Tenable
API integration

list_all_tenable_users

List users in Tenable Vulnerability Management. Returns each user's uuid, id, username, email, name, type, permissions, enabled, and group_uuids.

get_single_tenable_user_by_id

Get a single Tenable user's details by id. Returns the full user object including uuid, id, username, email, name, type, permissions, enabled, group_uuids, lockout, and preferences. Required: id (the user's uuid or unique id).

create_a_tenable_user

Create a new user in Tenable Vulnerability Management. Returns the created user object including id, uuid, username, email, name, permissions, and enabled. Requires username and password; passwords must be at least 12 characters with mixed case, a number, and a special symbol. Required: username, password.

delete_a_tenable_user_by_id

Delete a Tenable Vulnerability Management user by id. Returns an empty 204 response on success. Web App Scanning scans created by the user are not automatically reassigned — reassign them manually before deleting. Required: id, user_id.

update_a_tenable_user_by_id

Update an existing Tenable Vulnerability Management user account by id. Returns the updated user object including id, uuid, username, email, name, permissions, and enabled. Required: id.

list_all_tenable_groups

List all user groups in your Tenable container. Returns the group objects including their uuid, name, user_count, id, container_uuid, and managed_by_saml.

create_a_tenable_group

Create a user group in Tenable. Returns the created group with its id, uuid, name, container_uuid, and managed_by_saml. Requires name. Required: name.

delete_a_tenable_group_by_id

Delete a Tenable user group by id. The group must contain no users before it can be deleted. Returns an empty 204 response on success. Required: id.

update_a_tenable_group_by_id

Update a user group in Tenable by id. Returns the updated group with its id, uuid, name, user_count, and container_uuid. Requires id and name. Required: id, name.

list_all_tenable_group_users

List users belonging to a group in Tenable. Returns each user's id, uuid, name, email, username, type, permissions, enabled status, group_uuids, and lastlogin. Required: group_id.

create_a_tenable_group_user

Add a user to a group in Tenable. Returns an empty JSON object on success. Required: group_uuid, user_id.

delete_a_tenable_group_user_by_id

Remove a user from a group in Tenable. Returns an empty JSON object on success. Required: id, group_uuid.

list_all_tenable_permissions

List all access-control permissions defined for your Tenable Vulnerability Management container. Returns: permissions.

get_single_tenable_permission_by_id

Get details for a single access-control permission in Tenable by id. Returns: permission_uuid, name, subjects, actions, objects, created_at, created_by, updated_at, updated_by. Required: id.

update_a_tenable_permission_by_id

Update the access control list (ACLs) on a Tenable Vulnerability Management object. Returns an empty response body on success. Specify object_type `scanner-pool` to manage scanner-group permissions. Required: id, object_type, object_id.

create_a_tenable_permission

Create a permission in Tenable Vulnerability Management that grants specified actions to specified subjects on specified objects. Returns: permission_uuid, name, subjects, actions, objects, created_at, created_by, and 2 more. Required: name, actions, subjects, objects. AllAssets objects only support limited actions such as CanView and CanScan.

delete_a_tenable_permission_by_id

Delete a permission defined for your Tenable Vulnerability Management container by its UUID. Returns an empty response on success. Required: id.

list_all_tenable_user_roles

Get the roles assigned to a specific user in Tenable. Returns: container_uuid, user_uuid, role_uuids. Required: user_id.

tenable_user_roles_bulk_update

Change the roles assigned to a specified user in Tenable Vulnerability Management. Returns: container_uuid, user_uuid, role_uuids. Required: user_uuid, role_uuids.

list_all_tenable_templates

List Tenable-provided scan, policy, and remediation templates. Returns: unsupported, cloud_only, order, desc, subscription_only, is_was, title, is_agent, uuid, manager_only, name. Required: type.

get_single_tenable_template_by_id

Get details for a single Tenable template by id. Returns: is_was, title, name, is_agent, uuid, owner, user_permissions, filter_attributes, settings, credentials, compliance, plugins. Fields can vary by template type. Required: id, type, wizard_uuid.

list_all_tenable_asset_attributes

List custom asset attributes assigned to an asset in Tenable. Returns: id, name, value, description. Required: asset_id. An asset container can have a maximum of 10 custom attributes.

tenable_asset_attributes_bulk_update

Assign multiple custom asset attributes to a Tenable asset in one call. Returns an empty 200 response on success. Required: asset_id, attributes.

update_a_tenable_asset_attribute_by_id

Assign a single custom asset attribute to a Tenable asset by setting its value. Returns an empty 200 response on success. Required: id, asset_id, attribute_id.

tenable_asset_attributes_bulk_delete

Delete all custom asset attributes assigned to a Tenable asset. Returns an empty 200 response on success. Required: asset_id.

delete_a_tenable_asset_attribute_by_id

Delete a single custom asset attribute from a Tenable asset by id. Returns an empty 200 response on success. Required: id, asset_id, attribute_id.

create_a_tenable_assets_attribute

Create one or more custom asset attributes in Tenable Vulnerability Management. Returns an empty response body on success. Required: attributes.

delete_a_tenable_assets_attribute_by_id

Delete a custom asset attribute in Tenable Vulnerability Management by id, removing it from all assets it is assigned to. Returns an empty 204 response on success. Required: id.

list_all_tenable_assets_attributes

List custom asset attributes in Tenable. Returns: id, name, description. A container can have a maximum of 10 custom asset attributes.

update_a_tenable_assets_attribute_by_id

Update the description of a custom asset attribute in Tenable Vulnerability Management by id. Returns an empty response body on success. Required: id. Only description can be updated; to change the name, create a new attribute instead.

list_all_tenable_assets

List Tenable assets, up to 5,000 per response. Returns: id, has_agent, last_seen, last_scan_target, sources, acr_score, acr_drivers, exposure_score, scan_frequency, ipv4, ipv6, fqdn, mac_address, netbios_name, operating_system, hostname, agent_name, aws_ec2_name, security_protection_level, security_protections, exposure_confidence_value.

get_single_tenable_asset_by_id

Get details of a specific Tenable asset by id (asset UUID). Returns the full asset record including name, has_agent, created_at, updated_at, last_seen, sources, acr_score, exposure_score, and installed_software. Required: id.

create_a_tenable_assets_export

Start an asset export in Tenable Vulnerability Management that queues all assets matching the request filters. Returns: export_uuid. A request with identical filters to an in-progress export is rejected with 429. Required: chunk_size.

tenable_assets_exports_cancel

Cancel an in-progress Tenable Vulnerability Management asset export job. Returns: status. Required: export_uuid. Already-completed chunks remain downloadable for three days after cancellation.

create_a_tenable_assets_exports_export

Start an asynchronous export of all Tenable Vulnerability Management assets that match the request criteria. Returns: export_uuid. Required: chunk_size. Max 10 concurrent exports per container; duplicate exports with the same filters are prevented.

get_single_tenable_chunks_export_by_id

Download a specific Tenable asset export chunk by id. Returns an array of asset records with fields like id, ipv4s, fqdns, operating_systems, sources, and tags. Chunks expire 24 hours after creation (404 for expired chunks). Required: id, export_uuid.

get_single_tenable_status_by_id

Get the status of an assets export request in Tenable Vulnerability Management. Returns: status, reason, chunks_available. Chunks may complete out of order. Required: id.

list_all_tenable_status

Get the status of a vulnerability export request in Tenable Vulnerability Management. Returns: uuid, status, reason, chunks_available, chunks_failed, chunks_cancelled, total_chunks, chunks_available_count, empty_chunks_count, finished_chunks, filters, num_assets_per_chunk, created, properties. Required: export_id.

list_all_tenable_export_status

List vulnerability export jobs in Tenable. Returns the 1,000 most recent jobs regardless of status, each including uuid, status, total_chunks, finished_chunks, filters, num_assets_per_chunk, and created.

list_all_tenable_export_status_export

List asset export jobs in Tenable. Returns the 1,000 most recent export jobs regardless of status, including uuid, status, total_chunks, finished_chunks, num_assets_per_chunk, and created.

create_a_tenable_import_asset

Import asset data into Tenable Vulnerability Management. Queues an import job and Returns: asset_import_job_uuid. Required: assets, source. Each asset needs at least one of fqdn, ipv4, netbios_name, or mac_address; AWS, Azure, and GCP data must be imported separately. Max 5 MB per request.

list_all_tenable_import_asset_jobs

List asset import jobs in Tenable. Returns: job_id, container_id, source, batches, uploaded_assets, failed_assets, start_time, last_update_time, end_time, status, status_message.

get_single_tenable_import_asset_job_by_id

Get the status of a specific Tenable asset import job by id. Returns: job_id, container_id, source, batches, uploaded_assets, failed_assets, start_time, last_update_time, end_time, status, status_message. Required: id.

create_a_tenable_bulk_jobs_acr

Overwrite the Tenable-provided Asset Criticality Rating (ACR), an integer from 1 to 10, for one or more Tenable assets via a bulk update job. Returns an empty 202 response on success once the update request is queued. Requires a Lumin license; the request body is a bare JSON array of asset ACR update objects.

tenable_bulk_jobs_deletes_bulk_delete

Bulk delete assets in Tenable Vulnerability Management by creating an asynchronous delete job. Returns the bulk operation result: response with data.asset_count, the number of assets deleted. Required: query.

create_a_tenable_bulk_jobs_move_to_network

Move Tenable assets from one network to another — from the default network to a user-defined network, from a user-defined network to the default, or between user-defined networks — via an asynchronous bulk job. Returns the bulk operation result (response) including the number of assets moved. Required: source, destination, targets.

create_a_tenable_compliance_export

Export aggregated compliance scan data from Tenable Vulnerability Management. Queues an export job and Returns: export_uuid. A JSON request body is required even when empty ({}); the export aggregates all compliance scan data rather than results for individual scans.

tenable_compliance_exports_cancel

Cancel a Tenable compliance export job. Unprocessed chunks stop processing and the job status is set to CANCELLED. Returns: status. Required: export_uuid.

create_a_tenable_vulns_export

Export vulnerabilities from Tenable Vulnerability Management. Queues an asynchronous export of vulnerabilities matching the supplied filters and Returns: export_uuid. No body fields are required; with no time-based filter the export defaults to the last 30 days. Subject to concurrent export limits.

tenable_vulns_exports_cancel

Cancel a running Tenable Vulnerability Management vulnerability export job. Returns: status. Required: export_uuid. Completed chunks remain downloadable for three days after cancellation.

get_single_tenable_chunk_by_id

Download a vulnerabilities export chunk from Tenable Vulnerability Management. Returns an array of vulnerability records with asset, plugin, port, scan, severity, state, first_found, and last_found. Chunks expire 24 hours after creation. Required: id, export_uuid, chunk_id.

list_all_tenable_combinations_timelines

List combination timeline events in Tenable. Returns: date, action, vuln_id, combinations (each with id, name, and source).

get_single_tenable_editor_by_id

Get configuration details for a Tenable scan or user-defined template (policy). Returns: is_was, user_permissions, owner, title, is_agent, uuid, filter_attributes, settings, credentials, compliance, plugins, name. Returned attributes vary depending on the template used to create the scan or policy. Required: id, type.

get_single_tenable_audit_by_id

Download the custom audit file associated with a Tenable scan or policy. Returns the raw .audit file contents as a binary (application/octet-stream) download rather than a JSON object; the audit file id can be found in the scan or policy details. Required: id, type, object_id, file_id.

get_single_tenable_familie_plugin_by_id

Get the details of a specific plugin within a policy family in Tenable. Returns the full plugindescription object including the plugin's name, severity, family, id, and attributes. Required: id, policy_id, family_id, plugin_id.

list_all_tenable_exposure_response_combinations

List Tenable Exposure Response combinations accessible to the current user. Returns: id, name, description, owner, query, last_updated_at, is_public, read_only, used_in_initiative, used_in_non_owned_initiative, product.

get_single_tenable_exposure_response_combination_by_id

Get details for a specific Tenable Exposure Response combination by id. Returns: id, name, description, owner, query, last_updated_at, is_public, read_only, used_in_initiative, used_in_non_owned_initiative, product. Required: id.

create_a_tenable_exposure_response_combination

Create a Tenable Exposure Response combination defining the vulnerability criteria your initiatives track. Returns the id of the created combination. Required: name, is_public, query.

