/tools/get_vulnerability_details":{"post":{"operationId":"get_vulnerability_details","summary":"Get the details of one vulnerability plugin: description, synopsis, solution, severity, VPR, CVSS vectors, exploit avail","description":"Get the details of one vulnerability plugin: description, synopsis, solution, severity, VPR, CVSS vectors, exploit availability and references. Use for \"Explain Tenable plugin 19506 and how to fix it\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{"plugin_id":{"description":"Tenable plugin id from list_vulnerabilities.","minimum":1,"title":"Plugin Id","type":"integer"},"date_range":{"anyOf":[{"maximum":3650,"minimum":1,"type":"integer"},{"type":"null"}],"default":null,"description":"How many days of data, counting back from today, to include (for example 30).","title":"Date Range"}},"required":["plugin_id"],"title":"get_vulnerability_detailsArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}},"/v1/tools/get_plugin":{"post":{"operationId":"get_plugin","summary":"Get a Tenable plugin by id: its name, family, VPR score and attribute list. Use for \"What is Tenable plugin 19506\".","description":"Get a Tenable plugin by id: its name, family, VPR score and attribute list. Use for \"What is Tenable plugin 19506\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{"id":{"description":"Plugin id.","minimum":1,"title":"Id","type":"integer"}},"required":["id"],"title":"get_pluginArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}},"/v1/tools/list_folders":{"post":{"operationId":"list_folders","summary":"List the scan folders (Tenable-provided and custom) with type and unread count. Use for \"Which scan folders do I have in","description":"List the scan folders (Tenable-provided and custom) with type and unread count. Use for \"Which scan folders do I have in Tenable\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{},"title":"list_foldersArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}},"/v1/tools/list_policies":{"post":{"operationId":"list_policies","summary":"List scan policies (templates) with owner, sharing state and creation and modification times. Use for \"Which scan polici","description":"List scan policies (templates) with owner, sharing state and creation and modification times. Use for \"Which scan policies exist in Tenable\".","tags":["tools"],"requestBody":{"required":true,"content":{"application/json":{"schema":{"properties":{},"title":"list_policiesArguments","type":"object"}}}},"responses":{"200":{"description":"Tool result. `ok: true` on success; `ok: false` with a structured `error` (provider_unavailable, upstream_error, bad_input) when the tool could not answer.","content":{"application/json":{"schema":{"type":"object","additionalProperties":true}}}},"422":{"description":"Arguments failed validation","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}},"429":{"description":"Rate limit exceeded (see Retry-After)","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Error"}}}}},"x-read-only":true}}}}