update_a_tenable_exposure_response_combination_by_id

Update a Tenable Exposure Response combination by id. Returns: id, name, description, owner, query, last_updated_at, is_public, read_only. Requires id, name, is_public, and query. Required: id, name, is_public, query.

delete_a_tenable_exposure_response_combination_by_id

Delete a Tenable exposure response combination by its UUID id. Returns an empty 204 response on success. Required: id.

list_all_tenable_exposure_response_initiatives

List Tenable exposure response initiatives accessible to the current user. Returns: id, name, description, owner, sla_in_days, scope, combination_ids, tenable_ids, product, last_computed_at, total_assets, total_findings, remediated_findings, average_vuln_age, average_remediation_time, total_assets_change, total_findings_change, and 6 more.

get_single_tenable_exposure_response_initiative_by_id

Get details for a single Tenable exposure response initiative by id. Returns: id, name, description, owner, sla_in_days, scope, combination_ids, tenable_ids, product, last_computed_at, modified_at, tickets_count, delivery_methods, statistics, trending, Exposure_Response_Initiatives_cloud. Required: id.

create_a_tenable_exposure_response_initiative

Create a Tenable exposure response initiative to remediate vulnerabilities within a defined time frame. Returns: id. Required: name, owner, sla_in_days, scope, combination_ids, tenable_ids. Each user can create up to 10 initiatives.

update_a_tenable_exposure_response_initiative_by_id

Update a Tenable exposure response initiative's scope or combinations by id. Returns: id, name, description, owner, sla_in_days, scope, combination_ids, tenable_ids, product, total_assets_change, total_findings_change, and 4 more. Required: id, name, owner, sla_in_days, scope, combination_ids, tenable_ids. Trending metrics reset upon update.

delete_a_tenable_exposure_response_initiative_by_id

Delete an initiative in Tenable Exposure Response by id. Returns an empty 200 response on success. Required: id.

list_all_tenable_status_export

Get the status of a Tenable export job. Returns: export_id, status, submitted_at, last_refreshed_at. Required: export_id.

create_a_tenable_file_upload

Upload a file to Tenable Vulnerability Management via multipart form. Returns: fileuploaded. Required: Filedata.

get_single_tenable_initiative_filter_by_id

Get the filter details for a specific initiative in Tenable. Returns the initiative's filter expression as an and array of property/operator/value conditions with nested and/or groups. Required: id (the initiative's UUID).

create_a_tenable_initiative_share

Share a Tenable initiative with another user. Returns the id (UUID) of the newly shared initiative. Required: initiative_id, share_id, user_id, upgrade_to_public_combinations.

list_all_tenable_allowed_filters

List the supported exposure response combination filters in Tenable for building combination queries. Returns: filters.

list_all_tenable_filters_credentials

List credential filters in Tenable, describing the filtering, sorting, and pagination capabilities available for scan credentials. Returns: wildcard_fields, filters, sort.

create_a_tenable_folder

Create a new custom folder in Tenable. Returns: id. Folder names must be unique and can include any UTF-8 characters. Rate limited to 10 folder creation requests per minute. Required: name.

delete_a_tenable_folder_by_id

Delete a custom folder in Tenable by id. Scans inside the deleted folder are automatically moved to the Trash folder. Returns an empty 200 response on success. Tenable-provided folders (custom = 0) and folders belonging to other users cannot be deleted. Required: id.

list_all_tenable_folders

List both Tenable-provided folders and the current user's custom folders. Returns: id, name, type, default_tag, custom, unread_count.

update_a_tenable_folder_by_id

Rename a scan folder in Tenable Vulnerability Management by id. Returns an empty 200 response body on success. Required: id, name. Cannot rename Tenable-provided scan folders or custom folders that belong to other users.

create_a_tenable_families_by_name

List all plugins in a Tenable Vulnerability Management plugin family, looked up by family name. Returns: id, name, plugins. Required: name.

get_single_tenable_plugin_by_id

Get details for a specific Tenable plugin by id. Returns: attributes, family_name, vpr, name, id. Required: id.

list_all_tenable_plugins

List Tenable plugins sorted by plugin ID with detailed plugin information. Returns: id, name, family_id, family_name, attributes. Filter by last_updated (YYYY-MM-DD; ignores VPR updates). Max 10,000 per page.

get_single_tenable_plugins_family_by_id

Get the plugins in a specific Tenable plugin family. Returns: plugins, name, id. Required: id.

list_all_tenable_plugins_families

List Tenable plugin families. Returns: count, name, id.

create_a_tenable_policy

Create a policy (scan template) in Tenable Vulnerability Management. Returns: policy_id, policy_name. The policy cannot be moved to a different template after creation. Required: uuid, settings.

get_single_tenable_policy_by_id

Get the details of a single Tenable policy (scan template) by id. Returns the policy's template uuid, settings, plugins, audits, credentials, and scap content. Required: id. Most setting values are returned as strings, even numeric and boolean ones.

list_all_tenable_policies

List all policies (scan templates) in Tenable that the requesting user can view. Returns: id, template_uuid, name, description, owner_id, owner, shared, user_permissions, creation_date, last_modification_date, visibility, no_target. Does not support pagination, filtering, or sorting.

update_a_tenable_policy_by_id

Update an existing policy (scan template) in Tenable Vulnerability Management. Tenable preserves any setting omitted from the request, so only the settings that change need to be sent. Returns an empty 204 response on success. Required: id.

delete_a_tenable_policy_by_id

Delete a policy (scan template) in Tenable Vulnerability Management by id. Fails if the policy is currently used by a scan. Returns an empty 204 response on success. Required: id.

get_single_tenable_download_by_id

Download a Tenable Vulnerability Management PDF report by id. Returns the PDF report file itself as binary content rather than a JSON object. Required: id (the report UUID).

list_all_tenable_downloads

Download completed Tenable Attack Path Analysis export results (attack paths, attack techniques, or MITRE heatmap; JSON or CSV per the original export request). Returns: path_name, priority_rating, source_nes; mitre_id, technique_name, priority. Required: export_id. No content is returned while the export is still processing.

list_all_tenable_downloads_download

Download an exported scan file in Tenable Vulnerability Management. Returns the raw exported scan file as a binary (application/octet-stream) download rather than a JSON object. Required: scan_id, export_id.

get_single_tenable_downloads_download_by_id

Download a specific export chunk (JSON or CSV) from a Tenable Vulnerability Management inventory export. Returns asset records (asset_id, asset_name, asset_class, aes) or finding records (finding_id, finding_name, severity, state); CSV chunks return raw CSV text. Beta endpoint. Required: id (chunk number), export_id.

create_a_tenable_policie_copy

Copy a policy (scan template) in Tenable Vulnerability Management. The new policy is named by prefixing the source policy's name with 'Copy of'. Returns: name, id. Required: policy_id.

get_single_tenable_policie_export_by_id

Export a Tenable policy (called a scan template in the Tenable UI) as a Nessus XML document. Returns the raw text/xml NessusClientData_v2 export with content-type-specific elements. Required: id.

create_a_tenable_policies_import

Import a previously uploaded Tenable policy (scan template). Returns the imported policy's id, name, description, owner, template_uuid, and creation_date. Only .nessus-format policies can be imported. Required: file.

tenable_remediation_goals_bulk_update

Update the specified Tenable remediation goal, identified by its UUID, with a new name, filters, status, or due-date settings. Returns no response body on success. Required: goaluuid, name.

create_a_tenable_remediation_goal

Create a Tenable remediation goal that sets a target for remediating findings matching its asset and finding filters. The response does not include the new goal; use the search operation to retrieve it. Required: name.

list_all_tenable_remediation_goals

Get the details of a specific remediation goal in Tenable. Returns: goaluuid, containeruuid, useruuid, name, description, type, status, progress, startdate, assetfilters, findingfilters, create_tstamp, update_tstamp, goalduedate, duedate, goalresult, minimumpercentage, conditions, dashboards. Required: goaluuid.

tenable_remediation_goals_search

Search remediation goals in Tenable that match the specified criteria. Returns matching goals with: goaluuid, name, description, type, status, progress, and goalresult.

tenable_remediation_goals_bulk_delete

Delete one or more Tenable remediation goals by UUID. The response is the same whether or not the specified goals exist. Returns no response body on success. Required: operation, goaluuids.

create_a_tenable_remediation

Create a remediation project in Tenable with the supplied definition (name, description, type, status, startdate, assetfilters, findingfilters, projectduedate, assignee). Returns an empty 201 response on success — the response does not include the created project; retrieve it with the search operation. Required: name.

get_single_tenable_remediation_by_id

Get the details of a specific Tenable remediation project by id. Returns: projectuuid, containeruuid, useruuid, name, description, type, status, progress, startdate, assetfilters, findingfilters, create_tstamp, update_tstamp, projectduedate, assignee. Required: id, projectUuid.

tenable_remediations_search

Search Tenable remediation projects matching the specified filter, sort, and pagination criteria. Returns each matching project with projectuuid, name, description, type, status, progress, startdate, projectduedate, and assignee.

update_a_tenable_remediation_by_id

Update a remediation project in Tenable by id with the supplied definition (name, description, type, status, startdate, assetfilters, findingfilters, projectduedate, assignee). Returns an empty 200 response on success. Required: id, name.

tenable_remediations_bulk_delete

Delete one or more remediation projects in Tenable by UUID via a batch body (operation, projectuuids). Returns an empty 200 response on success; the response is the same whether or not the specified projects exist. Required: operation, projectuuids.

create_a_tenable_reports_export

Create a PDF report export job in Tenable Vulnerability Management from a specified template and optional filters. Returns: uuid. Max 10,000 findings per report and 50 concurrent reports. Required: template_name.

list_all_tenable_reports_exports

List the valid report export filters in Tenable that can narrow the vulnerabilities or assets included in a report. Returns: filters.

list_all_tenable_reports_histories

List the filtering, sorting, and pagination capabilities available for Tenable scan history records. Returns: wildcard_fields, filters, sort.

list_all_tenable_scans_agents

List the filtering, sorting, and pagination capabilities available for Tenable agent records. Returns: wildcard_fields, filters, sort.

create_a_tenable_scans_remediation

Create a remediation scan configuration in Tenable Vulnerability Management. Returns the created scan object including id, name, uuid, policy_id, and creation_date. Fails with 403 once the account reaches the 10,000-scan limit. Required: uuid, settings.

list_all_tenable_scans_remediations

List remediation scans in Tenable Vulnerability Management, sorted by scan_creation_date descending by default. Returns each scan's id, name, status, owner, policy_id, and scan_creation_date, among other fields.

list_all_tenable_scans_reports

List the scan filters available for scan records in Tenable, including each filter's field name, display label, valid operators, and input control. Returns: filters.

create_a_tenable_workbenches_asset

List asset filtering, sorting, and pagination capabilities for Tenable workbench assets using the v2 endpoint. Returns: wildcard_fields, filters, sort. Includes the tag_uuid filter not returned by the GET version. Deprecated and scheduled for removal on November 5; use the List asset filters endpoint instead.

delete_a_tenable_workbenches_asset_by_id

Delete an asset in Tenable Vulnerability Management by id, removing the asset and its associated vulnerability data. Deprecated in favor of Tenable's bulk delete assets endpoint. Returns an empty 202 response on success. Required: id.

get_single_tenable_workbenches_asset_by_id

Get the activity log for a Tenable workbench asset by id. Returns activity entries with type (discovered, seen, tagging, attribute_change, updated), timestamp, scan_id, schedule_id, source, and details or updates. Not intended for large or frequent exports of asset data. Required: id.

list_all_tenable_workbenches_assets

List assets in the Tenable Vulnerability Management workbench. Returns each asset's id, has_agent, last_seen, last_scan_target, sources, acr_score, exposure_score, ipv4, fqdn, and operating_system.

list_all_tenable_workbenches_assets_workbenches

List the asset filters available in Tenable Vulnerability Management workbenches for filtering workbench asset lists. Returns: wildcard_fields, filters, sort.

create_a_tenable_workbenches_vulnerability

List the filters available for the Tenable Vulnerabilities Workbench via the v2 POST endpoint. Returns: wildcard_fields, filters, sort. Optionally pass tag_uuids to guarantee specific tags appear in the tag_uuid filter. Deprecated; use the GET list-vulnerability-filters endpoint instead.

list_all_tenable_workbenches_vulnerabilities

List vulnerabilities aggregated in the Tenable Vulnerabilities Workbench. Returns per vulnerability: plugin_id, plugin_name, plugin_family, vulnerability_state, vpr_score, severity, count, accepted_count, recasted_count, and counts_by_severity.

list_all_tenable_workbenches_vulnerabilities_workbenches

List the filter definitions available for vulnerability workbench queries in Tenable Vulnerability Management. Returns: wildcard_fields, filters, sort.

create_a_tenable_scan

Create a scan configuration in Tenable Vulnerability Management. Returns the created scan object including its id, name, uuid, enabled, and creation_date. Required: uuid, settings. Max 10,000 active scans.

delete_a_tenable_scan_by_id

Delete a Tenable scan by id. The id can be either the scan's schedule_uuid or scans id from the List scans response. You cannot delete scans with a running, paused, or stopping status. Returns an empty 204 response on success. Required: id.

get_single_tenable_scan_by_id

Get scan results and details for a specific scan in Tenable Vulnerability Management, latest run by default. Returns: info, comphosts, hosts, notes, remediations, vulnerabilities, filters, history, compliance, progress. Results older than 35 days are archived and return limited data. Required: id, scan_id.

list_all_tenable_scans

List scans in Tenable Vulnerability Management. Returns each scan's id, name, status, owner, schedule_uuid, enabled, and creation_date.

tenable_scans_pause

Pause a scan in Tenable. Only scans with a `running` status can be paused. Returns an empty response body on success. Required: scan_id.

tenable_scans_resume

Resume a paused scan in Tenable. Only scans with a `paused` status can be resumed. Returns an empty response body on success. Required: scan_id.

tenable_scans_stop

Stop a Tenable Vulnerability Management scan. Only scans with a pending, running, or resuming status can be stopped; for scans in stopping or publishing status, use the force-stop endpoint. Returns an empty 200 response on success. Required: scan_id.

update_a_tenable_scan_by_id

Update a scan's configuration in Tenable — e.g. its name, description, targets, scanner, schedule, or enabled state. Returns the updated scan with id, name, description, enabled, timezone, and creation_date. Required: id, uuid, settings.

create_a_tenable_credential_upgrade

Convert scan-specific credentials to managed credentials in Tenable Vulnerability Management. Returns: uuid. Required: scan_id, credentials_id, name, settings, type, category, ad_hoc.

get_single_tenable_host_plugin_by_id

Get the output for a specified plugin on a scan host in Tenable. Returns info (host-uuid, host_fqdn, host_start, host_end, plugindescription) and outputs (plugin_output, ports, severity, has_attachment). Deprecated: use the Export scan endpoint instead; only returns results younger than 35 days. Required: id, scan_uuid, host_id, plugin_id.

get_single_tenable_scan_attachment_by_id

Download a single Tenable scan attachment file by id. Returns the attachment file itself (file), serialized as JSON for most files or as a raw binary stream for binary files. Attachments are unavailable for scan results older than 60 days. Required: id, scan_id, attachment_id.

create_a_tenable_scan_copy

Copy an existing scan in Tenable Vulnerability Management. Returns the copied scan object including its id, uuid, name, status, and timezone. Required: scan_id.

create_a_tenable_scan_export

Request an export of a Tenable scan in the specified format (nessus, html, pdf, csv, or db), then poll scan export status and download when ready. Returns: file, temp_token. Required: scan_id, format. For db format, history_id, asset_id, and password are also required.

create_a_tenable_scan_force_stop

Force stop a scan in Tenable Vulnerability Management, cancelling all incomplete scan tasks and setting the scan status to aborted. Returns an empty response on success. Only scans in stopping or publishing status can be force-stopped. Required: schedule_uuid.

delete_a_tenable_scan_history_by_id

Delete historical results from a scan in Tenable. Returns an empty 204 response on success. Scans containing rollover data also require delete_rollovers=true or the request fails with a 409 error. Required: id, scan_id, history_uuid.

get_single_tenable_scan_history_by_id

Get details of a historical run of a scan in Tenable Vulnerability Management, including when and where the scan ran and its results for the target hosts. Returns: owner_id, schedule_uuid, status, reporting_mode, is_archived, scan_start, owner_uuid, owner, targets, uuid, scan_type, name, and 3 more. Required: id, scan_id, history_uuid.

list_all_tenable_scan_histories

List the run history for a Tenable Vulnerability Management scan. Returns: pagination, history. Required: scan_id, exclude_rollover. Triggered agent scans have no history.

get_single_tenable_scan_host_by_id

Get host details for a specific host in a Tenable scan. Returns: info, compliance, vulnerabilities, Scan_Results_cloud. Only scan results younger than 35 days are available; use the scan export endpoint for older results. Required: id, scan_uuid, host_id.

get_single_tenable_scan_latest_status_by_id

Get the latest status for a scan in Tenable Vulnerability Management. Returns a status-only object: status (e.g. "imported"). Required: id (the scan's schedule_uuid or id from the scans list).

create_a_tenable_scan_launch

Launch a scan in Tenable Vulnerability Management. Returns: scan_uuid. Max 25 active scans per container. Required: scan_id.

get_single_tenable_scan_progrese_by_id

Get the progress of a scan in Tenable Vulnerability Management. Returns: progress. Without query parameters, returns the progress from the latest run of the scan. Required: id, scan_id.

tenable_scan_schedules_bulk_update

Enable or disable a scan schedule for a Tenable Vulnerability Management scan. Returns the schedule settings: enabled, control, rrules, starttime, and timezone. Required: scan_id, enabled.

tenable_scan_status_bulk_update

Update the status of a Tenable scan, marking it as read or unread. Returns an empty response body on success. Required: scan_id, read.

create_a_tenable_scans_check_auto_target

Evaluate a list of targets and/or asset tags against the scan route configuration of scanner groups in Tenable. Returns: missed_targets, total_missed_targets, matched_resource_uuids, total_matched_resource_uuids. Required: network_uuid.

list_all_tenable_scans_counts

Get the total number of scans in your Tenable Vulnerability Management container. Returns the scan total in the count field.

list_all_tenable_scans_exports

List scan exports in Tenable generated within the past 30 days that the user is authorized to view, to monitor export status and determine download readiness. Returns: export_id, scan_uuid, schedule_id, schedule_uuid, ready, error, format, metadata, Scan_Exports_cloud.

create_a_tenable_scans_import

Import a previously uploaded scan into Tenable. Returns the imported scan object (`scan`) including its id, name, status, uuid, owner, and creation_date. Requires file (the name returned by the file upload endpoint); password is required for nessus.db files. Scans run more than 15 months ago cannot be imported. Required: file.

list_all_tenable_scans_timezones

List the timezones available in Tenable for configuring a recurring scan. Returns: name, value, current.

tenable_shared_collection_scan_configs_bulk_delete

Remove scan configurations from a Tenable shared collection. Runs as an asynchronous job; returns message and request_status_id to track it. Required: shared_collection_id, scan_configs.

create_a_tenable_shared_collection_scan_config

Add scan configurations to a Tenable shared collection. Queues an asynchronous job; returns message and request_status_id to track it. Required: shared_collection_id, scan_configs. Max 1,000 per request; remediation and Web App Scanning scan configs cannot be shared.

list_all_tenable_shared_collection_scan_configs

List scan configurations in a Tenable shared collection. Returns: control, creation_date, enabled, id, last_modification_date, legacy, name, owner, policy_id, read, schedule_uuid, shared, status, template_uuid, type, permissions, user_permissions, uuid, wizard_uuid, status_times, and 7 more. Required: shared_collection_id. Max 5,000 per page.

create_a_tenable_shared_collection

Create a shared collection in Tenable. Queues an asynchronous job and Returns: message, request_status_id. Required: name, acl. Limited to 1,000 total shared collections.

delete_a_tenable_shared_collection_by_id

Delete a shared collection by id in Tenable. Queues an asynchronous job and Returns: message, request_status_id. Required: id.

get_single_tenable_shared_collection_by_id

Get details for a single shared collection by id in Tenable. Returns: name, description, uuid, acl. Required: id.

list_all_tenable_shared_collections

List shared collections in Tenable that the current user has access to. Returns: name, description, uuid, acl.

update_a_tenable_shared_collection_by_id

Update a shared collection by id in Tenable. Queues an asynchronous job and Returns: message, request_status_id. Required: id, name, acl. To remove a user or group, set its acl permission to REMOVE_USER.

create_a_tenable_shared_collections_by_name

Get the details of a Tenable shared collection by name. Returns: name, description, uuid, acl.

get_single_tenable_shared_collections_request_status_by_id

Get the status of an asynchronous shared collections job in Tenable Vulnerability Management. Returns: container_uuid, type, id, status, created, modified, expiration. Required: id.

get_single_tenable_asset_info_by_id

Get detailed information about a specific asset in Tenable Vulnerability Management. Returns: time_end, time_start, id, uuid, operating_system, counts, has_agent, created_at, updated_at, first_seen, last_seen, acr_score, exposure_score, ipv4, fqdn, and 40 more. Not intended for large or frequent exports of asset data. Required: id, asset_id.

list_all_tenable_asset_vulnerabilities

List the vulnerabilities recorded for a specific asset in Tenable, sorted by vulnerability count in descending order. Returns: count, plugin_family, plugin_id, plugin_name, vulnerability_state, vpr_score, severity, accepted_count, counts_by_severity, and 4 more. Required: asset_id. Limited to 5,000; use the export API for larger pulls.

list_all_tenable_assets_vulnerabilities

List assets with vulnerabilities in Tenable Vulnerability Management. Returns each asset's id, severities (vulnerability counts by severity level), total, fqdn, ipv4, ipv6, and last_seen. The list is capped at 5,000 assets; use the export API for larger volumes.

get_single_tenable_vulnerabilitie_info_by_id

Get plugin details for a vulnerability in Tenable Vulnerability Management. Returns: count, vuln_count, description, synopsis, solution, discovery, severity, plugin_details, reference_information, risk_information, see_also, vulnerability_information, vpr. Not intended for large or frequent data exports. Required: id, plugin_id.

list_all_tenable_vulnerabilitie_info

Get details for a vulnerability recorded on a specified Tenable asset. Returns: count, vuln_count, description, synopsis, solution, discovery, severity, plugin_details, reference_information, risk_information, see_also, vulnerability_information, vpr. Required: asset_id, vulnerability_id. Not intended for large or frequent data exports.

list_all_tenable_vulnerabilitie_outputs

List the vulnerability outputs for a Tenable plugin. Returns: plugin_output, states. Required: plugin_id. Limited to 5,000 outputs and data under 450 days old; use the export API for more.

list_all_tenable_workbenches_exports

Export a Tenable Vulnerability Management workbench report to a downloadable file. Returns: file. Required: format, report, chapter. Deprecated: use the Create report or bulk export endpoints instead; tag-based filters are supported for CSV format only.

create_a_tenable_import_vulnerability

Import a batch of Tenable scan vulnerabilities into Tenable Vulnerability Management in JSON format. Returns an empty 200 response on success. Requires source, type, and assets; max 50 asset objects and 15 MB per request. Tenable scan data only; deprecated — use Import vulnerabilities v2. Required: source, type, assets.

get_single_tenable_references_by_agent_group_by_id

List the scan configurations associated with a specific agent group in Tenable Vulnerability Management. Returns: schedule_uuid, name, scan_type, last_run, enabled. Required: id.

create_a_tenable_vulnerability

Import Tenable scan vulnerability data into Tenable Vulnerability Management. Returns: job_uuid. Required: vendor, product, data_type, source, assets. Max 50 asset objects and 15 MB per request; only Tenable scan data can be imported.

get_single_tenable_config_status_by_id

Track the processing status of a Tenable WAS scan configuration create, update, or upsert. Returns: tracking_status. Poll until a completed or failed status is returned. Required: id (tracking UUID from the 202 Location header) and config_id.

list_all_tenable_configs_filters

List the filtering capabilities available for scan configurations in Tenable WAS, for endpoints that support scan configuration filtering. Returns each filter's name, readable_name, operators, and control details.

get_single_tenable_configs_remediation_by_id

Get the remediation scan configuration for a vulnerability in Tenable. Returns: config_id, owner_id, name, targets, settings, scanner_id, permissions, in_remediation, and 18 more. This endpoint generates but does not create the scan — pass the response as the request body to the create scan config endpoint. Required: id.

get_single_tenable_export_config_by_id

Export a Tenable WAS scan configuration as a HOCON file for use with WAS Docker images in CI/CD pipelines (GitHub, GitLab, Jenkins, CircleCI, Bamboo). Returns the HOCON file with config_id, template_id, scan settings, and target. Required: id.

tenable_export_vulns_cancel

Cancel a WAS findings export job in Tenable. Processing finishes the current chunk, skips unprocessed chunks, and marks the job CANCELLED; completed chunks stay downloadable for three days. Returns: status. Required: export_uuid.

create_a_tenable_export_vuln

Create a WAS findings export job in Tenable for web app scanning findings matching the request filters. Returns: export_uuid. The state filter is required with first_found, last_found, or last_fixed; without time-based filters only the last 30 days are exported. Concurrent export limits apply.

list_all_tenable_scans_filters

List the scan filters available for filtering scans in Tenable WAS. Returns: name, readable_name, operators, control. Required: config_id.

list_all_tenable_search_was_configs

Search web application scan configurations in Tenable WAS, narrowing results with a single field/operator/value filter or AND/OR filter groups. Returns: config_id, owner_id, is_shared, name, target_count, description, created_at, schedule, last_scan, and 6 more. Also includes details of the last scan run with each configuration when one exists.

list_all_tenable_user_templates_filters

List the filtering capabilities available for Tenable user-defined templates, including which fields can be filtered and the operators each supports. Returns: name, readable_name, operators, control.

get_single_tenable_vuln_chunk_by_id

Download a single chunk of exported WAS vulnerability findings from Tenable. Returns an array of findings with finding_id, url, state, severity, first_found, last_found, and detailed plugin, asset, and scan objects. Chunks are only downloadable for 24 hours after creation. Required: id, export_uuid, chunk_id.

get_single_tenable_vuln_status_by_id

Get the status of a Tenable Web App Scanning (WAS) findings export request. Returns: uuid, status, reason, chunks_available, chunks_failed, chunks_cancelled, total_chunks, chunks_available_count, empty_chunks_count, finished_chunks, filters, created, and 2 more. Chunks may complete out of order. Required: id (the export request UUID).

list_all_tenable_vulns_status

List Tenable WAS findings export jobs. Returns: uuid, status, reason, total_chunks, chunks_available_count, empty_chunks_count, finished_chunks, filters, num_assets_per_chunk, created. Covers the 1,000 most recent jobs regardless of status; completed jobs appear only for three days after completion.

list_all_tenable_vulnerabilities_filters

List the vulnerability filters available in Tenable WAS for filtering vulnerability findings. Returns: name, readable_name, operators, control.

list_all_tenable_vulnerabilities_filters_vulnerabilities

List the vulnerability filters available for a scan in Tenable WAS. Returns: name, readable_name, operators, control. Required: scan_id.

create_a_tenable_was_application

Add one or more web application assets in Tenable WAS by manually defining application targets. Returns per-URL results with success, asset_id, is_new, and is_tracked.

get_single_tenable_was_attachment_by_id

Download the attachment file for a vulnerability detected by a Tenable Web App Scanning scan. Returns the raw attachment file as a chunked stream (e.g. a captured request in text/plain or a PNG image) rather than a JSON object. Required: id (the attachment UUID, which can be found via the Search vulnerabilities endpoints).

create_a_tenable_was_config

Create a Tenable WAS scan configuration. Asynchronous — track processing status via the config status endpoint. Returns: config_id, container_id, owner_id, template_id, user_template_id, name, targets, applications, tag_targets, target, description, created_at, settings, and 13 more. Required: name, targets, owner_id, template_id, settings.

delete_a_tenable_was_config_by_id

Delete a Tenable WAS scan configuration by id, removing the configuration along with its associated scan history and vulnerabilities. Returns an empty 202 response once the asynchronous deletion job is created. Cannot delete a configuration while a scan based on it is running. Required: id.

get_single_tenable_was_config_by_id

Get a Tenable WAS scan configuration by id. Returns: config_id, container_id, owner_id, template_id, user_template_id, name, targets, applications, tag_targets, target, description, created_at, updated_at, settings, scanner_id, schedule, folder, in_trash, default_permissions, and 7 more. Required: id.

tenable_was_configs_partial_update

Move a Tenable WAS scan configuration to a specified folder by config_id. Returns an empty 200/202 response on success; the 202 includes a Location header for checking the move status. Required: config_id, folder_name.

update_a_tenable_was_config_by_id

Create or update a Tenable WAS scan configuration by id (upsert). Asynchronous — track processing status via the config status endpoint. Returns: config_id, container_id, owner_id, template_id, name, targets, updated_at, settings, and 18 more. Required: id, name, targets, owner_id, template_id, settings. Null properties are ignored, not cleared.

create_a_tenable_was_folder

Create a new custom folder in Tenable WAS for the current user. Returns: folder_id, name. Required: name. Folder names may only contain letters, numbers, underscores, hyphens, and whitespace.

delete_a_tenable_was_folder_by_id

Delete a folder in Tenable WAS by id. Returns an empty 202 response on success. Scans inside a deleted folder are moved to the Trash folder; Tenable-provided folders and other users' folders cannot be deleted. Required: id.

list_all_tenable_was_folders

List the current user's custom folders in Tenable WAS. Returns an array of folder records with: folder_id (UUID) and name.

update_a_tenable_was_folder_by_id

Rename a custom folder in Tenable WAS by id. Returns: folder_id, name. Required: id, name. Tenable-provided scan folders and folders belonging to other users cannot be renamed; names may only contain letters, numbers, underscores, hyphens, and whitespace.

list_all_tenable_connectors_logs

List Tenable One connector sync logs, including timestamps, status, and messages for each sync event. Returns: items, total_count. start_date and end_date must be specified together. Beta endpoint; response structure subject to change.

create_a_tenable_export_attack_path

Submit a Tenable attack path export request for top attack paths matching the specified search criteria. Returns: export_id. Required: file_format. Processing is asynchronous.

create_a_tenable_export_attack_technique

Export Tenable attack techniques matching the specified search criteria. Queues an asynchronous export and Returns: export_id. Required: file_format.

create_a_tenable_export_mitre_heatmap

Submit a Tenable MITRE ATT&CK heatmap export request, producing either a JSON ATT&CK Navigator-compatible layer or a flat CSV table. Returns: export_id. Processing is asynchronous — use the returned export_id to check export status and download the results. Required: file_format.

get_single_tenable_exposure_view_card_by_id

Get details of a specific Tenable exposure view card, including SLA efficiency and trend data for the past 30 days. Returns: id, name, card_type, is_global_card, ces_scores, ces_trend, created_at, tag_count, exposures, sources, exposure_classes_details, and 3 more. Beta endpoint — response structure subject to change. Required: id, card_id.

list_all_tenable_search_apa_top_attack_paths

Search Tenable top attack paths leading to critical assets, with filtering, sorting, and pagination. Returns each path's vector_id, name, summary, priority, path_status, nodes, and techniques. Resolved paths (done, chain_prevented, accepted) are excluded by default; set exclude_resolved=false to include them.

list_all_tenable_search_apa_top_attack_techniques

Search Tenable's top attack techniques, with MITRE ATT&CK mappings and recommended mitigations. Returns: mitre_id, mitigations, malwares, name, priority, state, status, tactics, vector_count, related_nodes, and 13 more. Resolved techniques (status done/accepted, state archive) are excluded by default; set exclude_resolved to false to include them.

list_all_tenable_search_exposure_view_cards

Search Tenable Exposure View cards by name or card type. Returns: id, name, card_type, is_global_card, tag_count, created_at, updated_at, ces_score, sla_percentage, ces_trend, exposure_class, last_data_update_date, sources. Max 25 per page. Beta endpoint; response structure subject to change.

list_all_tenable_search_inventory_assets

Search assets in Tenable that match the specified search criteria. Returns: id, asset_class, name, aes, acr, extra_properties, data, pagination. This endpoint is in beta and the response structure is subject to change. Max 1000 per page.

list_all_tenable_search_inventory_findings

Search findings in Tenable that match the specified search criteria. Returns: id, name, asset_id, state, severity, extra_properties, data, pagination. Currently in beta; the response structure is subject to change.

list_all_tenable_search_inventory_softwares

Search software installed on your Tenable assets that matches the specified criteria. Returns: application, publisher, type, devices_count, extra_properties, data, pagination. Max 1000 per page; the endpoint is in beta and its response structure is subject to change.

list_all_tenable_access_control_api_security_settings

List the IPv4 and IPv6 addresses allowed to access the Tenable Vulnerability Management API. Returns: allowed_ipv4_addresses, allowed_ipv6_addresses.

tenable_access_control_api_security_settings_bulk_update

Update the list of IPv4 and IPv6 addresses allowed to access the Tenable Vulnerability Management API, adding to or replacing the existing allowed list. Returns an empty 204 response on success. Requires a request body with the allowed IP address lists; specify ranges for both IPv4 and IPv6 unless your network is restricted to a single family, to…

update_a_tenable_access_control_permission_by_id

Update a Tenable Vulnerability Management access-control permission by id, overwriting the existing permission data with all fields in the request body. Returns an empty 204 response on success. Required: id, name, actions, objects, subjects.

list_all_tenable_access_control_role_permissions

List all available Tenable role permission strings with their metadata and hierarchy. Returns: role_permission_string, domain, entity, action, category, uuid, name, direct_children, direct_parents, included_role_permissions, is_category_toggle, and 8 more. Use to determine valid values when creating or updating custom roles.

create_a_tenable_access_control_role

Create a custom role with the specified permissions in Tenable. Returns: name, uuid, description, role_permission_strings, type, status, containerUuid. Required: name, role_permission_strings. Each privilege category's toggle privilege must be included alongside its other privileges.

delete_a_tenable_access_control_role_by_id

Delete a custom role in Tenable by its role UUID (id). Returns an empty 204 response on success. Required: id.

update_a_tenable_access_control_role_by_id

Update a custom role in Tenable by id. Returns: name, uuid, description, role_permission_strings, type, status, containerUuid. Required: id. The role_permission_strings you send replace the existing permission set; include each category's toggle privilege alongside its other privileges.

get_single_tenable_access_control_role_by_id

Get the details of a specific role in Tenable by id. Returns: name, uuid, description, role_permission_strings, type, status, containerUuid. Required: id.

list_all_tenable_access_control_roles

List all roles defined for your Tenable Vulnerability Management instance, including both standard and custom roles. Returns: name, uuid, description, role_permission_strings, type, status, containerUuid.

list_all_tenable_me

Get the permissions assigned to the current user in Tenable. Returns: permission_uuid, name, subjects, actions, objects, created_at, created_by, updated_at, updated_by. Subjects are limited to the current user and the groups they belong to.

list_all_tenable_permissions_user_groups

List the permissions granted to a Tenable user group. Returns each granted permission with permission_uuid, name, subjects, actions, objects, and created_at. Required: user_group_id, user_group_uuid.

list_all_tenable_permissions_users

List the permissions granted to a specific user in Tenable. Returns each granted permission with permission_uuid, name, subjects, actions, objects, created_at, created_by, updated_at, and updated_by. Required: user_id, user_uuid.

list_all_tenable_user_authorizations

Get a Tenable user's access authorizations for password, SAML, and API access methods. Returns: account_uuid, user_uuid, api_permitted, password_permitted, saml_permitted. Required: user_id.

tenable_user_authorizations_bulk_update

Update a user's authorizations for accessing a Tenable Vulnerability Management instance to grant or revoke access methods (password, SAML SSO, API). Returns an empty 204 response on success. You cannot update authorizations for the current user. Required: user_id, api_permitted, password_permitted, saml_permitted.

tenable_user_chpasswds_bulk_update

Change a user's password in Tenable Vulnerability Management. Resets login_fail_count and lockout to 0, and a temporary password forces a reset at the next login. Returns an empty 200 response on success. Required: user_id, user_uuid, password.

tenable_user_enableds_bulk_update

Enable or disable a Tenable user account by setting its enabled status. Returns the updated user object including id, uuid, username, email, permissions, and enabled. Required: user_id, enabled. Cannot be used to enable or disable your own account.

tenable_user_keys_bulk_update

Generate new API keys for a Tenable user by user id. Returns: accessKey, secretKey. Required: user_id.

create_a_tenable_config_scan

Launch a Tenable Web Application Scanning (WAS) scan asynchronously using an existing scan configuration. Returns: scan_id. Fails if a scan is already running for the configuration. Required: config_id.

get_single_tenable_export_by_id

Download the debug ZIP file for a Tenable WAS scan by id. Returns the raw ZIP archive as binary data (application/octet-stream), not a JSON object; the archive contains browser console logs, HTTP request and response logs, and Selenium information if applicable. Required: id (the scan UUID).

list_all_tenable_permissions_permissions

Get the permissions configured for a Tenable Vulnerability Management object. Returns the object's ACL entries (acls), including each entry's type, id, uuid, name, display_name, permissions, and owner. Required: object_type, object_id.

list_all_tenable_scan_notes

List scan notes for a specific scan in Tenable WAS. Returns: scan_note_id, scan_id, created_at, severity, title, message. Required: scan_id.

tenable_scan_reports_bulk_update

Generate and export a report for a Tenable Web Application Scanning scan. Returns the report itself in the requested format (JSON, PDF, CSV, HTML, or XML); report content is scan-specific. The export request may be accepted for asynchronous processing before the report is ready. Required: scan_id.

get_single_tenable_scan_report_by_id

Download an exported Tenable WAS scan report by id. Returns: report, config, template, scan, findings, notes, user_template. Available in JSON, PDF, CSV, HTML, or XML; returns 404 if the report is not yet ready. Required: id.

list_all_tenable_search_config_scans

Search scans of a Tenable WAS scan config, filtering results with AND/OR filter conditions. Returns scan records including scan_id, target, status, requested_action, created_at, finalized_at, and scanner details. Required: config_id.

list_all_tenable_search_scan_vulnerabilities

Search for vulnerabilities reported by a Tenable WAS scan. Returns: vuln_id, scan_id, plugin_id, created_at, uri, details, attachments, is_page. Required: scan_id.

list_all_tenable_search_was_user_templates

Search user-defined templates in Tenable WAS that are available for scan configurations. Returns: user_template_id, container_id, template_id, template_name, name, description, owner_id, default_permissions, user_permissions, results_visibility, permissions, is_shared, created_at, updated_at, settings, additional_properties.

list_all_tenable_search_was_vulnerabilities

Search vulnerabilities detected by Tenable Web App Scanning (WAS) v2 scans, using a single filter (field, operator, value) or AND/OR filter combinations. Returns: vuln_id, scan_id, plugin_id, created_at, uri, details, attachments, is_page.

create_a_tenable_was_import

Import a Tenable WAS scan that was previously exported in JSON format by uploading the scan file. Returns an empty 202 response on success. Attachments and scan files in DB format can't be imported.

get_single_tenable_was_plugin_by_id

Get details for a specific Tenable Web App Scanning plugin by id. Returns: plugin_id, name, family, solution, description, synopsis, published, patch_published, plugin_modified, plugin_published, vuln_published, risk_factor, see_also, cvss3_base_score, cvss_base_score, cvss_vector, cvss3_vector, cwe, owasp, and 20 more. Required: id.

list_all_tenable_was_plugins

List Tenable Web App Scanning plugins used in scans. Returns each plugin's plugin_id, name, family, and policy.

delete_a_tenable_was_scan_by_id

Delete a Tenable WAS scan by id. Removes the scan and all vulnerabilities it detected by creating an asynchronous deletion job. Returns an empty 202 response on success. Cannot delete a scan that is currently running. Required: id.

get_single_tenable_was_scan_by_id

Get details of a specific Tenable WAS scan by id. Returns: scan_id, parent_id, asset_id, user_id, config_id, target, created_at, updated_at, requested_action, status, metadata, started_at, finalized_at, template_name, scanner, notes. Required: id.

update_a_tenable_was_scan_by_id

Update the status of a Tenable Web App Scanning scan by setting requested_action to pause, resume, or stop; the action must be valid for the scan's current status (e.g. pause or stop a running scan, resume a paused scan) and is processed asynchronously as an update job. Returns an empty 202 response on success. Required: id, requested_action.

get_single_tenable_was_template_by_id

Get the details of a Tenable-provided template in Tenable WAS for use in scan configurations. Returns: template_id, name, description, plugin_state, scanner_types, settings, defaults, plugins. Required: id.

list_all_tenable_was_templates

List Tenable-provided templates in Tenable WAS that are available for scan configurations. Returns a paginated list where each template includes template_id, name, description, plugin_state, scanner_types, settings, defaults, and plugins.

delete_a_tenable_was_user_template_by_id

Delete a Tenable WAS user-defined template by id. Returns an empty 202 response on success; the deletion runs as an asynchronous job. Required: id. A template still used by a scan configuration cannot be deleted.

get_single_tenable_was_user_template_by_id

Get details for a user-defined template in Tenable Web App Scanning. Returns: user_template_id, container_id, template_id, template_name, name, description, owner_id, default_permissions, user_permissions, results_visibility, permissions, is_shared, created_at, updated_at, settings, additional_properties. Required: id.

update_a_tenable_was_user_template_by_id

Update a Tenable WAS user-defined template. Returns the updated template including user_template_id, name, description, default_permissions, results_visibility, permissions, and settings. Required: id, name, owner_id, default_permissions, results_visibility, permissions, template_id, settings. Null properties leave current values unchanged.

get_single_tenable_was_vulnerability_by_id

Get the details of a specific vulnerability instance in Tenable WAS by id. Returns: vuln_id, scan_id, plugin_id, created_at, uri, details, attachments, is_page. Required: id.

create_a_tenable_agent_directive

Send an instruction to an individual Tenable agent to restart it or change its local product settings. Returns: uuid, id, container_uuid, sensor_uuid, owner_uuid, type, status, options, created, modified, ttl, results_blob_size. Only one restart instruction can be in progress per agent at a time. Required: agent_id, type.

delete_a_tenable_agent_group_agent_by_id

Remove an agent from an agent group in Tenable Vulnerability Management. Returns an empty 200 response on success. Required: id, group_id, agent_id.

list_all_tenable_agent_group_agents

List Tenable agents belonging to a specific agent group, with filter, wildcard, and sort support. Returns agent records including id, uuid, name, platform, distro, ip, last_scanned, status, groups, and health_state_name. Required: agent_group_id. Max 5000 per page.

update_a_tenable_agent_group_agent_by_id

Add an agent to an agent group in Tenable Vulnerability Management. Returns an empty 200 response on success. Required: id, group_id, agent_id.

create_a_tenable_agent_group_bulk_directive

Send an instruction (agent restart or local product settings change) to the agents in a Tenable agent group, selecting targets via criteria and excluding specific agents via not_items. Returns a bulk task identifier for polling via the agent task status endpoints. Required: group_id.

get_single_tenable_agent_group_bulk_job_by_id

Check the status of a bulk operation on a Tenable agent group, such as an add or remove agents task. Returns the bulk-operation status object; field values reflect the task's current processing state. Required: group_id, id.

get_single_tenable_agents_bulk_by_id

Get the status of an asynchronous bulk agent task in Tenable Vulnerability Management by polling with the task's UUID (the task_id value returned by the endpoint that created the task). Returns: task_id, message. Required: id.

list_all_tenable_agents_configs

Get the global agent configuration in Tenable. Returns: auto_unlink, concurrent_update, software_update, hybrid_scanning_enabled.

tenable_agents_configs_bulk_update

Update the global agent configuration in Tenable. Returns: auto_unlink, concurrent_update, software_update, hybrid_scanning_enabled. Omitted settings keep their current values.

create_a_tenable_agents_exclusion

Create a new agent exclusion in Tenable. Returns the created exclusion including its id, name, uuid, schedule, and creation_date. Requires name and schedule. Required: name, schedule.

delete_a_tenable_agents_exclusion_by_id

Delete an agent exclusion in Tenable Vulnerability Management by id. Returns an empty 204 response on success. Required: id.

get_single_tenable_agents_exclusion_by_id

Get details of a specific Tenable agent exclusion by id. Returns: description, name, uuid, creation_date, last_modification_date, id, core_updates_blocked, schedule. Required: id.

list_all_tenable_agents_exclusions

List all current Tenable agent exclusions. Returns an exclusions array where each exclusion includes id, name, uuid, schedule, creation_date, and last_modification_date.

update_a_tenable_agents_exclusion_by_id

Update an existing Tenable agent exclusion by id. Returns the updated exclusion including id, name, uuid, schedule, and last_modification_date. Required: id, schedule.

list_all_tenable_agents_safe_mode_summaries

Get a summary of Tenable agents in safe mode for your container. Returns: container_uuid, user_uuid, site, agent_safe_mode_count, time_stamp. Agent safe mode requires agent version 10.9.0 or later.

list_all_tenable_asset_assignments

List tags assigned to a Tenable Vulnerability Management asset. Returns the tags array of tag assignments, each with value_uuid, category_name, value, source, and created_at; an empty list is returned when the asset has no tags. Required: asset_uuid.

create_a_tenable_assets_assignment

Add or remove tags from one or more assets in Tenable. Queues an asynchronous asset update job and returns its identifier. Returns: job_uuid. Required: action, assets, tags.

list_all_tenable_assets_filters

List the asset tag filters in Tenable that can be used to create dynamic tag rule conditions. Returns filters with name, readable_name, operators, and a control object describing how to match values. Some system filters (cloud.common.resource_tags.key/value) are supported but not returned.

list_all_tenable_audit_log_events

List activity log events for all users in your Tenable Vulnerability Management account. Returns events with id, action, crud, received, actor, target, and fields, plus pagination. Optional filters: f (field.operator:value conditions), ft (and/or), and sort (received only). Defaults to 50 events per page; max 10000. Data is retained for three…

create_a_tenable_aws_cloudtrail

List the AWS CloudTrail trails available in Tenable for use when creating an AWS connector. Returns the trails array with each trail's arn, name, region, and availability. Required: region.

create_a_tenable_connector_import

Trigger an asynchronous data import for a Tenable cloud connector. Returns the connector object including its id, name, status, status_message, and last_sync_time — check status_message to track the import. Required: connector_id.

create_a_tenable_connectors_cloudformation_template

Download the CloudFormation Template (CFT) for an AWS Frictionless Assessment connector in Tenable. Returns: template_content, tio_external_id, tio_bucket_region, tio_site, kms_arn, Cloud_Connectors_cloud. Required: connector_id, account_id.

list_all_tenable_counts_assets_not_seen_ins

Get the asset count for a Tenable network, including the total number of assets and how many have not been seen for the given number of days. Returns: numAssetsNotSeen, numAssetstotal, numAssetsTotal. Required: network_id, num_days (1-365).

create_a_tenable_credential

Create a managed credential in Tenable Vulnerability Management for use when configuring and running scans. Returns: uuid. Required: name, type, settings; the name must be unique within your instance.

delete_a_tenable_credential_by_id

Delete a managed credential by id in Tenable Vulnerability Management; the credential is also removed from any scan that uses it. Returns: deleted. Required: id.

get_single_tenable_credential_by_id

Get the details of a managed credential by id in Tenable Vulnerability Management. Returns: name, description, category, type, ad_hoc, user_permissions, settings, permissions. Required: id.

list_all_tenable_credentials

List managed credentials in Tenable Vulnerability Management that you can use in scans. Returns: credentials, pagination. Excludes scan-specific and policy-specific credentials.

update_a_tenable_credential_by_id

Update a managed credential by id in Tenable Vulnerability Management. Returns: updated. Required: id. The credential type cannot be changed after creation.

create_a_tenable_credentials_file

Upload a credentials file for use with a managed credential in Tenable Vulnerability Management (for example, a private key file for an SSH credential). Returns: fileuploaded. Cookie files must follow the Netscape cookies file format. Required: fileType.

list_all_tenable_credentials_types

List all credential types supported for managed credentials in Tenable Vulnerability Management. Returns the credentials array of credential categories, each with id, category, default_expand, and types — per-type id, name, max instances, expand_settings, and configuration settings.

create_a_tenable_exclusion

Create a new scan exclusion in Tenable Vulnerability Management. Returns the created exclusion including id, uuid, name, members, description, schedule, and network_id. Required: name, members.

delete_a_tenable_exclusion_by_id

Delete the specified exclusion in Tenable by id. Returns an empty 204 response on success. Required: id.

get_single_tenable_exclusion_by_id

Get the details of a single scan exclusion in Tenable Vulnerability Management by id. Returns: uuid, members, name, description, id, schedule, creation_date, last_modification_date, network_id. Required: id.

list_all_tenable_exclusions

List scan exclusions configured for Tenable Vulnerability Management scans. Returns exclusions with uuid, members, name, description, id, schedule, creation_date, last_modification_date, and network_id, plus pagination metadata. Default 200 per page, max 500.

update_a_tenable_exclusion_by_id

Update an existing scan exclusion in Tenable Vulnerability Management by id. Returns the updated exclusion including id, uuid, name, members, description, schedule, and last_modification_date. Required: id, name, members.

create_a_tenable_exclusions_import

Import exclusions into Tenable Vulnerability Management from an exclusion import file. Returns a list of saved exclusions with fields including id, name, description, uuid, and creation_date. Required: file. Imported exclusions are assigned to the default network; network_id is not supported on import.

list_all_tenable_network_assignable_scanners

List all scanners and scanner groups not yet assigned to a custom network in Tenable, including default-network scanner groups and ungrouped scanners. Returns: scanners. Required: network_id.

tenable_network_scanners_assign

Assign a scanner or scanner group to a network in Tenable Vulnerability Management, or return one to the default network. Returns an empty 200 response on success. Required: network_id, scanner_id.

create_a_tenable_network_scanner

Bulk assign scanners and scanner groups to a network in Tenable Vulnerability Management. The payload overwrites the full list of scanners and scanner groups previously assigned to the network; omitted ones return to the default network. Returns an empty 200 response on success. Required: network_id, scanner_uuids.

list_all_tenable_network_scanners

List all scanners and scanner groups belonging to a specified Tenable network object. Returns the scanners array; each scanner includes id, name, uuid, status, type, platform, group, last_connect, and network_name. Required: network_id.

create_a_tenable_network

Create a network object in Tenable Vulnerability Management to associate with scanners and scanner groups. Returns: owner_uuid, created, modified, uuid, name, description, is_default, assets_ttl_days, created_in_seconds, modified_in_seconds, and 5 more. Required: name. assets_ttl_days must be 14-365; AWS assets cannot be added to network objects.

delete_a_tenable_network_by_id

Delete a Tenable network by id. Returns an empty 204 response on success. Required: id. The default network cannot be deleted; scanners and scanner groups on the deleted network return to the default network.

get_single_tenable_network_by_id

Get the details of a network object in Tenable Vulnerability Management by id. Returns: owner_uuid, created, modified, uuid, name, description, is_default, created_by, modified_by, deleted, deleted_by, assets_ttl_days, created_in_seconds, modified_in_seconds, scanner_count. Required: id.

list_all_tenable_networks

List network objects for your organization in Tenable Vulnerability Management. Returns the networks array (each item has uuid, name, description, is_default, scanner_count) with pagination details.

update_a_tenable_network_by_id

Update a network object in Tenable Vulnerability Management by id. Returns: owner_uuid, created, modified, uuid, name, description, is_default, created_by, modified_by, deleted, deleted_by, assets_ttl_days, created_in_seconds, modified_in_seconds, and 1 more. Required: id, name. The default network cannot be updated; assets_ttl_days must be 14-365.

create_a_tenable_null_agent_group

Create a new agent group in Tenable Vulnerability Management. Returns the created group's id, uuid, name, creation_date, owner, and agents_count. Required: name.

delete_a_tenable_null_agent_group_by_id

Delete a Tenable agent group by id. Returns an empty 200 response on success. Required: id.

get_single_tenable_null_agent_group_by_id

Get details for a single agent group in Tenable by id, including the agent records that belong to the group. Returns: id, uuid, name, creation_date, last_modification_date, timestamp, shared, owner, owner_id, owner_name, owner_uuid, user_permissions, agents_count, agents. Required: id, group_id.

list_all_tenable_null_agent_groups

List all agent groups in Tenable Vulnerability Management. Returns the list of groups, each with id, uuid, name, creation_date, and agents_count.

update_a_tenable_null_agent_group_by_id

Update the name of a Tenable agent group by id. Returns the updated group object including its id, uuid, name, agents_count, user_permissions, and modified_in_seconds. Required: id, name.

delete_a_tenable_null_agent_by_id

Unlink a Tenable Vulnerability Management agent by id, removing it from its scanner. Returns an empty 204 response on success. Required: id.

get_single_tenable_null_agent_by_id

Get details of a specific Tenable agent by id. Returns: id, uuid, name, platform, distro, ip, last_scanned, plugin_feed_id, core_build, core_version, linked_on, last_connect, status, aws_public_ipv4, aws_public_hostname, aws_instance_id, aws_account_id, supports_remote_logs, remote_settings, health, health_events, groups, and 13 more. Required: id.

list_all_tenable_null_agents

List Tenable agents for the scanner. Returns each agent's id, uuid, name, platform, distro, ip, status, health_state_name, and groups.

update_a_tenable_null_agent_by_id

Rename a Tenable agent by id. Returns the updated agent details including id, uuid, name, platform, status, health_state_name, and groups. Required: id, name.

list_all_tenable_profiles_feed_versions

List the latest Tenable plugin feed versions available to scanner and agent profiles. Returns an array of feed version timestamp strings, newest first, covering the last 30 days. Takes no parameters.

create_a_tenable_recast_rule

Create a recast or accept rule in Tenable. Returns the created rule including rule_id, rule_name, rule_value, filter, resource_type, and disabled_details. Required: resource_type, rule_value, filter.

delete_a_tenable_recast_rule_by_id

Delete a recast or accept rule in Tenable by id. Returns an empty 204 response on success. Required: id.

get_single_tenable_recast_rule_by_id

Get the details of a specific recast or accept rule in Tenable by id. Returns: rule_value, rule_name, rule_id, container_id, created_by, updated_by, created_at, updated_at, last_processed_at, description, resource_type, filter, expires_at, disabled_details. Required: id.

tenable_recast_rules_search

Search Tenable recast or accept rules matching filter criteria. Returns matching rules (rule_id, rule_name, rule_value, filter, resource_type) and pagination. Max 500 per page.

update_a_tenable_recast_rule_by_id

Update a recast or accept rule in Tenable by id. Returns the updated rule including rule_id, rule_name, rule_value, filter, and disabled_details. Required: id, resource_type, rule_value, filter.

create_a_tenable_scan_control

Control a running scan on a Tenable scanner by sending a stop, pause, or resume action. Returns an empty response on success. Required: scanner_id, scan_uuid, action.

list_all_tenable_scanner_aws_targets

List AWS scan targets for a Tenable scanner. Returns: scanner_id, instance_id, private_ip, public_ip, state, zone, type, name. Required: scanner_id. Only returns results when the specified scanner is an Amazon Web Services scanner.

create_a_tenable_scanner_directive

Create a directive for a Tenable scanner to perform, such as restarting the scanner service or changing its settings. Returns: container_uuid, uuid, sensor_uuid, owner_uuid, type, status, created, modified, results_blob_size, options, ttl, id. Required: scanner_uuid, type.

list_all_tenable_scanner_group_routes

List the scan routes that Tenable Vulnerability Management matches against targets in auto-routed scans for a scanner group. Returns a list of route entries, each with a route target (hostname, hostname wildcard, IP address, CIDR range, or IP address range). Required: group_id.

tenable_scanner_group_routes_bulk_update

Set the scan routes (hostnames, hostname wildcards, IP addresses, and IP address ranges) that Tenable Vulnerability Management matches against targets in auto-routed scans for a scanner group. Returns an empty response body on success. Required: group_id, routes.

create_a_tenable_scanner_group_scanner

Add a scanner to a scanner group in Tenable. Returns an empty 200 response on success. Required: group_id, scanner_id. Verify the addition using the List scanners within scanner group endpoint.

delete_a_tenable_scanner_group_scanner_by_id

Remove a scanner from a scanner group in Tenable. Returns an empty 200 response on success. Required: id, group_id, scanner_id.

list_all_tenable_scanner_group_scanners

List the scanners that belong to a Tenable scanner group. Returns the scanners array; each scanner includes id, name, status, uuid, and type. Required: group_id.

create_a_tenable_scanner_group

Create a scanner group in Tenable Vulnerability Management. Returns: creation_date, last_modification_date, owner_id, owner, owner_uuid, default_permissions, scan_count, uuid, type, name, id, owner_name. Required: name. New groups are automatically assigned to the default network; scan routes cannot be configured here.

delete_a_tenable_scanner_group_by_id

Delete a scanner group in Tenable by id. Returns an empty 204 response on success. Required: id.

get_single_tenable_scanner_group_by_id

Get details for a single Tenable scanner group by id. Returns: creation_date, last_modification_date, owner_id, owner, default_permissions, user_permissions, shared, scan_count, scanner_count, uuid, token, flag, type, name, network_name, id, scanner_id, scanner_uuid, and 3 more. Required: id. Does not return the group's configured scan routes.

list_all_tenable_scanner_groups

List scanner groups in your Tenable Vulnerability Management instance. Returns each group's id, name, uuid, type, network_name, and scanner_count.

update_a_tenable_scanner_group_by_id

Update a Tenable scanner group's name by id. Returns: owner_uuid, created, modified, container_uuid, uuid, id, name, type, distributed, network_name, default_permissions, shared, user_permissions, supports_webapp, created_in_seconds, modified_in_seconds. Required: id, name. Cannot assign the group to a network or modify its scan routes.

get_single_tenable_scanner_key_by_id

Get a Tenable scanner's linking key by id. Returns: key. Required: id (the scanner's ID or UUID; the default UUID 00000000-0000-0000-0000-00000000000000000000000000001 retrieves the container's current linking key).

tenable_scanner_links_bulk_update

Toggle the link state of a Tenable scanner by id, enabling or disabling its link. Returns an empty 200 response on success. Required: scanner_id, link.

list_all_tenable_scanner_scans

List the scans currently running on a Tenable scanner. Returns scan records with scan_id, name, status, scanner_uuid, id, user, start_time, last_modification_date, and network_id. Required: scanner_id.

tenable_scanners_bulk_directives

Send directive instructions to multiple Tenable scanners in bulk. Returns the created directive tasks including id, uuid, type, status, created, modified, options, and ttl. Requires a directive payload plus scanner targets (scanners list or all_scanners).

delete_a_tenable_scanner_by_id

Delete a scanner in Tenable Vulnerability Management by id, deleting and unlinking it from the platform. Returns an empty 204 response on success. Required: id. The built-in local scanner cannot be deleted.

get_single_tenable_scanner_by_id

Get details for a single Tenable scanner by id. Returns the full scanner object including id, name, status, type, hostname, platform, owner_uuid, last_connect, and engine_version. Required: id.

list_all_tenable_scanners

List all scanners in Tenable. Returns scanner records including id, name, status, type, uuid, network_name, owner_uuid, and last_connect.

update_a_tenable_scanner_by_id

Update a Tenable scanner by id (rename it, force plugin/UI updates, set a registration code, or adjust the AWS check-in interval). Returns the updated scanner including id, name, status, uuid, and network_name. Required: id. Cannot assign the scanner to a network—use the Assign scanners endpoint instead.

create_a_tenable_scanners_bulk_assign_to_profile

Assign one or more Tenable scanners to a scanner profile. Starts an asynchronous bulk operation task you can poll for status. Returns: message, request_status_id. Required: profile_uuid, scanner_uuids.

tenable_scanners_bulk_assign_to_profiles_bulk_delete

Remove one or more scanners from a Tenable scanner profile. Starts an asynchronous bulk operation task. Returns: message, request_status_id.

list_all_tenable_scanners_configs

Get the global scanner configuration settings in Tenable, including concurrent update limits. Returns: concurrent_update.

tenable_scanners_configs_bulk_update

Update the global scanner configuration settings in Tenable. Requires a concurrent_update body; omitted settings keep their current values. Returns: concurrent_update.

get_single_tenable_scanners_request_status_by_id

Get the current status of an asynchronous scanner bulk-operation task in Tenable. Returns: container_uuid, type, id, status, created, modified, expiration. Only supports tasks initiated by the Assign to / Remove from scanner profile endpoints. Required: id.

create_a_tenable_sensor_linking_key

Generate a single-use OT connector linking key in Tenable, valid for two hours, together with the account's target site needed when creating an OT connector. Returns: x-linking-key, x-target-site. Required: type.

create_a_tenable_sensor

Create a new OT connector in Tenable. Returns the created connector with id, name, type, subType, enabled, and the authentication token used to connect to Tenable Vulnerability Management. Required: name, subType, enabled. Requires a pre-generated linking key.

delete_a_tenable_sensor_by_id

Delete an OT connector in Tenable by its id. Returns an empty JSON object on success. Required: type, id.

get_single_tenable_sensor_by_id

Get details for a single Tenable OT connector by id. Returns: containerUuid, id, name, type, subType, created, modified, lastAuth, enabled. Required: type, id.

list_all_tenable_sensors

List Tenable OT connectors of a given type. Returns connectors with id, name, type, subType, enabled, created, modified, and lastAuth. Required: type. Max 200 per page.

update_a_tenable_sensor_by_id

Update an OT connector in Tenable by its id; the request body can also be used to enable or disable the connector. Returns an empty JSON object on success. Requires a JSON request body. Required: type, id.

tenable_sensors_profiles_clone

Clone an existing Tenable sensor profile (sensor_type: agent or scanners). Returns the uuid of the cloned profile. Required: sensor_type, profile_uuid, name.

create_a_tenable_sensors_profile

Create a new Tenable sensor profile (sensor_type: agent or scanners). Returns the uuid of the newly created profile. Required: sensor_type, name.

delete_a_tenable_sensors_profile_by_id

Delete a Tenable sensor profile by id; assigned agents or scanners are reassigned to the default profile. Returns task_id, container_uuid, status, and message for agent profiles, or request_status_id and message for scanner profiles. Required: sensor_type, id.

get_single_tenable_sensors_profile_by_id

Get details for a single Tenable sensor profile by id (sensor_type: agent or scanners). Returns: name, description, profile_uuid, created, updated, config. Required: sensor_type, id.

list_all_tenable_sensors_profiles

List Tenable sensor profiles (sensor_type: agent or scanners). Returns a profiles array where each profile includes name, description, profile_uuid, created, updated, and config. Required: sensor_type.

update_a_tenable_sensors_profile_by_id

Update a sensor profile in Tenable by id. The profile type is determined by sensor_type, which must be either 'agent' or 'scanners'. Returns an empty response body on success. Required: id, sensor_type, name.

list_all_tenable_server_properties

List the server properties of your Tenable Vulnerability Management container, including the server version and other container properties. Returns: capabilities, enterprise, expiration, expiration_time, idle_timeout, license, plugin_set, server_version, server_uuid, update, analytics, server_build, region, evaluation, and 13 more.

list_all_tenable_server_status

Get the Tenable server status. Returns: status, code. Status can be loading, ready, corrupt-db, feed-expired, eval-expired, locked, register, register-locked, download-failed, or feed-error.

create_a_tenable_settings_connector

Create a new Tenable cloud connector. Returns the created connector object including its id, name, type, status, schedule, and params.

delete_a_tenable_settings_connector_by_id

Delete a Tenable cloud connector by its UUID. Returns an empty 204 response on success. Required: id.

get_single_tenable_settings_connector_by_id

Get the details of a specific Tenable cloud connector by id. Returns the connector object including its id, name, type, status, schedule, and params. Required: id.

list_all_tenable_settings_connectors

List all Tenable cloud connectors. Returns the connectors array (each with id, name, type, status, schedule, and params) plus pagination details.

update_a_tenable_settings_connector_by_id

Update a Tenable cloud connector by id — you can change its name, service accounts, and schedule but not its type. Returns: id. Required: id.

create_a_tenable_tags_category

Create a new tag category in Tenable. Returns the created category's uuid, name, description, created_at, updated_at, and reserved flag. Required: name.

delete_a_tenable_tags_category_by_id

Delete a Tenable tag category by id (the category's UUID). Deleting the category also deletes all tag values in it and removes those tags from any assets where they were assigned. Returns an empty 204 response on success. Required: id.

get_single_tenable_tags_category_by_id

Get the details of a single tag category in Tenable by id. Returns: uuid, name, description, created_at, created_by, updated_at, updated_by, reserved. Required: id.

list_all_tenable_tags_categories

List tag categories in Tenable. Returns each category's uuid, name, description, created_at, updated_at, and reserved flag.

update_a_tenable_tags_category_by_id

Update a tag category in Tenable by id. Returns the updated category's uuid, name, description, created_at, updated_at, and reserved flag. Required: id, name.

create_a_tenable_tags_value

Create a tag value in Tenable Vulnerability Management. Returns: uuid, created_at, created_by, updated_at, updated_by, category_uuid, value, description, type, category_name, access_control, and 2 more. Specify the tag category via category_name or category_uuid; tag values max 50 characters and cannot contain commas. Required: value.

delete_a_tenable_tags_value_by_id

Delete a tag value in Tenable Vulnerability Management by id. The tag is also removed from any assets where it was assigned; the tag category is retained. Returns an empty 204 response on success. Required: id.

get_single_tenable_tags_value_by_id

Get the details of a single Tenable tag value by id. Returns: uuid, created_at, created_by, updated_at, updated_by, category_uuid, value, description, type, category_name, category_description, access_control, filters. Required: id.

list_all_tenable_tags_values

List tag values in Tenable Vulnerability Management. Returns each value's uuid, value, category_name, category_uuid, type, description, and access_control. The list can also include tag categories that have no associated values.

update_a_tenable_tags_value_by_id

Update a Tenable tag value by id. Returns: uuid, created_at, created_by, updated_at, updated_by, category_uuid, value, description, type, category_name, category_description, access_control, filters. Required: id. Include version from the most recent read of the tag value.

create_a_tenable_target_group

Create a target group in Tenable. Returns: acls, id, default_group, name, members, type, owner, owner_id, last_modification_date, shared, user_permissions, uuid, owner_uuid, creation_date. Required: name, members. Target groups are deprecated as of February 2022 — Tenable recommends tags instead.

delete_a_tenable_target_group_by_id

Delete a target group in Tenable Vulnerability Management by id. Returns an empty 204 response on success. Required: id. Target groups are deprecated — Tenable recommends using tags to group assets instead.

get_single_tenable_target_group_by_id

Get details for a single Tenable target group by id. Returns: acls, id, default_group, name, members, type, owner, owner_id, last_modification_date, shared, user_permissions, uuid, owner_uuid, creation_date. Required: id.

list_all_tenable_target_groups

List the current target groups in Tenable. Returns each group's id, name, members, acls, owner, uuid, creation_date, and last_modification_date.

update_a_tenable_target_group_by_id

Update a Tenable target group by id with a new name, members list, or ACLs. Returns: acls, id, default_group, name, members, type, owner, owner_id, last_modification_date, shared, user_permissions, uuid, owner_uuid, creation_date. Required: id.

list_all_tenable_value_exclusions

List the assets excluded from a Tenable dynamic tag value. Returns: value_uuid, container_uuid, asset_uuid, ipv4, sources, name. Returns an empty list when the tag has no exclusions. Required: tag_value_uuid.

create_a_tenable_values_delete_request

Delete tag values in bulk in Tenable. Returns an empty response on success. Deleted asset tags are also removed from assigned assets; categories are retained and must be deleted separately.

create_a_tenable_bulk_add_to_network

Create a bulk operation task that adds agents to a custom network in Tenable. The operation runs asynchronously; use the returned task_id with the agent task status endpoint to track progress. Returns: task_id. Required: network_uuid.

create_a_tenable_bulk_add

Create a bulk operation task that adds the agents selected by the request-body filter to a Tenable agent group. Returns: task_id. Required: group_id.

create_a_tenable_bulk_assign_to_profile

Create an asynchronous bulk operation task in Tenable that assigns agents to an agent profile, or removes the selected agents from their profile when profile_uuid is omitted. Returns: task_id. Select agents via criteria (e.g. {"all_agents": true}) and not_items.

create_a_tenable_bulk_directive

Create an asynchronous bulk directive task for Tenable agents — e.g. restart agents or change local product settings — selected by filter criteria. Returns: task_id. Requires criteria and directive.

create_a_tenable_bulk_remove_from_network

Create an asynchronous bulk task in Tenable Vulnerability Management that removes agents from a custom network; removed agents move to the Default network. Returns: task_id. Required: network_uuid.

create_a_tenable_bulk_remove

Create a bulk operation task to remove agents from a Tenable agent group. Returns: task_id. Required: group_id. The JSON body selects the agents to remove via a criteria object (e.g. all_agents) with optional not_items agent ids to exclude.

create_a_tenable_bulk_unlink

Create a bulk operation task to unlink Tenable Vulnerability Management agents matching the given criteria. Returns: task_id. The unlink runs asynchronously; use the returned task_id to track progress or completion via the agent task status endpoint.

create_a_tenable_access_group

Create an access group in Tenable Vulnerability Management. Returns: container_uuid, created_at, updated_at, id, name, all_assets, all_users, status, created_by_uuid, created_by_name, updated_by_uuid, updated_by_name, processing_percent_complete, rules. Required: name, rules. Deprecated February 4, 2022; Tenable recommends access control instead.

delete_a_tenable_access_group_by_id

Delete a Tenable access group by id. Returns an empty 204 response on success. Access groups are deprecated in Tenable Vulnerability Management; Tenable recommends using access control instead. Required: id.

get_single_tenable_access_group_by_id

Get details for a specific access group in Tenable Vulnerability Management by id. Returns: container_uuid, created_at, updated_at, id, name, all_assets, all_users, status, rules, principals, created_by_uuid, created_by_name, updated_by_uuid, updated_by_name, and 2 more. Deprecated February 4, 2022; use access control instead. Required: id.

list_all_tenable_access_groups

List access groups in Tenable Vulnerability Management without their associated rules. Returns: container_uuid, created_at, updated_at, id, name, all_assets, all_users, status, created_by_uuid, created_by_name, updated_by_uuid, updated_by_name, and 2 more. Deprecated February 4, 2022; Tenable recommends access control instead.

update_a_tenable_access_group_by_id

Update an access group in Tenable Vulnerability Management by id; the request overwrites the existing data. Returns: container_uuid, created_at, updated_at, id, name, all_assets, all_users, status, rules, principals, created_by_uuid, created_by_name, updated_by_uuid, and 4 more. Required: id. Deprecated February 4, 2022; use access control instead.

create_a_tenable_access_groups_access_group

Create a Tenable access group. Returns the created group including id, name, access_group_type, status, rules, and principals; processing is asynchronous. Required: name.

delete_a_tenable_access_groups_access_group_by_id

Delete a Tenable access group by id. Returns an empty 204 response on success. Caution: access groups were deprecated in Tenable Vulnerability Management in February 2022 — use access control instead. Required: id.

get_single_tenable_access_groups_access_group_by_id

Get a single Tenable access group by id. Returns: container_uuid, created_at, updated_at, id, name, all_assets, version, status, access_group_type, rules, principals, created_by_uuid, updated_by_uuid, updated_by_name, created_by_name, processing_percent_complete. Required: id.

list_all_tenable_access_groups_access_groups

List Tenable access groups for your container. Returns each group's id, name, access_group_type, status, rules, and principals.

update_a_tenable_access_groups_access_group_by_id

Update a Tenable access group by id. Returns the updated group including id, name, access_group_type, status, rules, and principals; processing is asynchronous. Required: id.

list_all_tenable_access_groups_filters

List the available filters for access groups in Tenable Vulnerability Management. Returns: operators, control, name, readable_name. Takes no parameters. Access groups are deprecated as of February 2022; use Tenable access control instead.

create_a_tenable_two_factor_send_verification

Send a one-time verification code to a Tenable Vulnerability Management user's phone number to begin enabling two-factor authentication. Returns an empty 200 response on success. Required: user_id, sms_phone.

tenable_two_factor_verify_codes_verify

Validate the two-factor authentication verification code sent to a Tenable user's phone number, enabling two-factor authentication for that user on success. Returns an empty 200 response on success. Required: user_id, verification_code. Must follow a send-verification-code request.

tenable_user_two_factors_bulk_update

Configure two-factor authentication settings for a user in Tenable Vulnerability Management. Returns an empty response on success. Send and validate a verification code before calling. Required: user_id, email_enabled, sms_enabled, sms_phone.

list_all_tenable_vulnerabilitie_outputs_vulnerabilities

List the vulnerability outputs for a plugin recorded on a specified asset in Tenable Vulnerability Management. Returns: plugin_output, states. Required: asset_id, plugin_id. Not intended for large or frequent exports; the list is limited to 5,000 outputs.

list_all_tenable_access_groups_filters_access_groups

List the available access group filters in Tenable Vulnerability Management. Returns for each filter: operators, control, name, and readable_name.

list_all_tenable_rules_filters

List the available filters for asset rules in Tenable. Returns each filter's name, search_value, property_target, conditions, and search_only. Takes no parameters. Access groups and their rules were deprecated in Tenable Vulnerability Management on February 4, 2022 — Tenable recommends using access control instead.

list_all_tenable_rules_filters_rules

List the available asset rule filters in Tenable for building access group rules. Returns filter records including name, readable_name, supported operators, placeholder text, and input control settings (type, regex, or a value list). Access groups are deprecated in Tenable Vulnerability Management — Tenable recommends using access control instead.

get_single_tenable_azure_fa_arm_template_by_id

Download the Azure Resource Manager (ARM) template for a Microsoft Azure Frictionless Assessment connector in Tenable Vulnerability Management. Returns the deployment template document including $schema, contentVersion, variables, and resources. Required: id.

list_all_tenable_account_domains

List domains for a specified child account in Tenable. Returns the child account's domain entries, each including its label and value. Required: account_uuid (the child account's UUID).

create_a_tenable_accounts_eval

Create a Tenable evaluation account granting 30 days of trial access to the specified Tenable applications. Deprecated in favor of Create evaluation account v2; activation can take up to five minutes. Returns: success, message, name, uuid. Required: email, country.

create_a_tenable_accounts_evals_eval

Create a Tenable MSSP evaluation account granting the customer 30 days of trial access to the specified applications. Returns: success, message, name, uuid. Required: customer_name, licensed_apps, default_contact_email, email, admin_username, country. Requires customer_name, licensed_apps, default_contact_email, email, admin_username, and country.

create_a_tenable_accounts_quote

Create a quote for a customer account in Tenable MSSP. Returns: success, message, name, uuid. Requires admin_username, customer_name, partner, distributor, licensed_apps, contact, region, requester, and licensee. Required: admin_username, customer_name, partner, distributor, licensed_apps, contact, region, requester, licensee.

list_all_tenable_assets_lists

List the PCI assets attested in a Tenable PCI ASV attestation. Returns: excluded, undisputed_failure_count, address, fqdn, attestation_uuid, name, scan_uuid, operating_system, failure_count, scan_name, uuid, scan_date. Required: attestation_id, attestation_uuid.

list_all_tenable_assets_properties

List the asset properties available in Tenable Exposure Management that can be used as filters on other inventory endpoints such as Search assets and Export assets. Returns: properties array where each entry includes key, readable_name, control metadata, and 2 more fields. The endpoint is in beta; its response structure is subject to change.

list_all_tenable_assets_status

List Tenable asset export jobs submitted in the last 3 days, sorted by most recent refresh time. Returns: export_id, submitted_at, last_refreshed_at, status, export_type. Up to 1,000 jobs per request.

get_single_tenable_attestations_detail_by_id

Get the details of a specific PCI attestation in Tenable by its UUID. Returns: owner, latest_comment, submitted_at, assessor, dispute_count, customer_uuid, attestation_internal_notes_count, uuid, name, status, and 16 more. Required: id (the attestation UUID). API access to this endpoint must be requested through Tenable support.

list_all_tenable_attestations_lists

List PCI attestations in Tenable PCI ASV. Returns each attestation's uuid, name, status, owner, failure_count, asset_count, and created_at. Requires API access enabled by Tenable support even with a valid PCI ASV license.

list_all_tenable_detail_disputes

List the disputes for a specified PCI attestation in Tenable. Returns: severity, owner, reason, plugin_id, latest_comment, customer_uuid, created_at, failure_count, explanation, plugin_name, created_by, uuid, updated_at, scan_date, status, and 5 more. Required: attestation_uuid. Endpoint access must be enabled through Tenable support.

create_a_tenable_export_asset

Create an asset export in Tenable for assets in your organization that match the specified search criteria. Returns: export_id. The export request is queued and processed asynchronously; this beta endpoint's response structure is subject to change.

create_a_tenable_export_finding

Queue a findings export in Tenable that matches the specified search criteria. Returns: export_id. No required parameters; filters and query in the body are optional. Beta endpoint; response structure subject to change.

list_all_tenable_findings_properties

List Tenable finding properties that can be used as filters on supported endpoints such as Export findings, including each property's operators and supported values. Returns: key, readable_name, control, operators, sortable, filterable, description. Beta endpoint; response structure is subject to change.

list_all_tenable_findings_status

List Tenable findings export jobs submitted in the last 3 days, sorted by most recent refresh time. Returns: export_id, status, submitted_at, last_refreshed_at, export_type. Up to 1,000 jobs are returned.

create_a_tenable_mssp_account_group

Create a new account group in the Tenable MSSP Portal. Returns: account_group_uuid. Required: name.

get_single_tenable_mssp_account_group_by_id

Get details for a single account group in the Tenable MSSP Portal by id. Returns: accountGroupUuid, parentContainerUuid, name, lastModified, count, accountUuids. Required: id.

list_all_tenable_mssp_account_groups

List account groups in the Tenable MSSP Portal. Returns each group's accountGroupUuid, parentContainerUuid, name, lastModified, count, and accountUuids.

delete_a_tenable_mssp_account_group_by_id

Delete an account group in the Tenable MSSP Portal. Returns an empty response on success. Required: id.

update_a_tenable_mssp_account_group_by_id

Update an account group in the Tenable MSSP Portal, setting its name and the child accounts assigned to it. Returns an empty response on success. Required: id, name.

get_single_tenable_mssp_account_by_id

Get details for a specific child account in the Tenable MSSP Portal. Returns: uuid, container_name, lms_customer_id, custom_name, sso_username, region, licensed_assets, licensed_assets_limit, license_utilization, licensed_apps, notes, logo_uuid, domains, created, modified, site_id, license_expiration_date, country, and 2 more. Required: id.

list_all_tenable_mssp_accounts

List child accounts in the Tenable MSSP Portal, optionally filtered by account group, field conditions, and wildcard search. Returns: uuid, container_name, lms_customer_id, custom_name, sso_username, region, licensed_assets, licensed_assets_limit, license_utilization, licensed_apps, notes, logo_uuid, domains, created, modified, site_id, and 4 more.

list_all_tenable_mssp_accounts_mssp

List the filtering capabilities for Tenable MSSP account endpoints. Returns wildcard_fields and a filters array where each supported filter (e.g. container_name, uuid, licensed_assets, region) carries its name, readable_name, operators, and control settings. No required parameters.

list_all_tenable_scans_lists

List PCI scans in Tenable PCI ASV. Returns: asset_count, updated_at, name, started_at, scan_type, failure_count, cde.uuid, import_status, vulnerability_count, uuid, ended_at, status. API access must be requested through Tenable support even with a valid PCI ASV license.

list_all_tenable_search_t_1_tags

Search Tenable tags in your organization matching specified criteria, with optional sorting and extra properties. Returns: id, name, product, asset_count, weakness_severity_counts, total_weakness_count, type, extra_properties. Max 1000 records per page; this beta endpoint's response structure is subject to change.

list_all_tenable_software_properties

List the software properties in Tenable that can be used as filters on other inventory endpoints, including the supported logical operators and values. Returns: key, readable_name, control, operators, sortable, filterable, description. This endpoint is in beta and its response structure may change.

list_all_tenable_tags_properties

List Tenable tag properties that can be used as filters on endpoints such as tag search, along with the logical operators and supported values for each property. Returns: key, readable_name, control, operators, sortable, filterable, description. Beta endpoint; response structure subject to change.

list_all_tenable_undisputed_lists

List undisputed failures for a Tenable PCI ASV attestation. Returns: severity, plugin_id, cvss_score, address, scan_uuid, duplicate, rerank_type, plugin_name, uuid, protocol, asset_name, port, attestation_uuid, scan_name, scan_date. API access must be enabled through Tenable support. Required: attestation_id, attestation_uuid.

get_single_tenable_accounts_child_container_by_id

Get the change history for the child containers of a Tenable MSSP parent account. Returns: history. Required: id (the parent account UUID).

list_all_tenable_accounts_child_containers

List the Tenable child containers associated with a specified user. Returns: parent_uuid, account_uuids, child_container_uuid. Required: child_container_id, user_uuid.

tenable_accounts_logos_bulk_update

Assign a previously uploaded logo to one or more customer accounts in the Tenable MSSP Portal. Returns an empty JSON object on success. Required: logo_uuid, account_uuids.

create_a_tenable_accounts_mssp_child_key

Generate authorization keys for a Tenable MSSP child container. Returns: parent_container_uuid, child_container_uuid, child_container_site, keys_user_uuid, access_key, secret_key, keys_expiration_epoch_seconds, remote, _validity_info. Required: child_container_uuid. Key validity is capped at 3600 seconds.

list_all_tenable_domains_accounts

List domains and their details for a customer account in Tenable. Returns domains with domain_name, status, type, date_added, and, for secondary domains, host_name and user_name. Required: account_id, account_uuid.

update_a_tenable_domains_account_by_id

Update a domain associated with a customer account in the Tenable MSSP Portal. Returns an empty response body on success. You cannot disable a domain that Tenable Attack Surface Management uses to collect asset data. Required: id (the customer account's UUID).

create_a_tenable_domains_verify_domain

Send an activation code to verify and add a domain to a container in Tenable. Returns: message. Required: container_uuid, domain_name, host_name.

tenable_logos_download

Download a Tenable MSSP logo in PNG format by its UUID. Returns the raw logo file as binary PNG data (image/png) rather than a JSON object. Required: logo_id, logo_uuid.

list_all_tenable_mssp_dashboards

Get data for a Tenable MSSP dashboard widget. Returns customer_licensing_data (customer accounts with a licensing snapshot) or scan_results (per-account scan status counts) depending on the requested widget. Required: widget.

create_a_tenable_mssp_domain

Add a domain to a Tenable MSSP container. Returns: container_uuid, domains, message. Requires: container_uuid, domain_name, activation_code. Required: container_uuid, domain_name, activation_code.

list_all_tenable_mssp_domains

List all Tenable MSSP child containers and their domains. Returns: container_uuid, domains, message.

list_all_tenable_mssp_licenses

Get license details for the Tenable account associated with your API credentials. Returns: license_used, license_purchased.

create_a_tenable_mssp_logo

Add a logo to the Tenable MSSP Portal for later assignment to a customer account. Returns: uuid. The logo must be a PNG no larger than 246x52 pixels. Required: logo, name.

delete_a_tenable_mssp_logo_by_id

Delete a logo from the Tenable MSSP Portal by id. Returns an empty 204 response on success. Required: id.

get_single_tenable_mssp_logo_by_id

Get details for a specific logo in the Tenable MSSP Portal by id. Returns: uuid, container_uuid, name, filename. Required: id.

list_all_tenable_mssp_logos

List all logos uploaded to the Tenable MSSP Portal. Each logo includes: uuid, container_uuid, name, and filename.

update_a_tenable_mssp_logo_by_id

Update a logo in the Tenable MSSP Portal by id; the uploaded file overwrites the existing logo. Returns: uuid. The logo must be a PNG no larger than 246x52 pixels. Required: id, logo, name.

list_all_tenable_partner_details

Get the Tenable MSSP partner details for the account associated with the user's API credentials. Returns: partner, distributor, products.

create_a_tenable_resourcelink_account

Add or update resource links for a Tenable MSSP customer account. Returns: container_uuid, message. Required: account_id, account_uuid, and a body array of resource links (name, url).

list_all_tenable_resourcelink_accounts

List the resource links configured for a Tenable MSSP customer account. Returns each link's name and url. Required: account_id, account_uuid.

create_a_tenable_resourcelink_add_bulk

Bulk add resource links to multiple customer accounts in Tenable. Returns: status. Required: container_uuid_list, resource_links.

tenable_logo_base_64_s_download

Download a Tenable MSSP logo as a Base64-encoded data URI (data:image/png;base64,...) that can be used directly as an image source. Returns the logo as a plain-text data URI string. Required: logo_id, logo_uuid.